Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32302d3230203d3e20323632343434.roa
File:                     3138372e36332e38302e302f32302d3230203d3e20323632343434.roa (raw, json)
Hash identifier:          f3TXeWE5SBxsBpFx8FVg+oAU6/qYptbnzod14btEnbs=
Subject key identifier:   E4:6A:DE:1C:A4:71:32:DA:F0:B4:30:41:8E:D9:3C:2F:42:F6:01:38
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       4161F052230C1E5815FD53047B2221770DBEE644
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32302d3230203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:46 +0000
ROA not before:           Wed 07 Aug 2024 13:09:46 +0000
ROA not after:            Wed 06 Aug 2025 13:14:46 +0000
asID:                     262444
IP address blocks:        187.63.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:61:f0:52:23:0c:1e:58:15:fd:53:04:7b:22:21:77:0d:be:e6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:46 2024 GMT
            Not After : Aug  6 13:14:46 2025 GMT
        Subject: CN=E46ADE1CA47132DAF0B430418ED93C2F42F60138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:be:42:c0:f5:9b:ed:0c:8f:1c:89:84:05:
                    d9:1f:e3:37:3d:04:1b:a3:7e:2d:e6:66:d0:38:14:
                    b9:f0:45:fb:66:f4:96:2f:9c:8b:28:c0:70:51:07:
                    f2:0d:4b:43:2c:6b:40:f0:b4:73:88:01:a0:f0:3d:
                    3b:43:56:cd:85:6b:e8:dc:7b:d5:d5:93:64:77:dc:
                    e8:43:c7:c2:cb:ac:7a:0f:3c:0b:79:b0:67:56:45:
                    25:6b:bc:2e:ad:c7:f8:e4:5b:4f:bf:67:1e:ab:80:
                    04:84:a4:e1:ee:f9:b1:56:9a:33:73:08:35:98:58:
                    9a:6e:34:7c:3d:cf:ba:d8:e5:70:50:9c:47:de:ae:
                    98:27:60:e2:48:86:1b:6c:32:0f:e9:ef:e2:41:c5:
                    1d:54:d6:20:65:9c:8b:27:f8:16:9d:9b:61:a9:95:
                    c5:73:db:52:05:02:46:17:fe:de:cf:78:20:88:a1:
                    6c:d8:8d:a8:93:43:f4:b3:38:f7:8d:4e:2e:42:e8:
                    8e:81:f0:fe:68:5f:f5:70:a3:42:36:2e:20:a5:9f:
                    82:e3:75:68:9e:61:3e:86:e4:49:43:ce:1c:a3:90:
                    98:a6:4a:e9:7c:75:c8:4e:0a:3a:9a:92:2a:38:bf:
                    fc:72:0a:fa:6e:03:d7:80:85:74:24:7d:a6:87:64:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6A:DE:1C:A4:71:32:DA:F0:B4:30:41:8E:D9:3C:2F:42:F6:01:38
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32302d3230203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:ed:9f:39:8b:89:3a:33:e2:9d:d8:19:a2:11:62:5e:65:
         10:a3:b7:84:89:d8:89:6e:1c:38:b0:ba:d7:dc:e7:6f:3b:4d:
         dc:cb:bf:97:6a:47:fc:21:5b:5a:83:31:fa:a1:8e:d5:fa:4e:
         49:d4:d4:69:ee:45:a5:fc:07:2f:6f:59:b6:3d:a9:aa:02:bf:
         67:e3:07:89:bc:38:be:11:44:4c:7b:43:80:16:86:a2:14:0a:
         ea:94:1d:08:f9:e3:ab:3d:25:59:67:63:31:96:e4:a4:58:9b:
         5f:ff:52:5f:b4:a0:d6:44:c4:15:92:86:25:f2:50:c3:2e:7d:
         91:d8:99:61:22:ba:fb:5d:92:de:fa:8c:ea:23:41:22:be:6f:
         9b:a0:0d:ab:c1:bc:3b:ca:92:c5:09:9b:21:30:85:42:bf:08:
         b9:e3:86:1e:70:25:49:c6:9a:f9:bc:57:33:97:44:9b:1d:10:
         4b:fc:6a:35:6b:84:a1:15:26:26:55:6e:9b:d7:1c:ca:e2:50:
         ed:8f:11:a0:88:c1:e0:fc:72:fc:08:b0:ae:88:fe:47:29:d3:
         20:3e:ab:4c:9c:db:d0:ff:ea:aa:4b:26:c9:02:47:7f:fe:42:
         71:76:24:a3:59:98:58:14:18:ca:cc:3b:34:e7:af:8b:3a:8e:
         51:0c:61:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQWHwUiMMHlgV/VMEeyIhdw2+5kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDZaFw0yNTA4MDYxMzE0NDZaMDMxMTAvBgNV
BAMTKEU0NkFERTFDQTQ3MTMyREFGMEI0MzA0MThFRDkzQzJGNDJGNjAxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PL5CwPWb7QyPHImEBdkf4zc9
BBujfi3mZtA4FLnwRftm9JYvnIsowHBRB/INS0Msa0DwtHOIAaDwPTtDVs2Fa+jc
e9XVk2R33OhDx8LLrHoPPAt5sGdWRSVrvC6tx/jkW0+/Zx6rgASEpOHu+bFWmjNz
CDWYWJpuNHw9z7rY5XBQnEferpgnYOJIhhtsMg/p7+JBxR1U1iBlnIsn+Badm2Gp
lcVz21IFAkYX/t7PeCCIoWzYjaiTQ/SzOPeNTi5C6I6B8P5oX/Vwo0I2LiCln4Lj
dWieYT6G5ElDzhyjkJimSul8dchOCjqakio4v/xyCvpuA9eAhXQkfaaHZMgvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5GreHKRxMtrwtDBBjtk8L0L2ATgwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzODM3MmUzNjMzMmUzODMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNjMy
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuz9QMA0GCSqGSIb3DQEBCwUAA4IBAQBIT+2fOYuJ
OjPindgZohFiXmUQo7eEidiJbhw4sLrX3OdvO03cy7+Xakf8IVtagzH6oY7V+k5J
1NRp7kWl/Acvb1m2PamqAr9n4weJvDi+EURMe0OAFoaiFArqlB0I+eOrPSVZZ2Mx
luSkWJtf/1JftKDWRMQVkoYl8lDDLn2R2JlhIrr7XZLe+ozqI0Eivm+boA2rwbw7
ypLFCZshMIVCvwi544YecCVJxpr5vFczl0SbHRBL/Go1a4ShFSYmVW6b1xzK4lDt
jxGgiMHg/HL8CLCuiP5HKdMgPqtMnNvQ/+qqSybJAkd//kJxdiSjWZhYFBjKzDs0
56+LOo5RDGFP
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org