Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32322d3232203d3e20323632343434.roa
File:                     3138372e36332e38302e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          IQGLTgX83XMWlSSyGTizsj8upaFj+d1MuAufG0oDHSg=
Subject key identifier:   2A:93:18:84:80:CB:1B:A5:55:1B:1E:BA:F8:03:70:6E:61:95:55:D1
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       69579BD884682D49B18431B6F4B4BCE156BEB0FF
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:44 +0000
ROA not before:           Wed 07 Aug 2024 13:09:44 +0000
ROA not after:            Wed 06 Aug 2025 13:14:44 +0000
asID:                     262444
IP address blocks:        187.63.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:57:9b:d8:84:68:2d:49:b1:84:31:b6:f4:b4:bc:e1:56:be:b0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:44 2024 GMT
            Not After : Aug  6 13:14:44 2025 GMT
        Subject: CN=2A93188480CB1BA5551B1EBAF803706E619555D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:26:d5:8d:46:a6:5b:5b:17:ae:14:d4:17:
                    bc:7d:e7:e7:95:72:32:2b:82:64:0f:f3:91:42:08:
                    9c:c7:bb:e2:93:4b:50:26:52:d6:22:55:6f:1e:02:
                    a5:96:0a:51:2d:4a:ba:14:66:06:77:b4:4b:fa:fd:
                    7e:ad:45:ab:2e:f5:02:60:d8:a4:be:f9:0a:4f:c0:
                    d9:31:3d:9d:31:af:69:9a:8c:44:e2:5d:06:30:9b:
                    00:c5:6c:ff:75:0b:cd:eb:8c:15:c1:ae:31:a9:06:
                    e6:8a:be:60:59:cc:15:d4:a5:86:1d:ef:34:64:cf:
                    8f:49:6d:8c:42:6c:8d:c9:ef:e4:5f:d9:29:ad:f0:
                    53:e8:6d:ac:f3:da:e7:7c:73:f0:ca:4f:50:b8:bf:
                    72:6b:40:32:94:cb:28:f4:e3:ad:c5:4c:76:c3:4b:
                    8b:f0:f4:34:ab:9e:a0:f2:fd:f6:26:80:b2:a3:03:
                    78:8c:15:d4:74:e5:3d:85:91:b4:71:de:21:6d:76:
                    e2:67:ba:9d:0f:45:10:60:40:1d:89:c6:b6:3f:85:
                    08:ed:7f:ac:ef:5c:da:95:ef:aa:0b:b3:32:ca:7b:
                    29:7c:9e:87:56:11:79:72:dc:e0:5e:a0:e8:0a:18:
                    1b:dd:b3:60:36:f1:f8:ed:0f:ca:5e:63:da:f5:7e:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:93:18:84:80:CB:1B:A5:55:1B:1E:BA:F8:03:70:6E:61:95:55:D1
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:52:ef:39:48:fc:e3:cc:50:c1:08:b2:b1:6f:9a:d4:01:05:
         6a:db:e5:f8:45:98:4b:15:f0:ff:39:2f:58:d6:b1:67:90:65:
         1b:1e:1f:bc:4b:df:84:d4:80:c2:79:13:f3:0e:46:86:6f:eb:
         f0:f4:1c:70:a3:ef:7e:f5:d9:ab:b2:42:bb:34:8d:8e:9c:82:
         f0:82:03:6d:9a:30:b7:81:db:c5:e9:24:5d:60:d3:ac:38:09:
         f1:72:97:4a:ea:a5:9e:b8:c2:ee:0c:e1:37:9a:94:04:07:da:
         2f:31:d5:0f:f4:7e:57:2e:ff:da:40:4f:f1:83:a2:30:36:8c:
         4b:76:d8:04:85:e9:13:36:e3:24:44:96:6f:01:c1:63:d2:0e:
         fa:b6:6d:9a:25:ac:24:6c:d3:96:66:c2:65:dd:01:2d:c5:b8:
         f8:04:41:bd:f4:a8:39:1c:ed:e2:31:8b:af:00:3d:97:61:19:
         80:cf:d1:71:5e:91:23:99:1c:e6:d1:24:61:9c:d2:e8:b3:79:
         ed:25:ab:5e:cb:4b:27:b4:f2:e3:94:90:33:61:1c:61:42:9d:
         84:e9:f1:7c:67:67:b6:25:0d:b0:d1:b1:7e:b9:9f:10:9f:e7:
         89:6e:18:dc:ad:5e:ff:7d:56:fc:fb:2b:25:52:cf:83:70:56:
         fb:a1:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org