Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e38302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          EwQhMl/DRSTbh3OOh7GMas/cT6fen84VDPy39tmIL7U=
Subject key identifier:   80:FA:AB:7B:35:61:6A:03:73:39:06:A7:24:D5:2F:9A:52:6B:C7:AD
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       25AD8781C67480C46AF7550D7DD3513983001F16
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:37 +0000
ROA not before:           Wed 07 Aug 2024 13:09:37 +0000
ROA not after:            Wed 06 Aug 2025 13:14:37 +0000
asID:                     262444
IP address blocks:        187.63.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ad:87:81:c6:74:80:c4:6a:f7:55:0d:7d:d3:51:39:83:00:1f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:37 2024 GMT
            Not After : Aug  6 13:14:37 2025 GMT
        Subject: CN=80FAAB7B35616A03733906A724D52F9A526BC7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:fc:25:d0:ca:cb:0a:24:37:54:85:27:22:
                    bd:1f:51:98:78:15:1a:12:51:3a:3e:aa:00:44:af:
                    7d:dc:62:16:a0:73:58:13:b7:96:e9:85:c5:38:1e:
                    55:60:5b:d3:45:ad:fd:83:9d:a6:a8:43:36:8a:f1:
                    c3:dc:87:1a:05:f2:cc:9f:8d:61:85:52:a5:7e:e5:
                    c5:79:7e:2a:ce:89:df:1a:b3:7e:39:9c:fa:40:cd:
                    be:e6:ee:2e:e5:35:ea:46:a5:63:07:92:b7:cf:8a:
                    ee:72:16:49:3a:0f:06:9b:cc:bf:62:0b:4e:d8:9a:
                    d7:be:4d:f4:c2:ea:53:5a:05:40:c6:ab:65:07:55:
                    37:93:a9:3e:c9:74:c5:c7:7c:28:db:20:80:82:51:
                    3e:2a:ce:0b:76:c7:b2:02:27:31:36:13:61:f4:32:
                    4e:f8:9b:76:5b:ee:50:f7:1a:ac:e6:33:ee:4f:61:
                    4e:d5:ea:15:c3:9a:c0:b0:e7:01:a3:73:7e:e8:28:
                    f9:e6:5e:70:7a:b8:e1:2f:bc:e3:a7:ef:6c:79:aa:
                    b6:0f:80:13:e2:b7:18:cf:41:a6:20:f6:29:89:4d:
                    f7:40:9b:9d:b6:de:ae:96:bf:9b:0c:4a:c4:05:54:
                    cf:78:15:13:11:c1:e2:58:bf:7e:35:e7:63:63:93:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:AB:7B:35:61:6A:03:73:39:06:A7:24:D5:2F:9A:52:6B:C7:AD
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:37:de:ae:c8:7e:23:fd:bf:2a:cf:a6:9a:11:c4:9e:cb:
         c3:70:87:08:f3:b2:96:56:05:98:af:cb:a3:66:62:1d:ba:7d:
         fd:ab:2f:d7:b5:8b:92:66:28:1a:62:14:64:06:bf:31:c9:47:
         5e:51:0b:84:cc:02:08:09:51:90:fe:55:5b:08:b9:49:b5:e8:
         0e:72:85:af:18:e5:54:65:f9:d1:7a:65:07:fd:0d:c9:16:27:
         dd:b8:0b:48:61:bd:cd:f6:b3:d0:aa:df:9f:5f:b5:f3:ef:c2:
         c9:f7:5b:f6:55:a5:73:07:7e:29:0a:36:f3:a0:59:ea:f9:d2:
         13:57:51:dd:85:51:db:a8:d0:83:03:da:0d:d2:73:5c:85:b6:
         84:14:c2:cc:d4:8a:76:a5:0f:dd:03:aa:90:1f:6e:dc:be:a7:
         fd:46:a3:4f:ef:0a:4d:37:6b:c3:85:1d:1b:e4:e7:f7:6b:98:
         6d:27:c3:03:d8:7f:2c:1b:79:c3:51:18:18:bc:d5:36:6e:24:
         47:e8:83:e2:bd:a7:40:69:08:cf:bf:1b:38:30:10:25:ea:23:
         d7:8e:fb:a9:ad:c4:80:37:ef:17:2b:9e:16:31:62:46:dd:00:
         24:d4:bb:8c:0f:a6:b4:1a:c2:eb:5a:72:13:f4:3d:b2:c1:18:
         1f:a8:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org