Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          gaKrLby1tNFpV0gNsueFdJs0Tb6+UjtnjNmi2kcTxhM=
Subject key identifier:   9E:E3:64:1B:FE:E7:75:9F:90:3C:E0:8B:1F:5F:8F:87:DB:90:1F:79
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       016A1669ADF2E53B44A2CA18FE1DB8A51655FA6D
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 16 Apr 2025 13:30:03 +0000
ROA not before:           Wed 16 Apr 2025 13:25:03 +0000
ROA not after:            Wed 15 Apr 2026 13:30:03 +0000
asID:                     28338
IP address blocks:        189.84.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6a:16:69:ad:f2:e5:3b:44:a2:ca:18:fe:1d:b8:a5:16:55:fa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 16 13:25:03 2025 GMT
            Not After : Apr 15 13:30:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:6e:0e:30:b7:f5:32:56:2d:40:df:df:9e:
                    8f:34:94:f7:84:02:10:53:5d:de:45:5a:93:30:af:
                    a2:ef:eb:3c:f0:f3:74:21:87:b8:6f:ae:14:68:6f:
                    00:09:76:27:7a:3e:9d:cf:f2:70:ab:d3:aa:f8:19:
                    ed:13:74:4b:fa:81:7f:4f:f3:7e:98:e3:9d:a2:72:
                    cb:6c:a0:e1:0c:da:d4:0e:e3:56:e1:73:aa:0c:52:
                    01:44:86:51:32:6c:0f:ae:f0:a6:9a:4b:9b:e9:3c:
                    2c:b3:d9:06:da:0a:d9:66:3c:8a:92:2d:f5:8d:87:
                    56:06:88:f0:3c:be:13:6d:e1:be:ed:93:1d:46:14:
                    e0:d7:25:cb:96:be:be:d6:b3:83:b4:f3:05:ee:5e:
                    53:a6:b5:49:57:ef:40:ef:ea:ec:9c:d1:68:d2:84:
                    72:53:bd:6a:6e:3b:8d:61:4b:2b:14:a0:1c:5b:bc:
                    ea:b5:b3:bb:2b:d3:16:3a:76:b4:08:57:7b:38:54:
                    92:1b:5d:db:4c:7e:d2:45:d0:f9:4c:5d:d8:d8:fd:
                    16:26:8a:52:56:1a:b2:e9:ec:d5:56:af:8a:f2:88:
                    3f:5e:66:66:38:bb:17:e8:de:6a:0f:0e:69:da:4c:
                    dc:1e:ea:c0:9f:a7:b9:68:8a:ab:78:cb:aa:c2:c2:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E3:64:1B:FE:E7:75:9F:90:3C:E0:8B:1F:5F:8F:87:DB:90:1F:79
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3138392e38342e3233362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:d8:8c:d1:2f:c4:82:f8:e9:7a:dd:0c:a3:5b:1d:83:7c:20:
         c4:0f:76:00:97:aa:dd:8a:ce:9b:45:1e:e4:58:1b:4c:6a:bc:
         23:49:3f:90:45:9e:8d:58:18:d6:c9:45:e0:9d:6c:08:6d:70:
         8f:56:f1:20:18:ee:21:f1:36:6b:0a:48:50:29:39:3b:7d:2b:
         ff:f2:0b:95:51:2d:98:e5:1e:b9:cd:44:d2:b1:de:c2:19:97:
         db:23:da:77:3e:22:2b:98:06:c4:a1:25:a6:fe:1f:09:3c:56:
         78:63:37:83:e2:28:06:f9:0a:de:ce:2c:e5:0c:de:c9:6d:fc:
         e8:71:e2:fd:d6:95:95:3a:31:c7:f4:b0:74:6e:ef:8e:58:c4:
         d5:ea:37:eb:be:02:fc:d4:00:84:97:0c:74:60:dc:a7:ca:d3:
         0c:5f:76:af:6e:84:25:c4:94:86:d8:c2:18:21:9d:81:f0:29:
         39:9e:88:98:42:e1:c7:b5:bc:ea:d4:a8:02:f1:8c:68:ca:c9:
         dd:00:b1:c3:2a:b3:98:9e:2e:ed:4d:27:9e:62:10:4e:07:f5:
         85:32:73:18:59:ab:40:b5:86:92:c9:1b:bc:6a:fc:34:99:0d:
         22:ec:c4:f4:f6:21:01:9c:29:ee:d4:e8:20:a0:49:b6:91:12:
         92:23:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:56 2025 by rpki-client on console.sobornost.net