Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233392e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          dXTDMTfN7+H8q1bNhHKqOUwNtzJ5kCOKaHXrodYNrto=
Subject key identifier:   4E:BB:68:AF:39:31:F7:90:4A:9C:A9:82:42:BD:B4:D9:56:05:E9:EE
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4115E7D05D113253AC95F40F666262B6DFEA89DC
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 30 Apr 2025 19:00:06 +0000
ROA not before:           Wed 30 Apr 2025 18:55:06 +0000
ROA not after:            Wed 29 Apr 2026 19:00:06 +0000
asID:                     28338
IP address blocks:        189.84.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 11:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:15:e7:d0:5d:11:32:53:ac:95:f4:0f:66:62:62:b6:df:ea:89:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:06 2025 GMT
            Not After : Apr 29 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a5:b4:46:39:4f:3a:d0:71:a0:4a:9c:7d:55:
                    fc:fe:19:51:8a:c4:e8:b6:d1:ed:11:18:6c:7d:5b:
                    04:c5:16:b7:f6:20:10:53:91:96:80:43:1a:f4:b2:
                    54:32:db:f8:ab:ef:6c:7e:99:23:02:10:a2:eb:3e:
                    b8:41:8c:3b:96:d9:cf:1c:36:18:7a:72:d0:6b:36:
                    49:db:81:07:62:4f:d0:f2:6b:28:2d:a9:4e:26:71:
                    c2:61:6d:3d:52:3c:16:65:fc:64:3b:e6:8d:cb:b1:
                    e4:fc:65:19:cf:c0:1d:db:a0:c6:8f:fe:88:7d:8d:
                    ed:7b:38:45:3d:ad:0f:b1:0b:f4:40:7f:0e:5b:f3:
                    5d:bb:b7:8c:76:e7:11:3f:d8:ed:f0:f1:e1:e5:2b:
                    d3:15:54:27:de:23:8a:66:5e:a2:b9:bc:43:20:95:
                    ec:a3:f2:fd:de:08:84:72:1a:49:70:02:a2:b1:e5:
                    01:25:d7:3d:09:11:d4:cb:a6:35:84:15:c1:b8:89:
                    8c:a5:b4:9d:dc:b4:76:bf:13:47:96:9c:ba:ac:b2:
                    ac:08:59:04:4b:27:7a:4d:91:a6:1f:86:b1:84:61:
                    a8:69:df:99:1a:6c:05:a8:3e:1e:38:3c:68:ea:7c:
                    09:77:66:17:4f:69:44:11:b6:53:d0:d9:02:ec:d6:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BB:68:AF:39:31:F7:90:4A:9C:A9:82:42:BD:B4:D9:56:05:E9:EE
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:f9:c0:cf:4f:0f:3b:6f:4f:32:e2:a1:c6:8e:58:68:0c:
         b3:30:38:24:a0:8b:e7:dc:ef:cc:fa:72:0a:db:07:a9:ed:1f:
         52:80:fe:0c:d2:1c:d9:0f:d0:cb:f9:83:17:25:fd:27:67:23:
         47:a1:52:5a:40:39:df:3f:87:b8:40:4b:bd:b7:19:72:ae:b6:
         b9:ca:3d:b3:92:cf:ec:0a:3c:d3:b5:0e:aa:55:70:9d:44:11:
         dd:5d:24:1e:b6:bf:60:db:d5:22:79:c3:8e:6b:5b:cc:93:7d:
         c7:e0:0a:0e:57:b0:d5:e0:4d:0a:4a:7e:02:09:d9:1d:c0:91:
         fc:6a:92:6e:a4:de:22:91:8d:7f:a3:3b:82:f9:18:e0:94:f7:
         24:7c:44:e7:5d:dc:38:24:18:b5:58:c9:35:ed:8d:79:a6:be:
         71:2f:43:01:8d:2c:f8:ff:e2:1d:93:08:af:aa:08:d6:24:14:
         38:8e:1d:d3:55:60:78:9c:1e:9b:a1:da:84:36:fd:65:a2:c0:
         0f:2b:21:21:36:5a:ba:f3:84:3f:95:37:49:27:50:5d:ca:13:
         fc:ee:f6:98:74:42:a2:ed:19:6f:20:f1:29:11:69:2c:d4:a8:
         62:a4:53:54:59:eb:03:e2:47:d3:dc:78:a6:07:1c:ee:71:8f:
         66:2e:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:55:17 2025 by rpki-client