Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32322d3232203d3e20323632343434.roa
File:                     3138372e36332e38342e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          oUGb+qeNQqbgDy+dCHYOr+UQESehIsU6FN6TWq+g/1g=
Subject key identifier:   03:0D:10:21:1F:CE:B9:42:7D:48:AC:A1:EA:6C:D4:5D:17:F7:CD:B0
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       23EEFCAD79627FFC6F574D1CB723799C92A4CF52
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:45 +0000
ROA not before:           Wed 07 Aug 2024 13:09:45 +0000
ROA not after:            Wed 06 Aug 2025 13:14:45 +0000
asID:                     262444
IP address blocks:        187.63.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:fc:ad:79:62:7f:fc:6f:57:4d:1c:b7:23:79:9c:92:a4:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:45 2024 GMT
            Not After : Aug  6 13:14:45 2025 GMT
        Subject: CN=030D10211FCEB9427D48ACA1EA6CD45D17F7CDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:aa:79:43:97:db:5e:5b:64:93:a0:09:84:
                    0d:69:1e:4f:c0:79:6b:3d:d6:f2:f8:a8:f7:3c:8b:
                    29:c6:dc:f3:fc:24:ba:95:4e:f8:8f:9e:0c:3b:b2:
                    9e:4f:db:eb:a0:86:e3:1e:e0:23:d8:92:23:6b:63:
                    60:22:17:d1:6d:06:0a:e2:a0:5c:99:cd:eb:15:60:
                    2b:4f:79:5e:15:e8:e6:c3:ae:5b:f2:2a:57:aa:bd:
                    90:15:84:58:4f:7a:80:f9:c9:b2:1b:a3:0e:3c:24:
                    62:c1:90:d5:53:91:d1:50:cc:99:8a:fd:ad:ff:46:
                    b5:0c:b4:b7:d9:b2:0d:e6:b0:01:ab:de:c7:89:51:
                    ef:a5:43:7d:7e:bb:fe:30:d8:35:45:59:53:63:35:
                    49:dc:9a:57:01:57:03:ee:94:80:94:e4:0c:cd:80:
                    eb:74:c8:59:6c:1c:a5:08:08:17:59:40:4d:ce:23:
                    08:09:b2:ed:b6:69:db:92:68:5f:d8:1f:43:2f:70:
                    3e:9a:9b:85:45:15:fe:0e:9f:ae:96:c6:31:b5:7d:
                    8e:a4:64:ae:27:52:a0:98:e9:71:d6:46:b6:9f:e2:
                    2d:6b:a0:b8:3f:5d:ff:23:1d:bd:94:f5:bb:da:c8:
                    5e:a5:2d:c6:c3:60:ea:30:91:9d:8f:41:da:37:08:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:10:21:1F:CE:B9:42:7D:48:AC:A1:EA:6C:D4:5D:17:F7:CD:B0
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:e0:93:8c:72:03:6f:ed:47:84:5e:4e:64:b3:9c:83:45:65:
         15:92:38:b5:46:12:2a:f1:de:4c:55:9c:21:77:87:b8:4f:97:
         b7:5f:3c:8b:05:6e:75:27:27:34:6e:c7:b3:35:6d:9e:48:81:
         58:19:a3:9e:87:3e:17:31:4e:bf:44:3d:75:70:9e:87:43:93:
         49:b0:54:ae:54:3c:a5:c0:31:6c:6a:4d:45:3b:57:5a:13:e7:
         0b:b6:e0:7d:a8:47:f7:d8:92:84:39:3a:c7:22:1a:b1:d8:ab:
         9d:19:dd:53:b6:02:f7:1b:c0:92:3a:c9:3b:e3:51:19:45:ed:
         c1:37:e4:67:c0:22:c3:35:c9:49:c2:1a:08:e4:0c:42:be:1e:
         6e:ad:42:ac:fc:e3:fd:89:d3:22:8b:19:df:f6:6a:83:1b:fb:
         d6:e9:30:aa:32:1a:57:99:60:9e:09:44:94:5b:dc:96:58:fc:
         6d:96:fe:a4:0e:9c:dd:5f:bd:b7:28:70:c8:f9:39:aa:7c:8f:
         7e:8d:14:b6:29:ad:10:f7:5c:c5:2f:1b:b9:96:bd:ec:86:9d:
         dc:ea:ae:52:3c:eb:b8:41:af:7c:69:29:27:c2:ae:cf:72:39:
         34:cc:e3:65:9c:69:14:05:65:a0:c2:9c:85:5f:dc:09:06:ce:
         de:34:04:6a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI+78rXlif/xvV00ctyN5nJKkz1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDVaFw0yNTA4MDYxMzE0NDVaMDMxMTAvBgNV
BAMTKDAzMEQxMDIxMUZDRUI5NDI3RDQ4QUNBMUVBNkNENDVEMTdGN0NEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEKp5Q5fbXltkk6AJhA1pHk/A
eWs91vL4qPc8iynG3PP8JLqVTviPngw7sp5P2+ughuMe4CPYkiNrY2AiF9FtBgri
oFyZzesVYCtPeV4V6ObDrlvyKleqvZAVhFhPeoD5ybIbow48JGLBkNVTkdFQzJmK
/a3/RrUMtLfZsg3msAGr3seJUe+lQ31+u/4w2DVFWVNjNUncmlcBVwPulICU5AzN
gOt0yFlsHKUICBdZQE3OIwgJsu22aduSaF/YH0MvcD6am4VFFf4On66WxjG1fY6k
ZK4nUqCY6XHWRraf4i1roLg/Xf8jHb2U9bvayF6lLcbDYOowkZ2PQdo3CI8jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAw0QIR/OuUJ9SKyh6mzUXRf3zbAwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzODM3MmUzNjMzMmUzODM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuz9UMA0GCSqGSIb3DQEBCwUAA4IBAQC14JOMcgNv
7UeEXk5ks5yDRWUVkji1RhIq8d5MVZwhd4e4T5e3XzyLBW51Jyc0bsezNW2eSIFY
GaOehz4XMU6/RD11cJ6HQ5NJsFSuVDylwDFsak1FO1daE+cLtuB9qEf32JKEOTrH
Ihqx2KudGd1TtgL3G8CSOsk741EZRe3BN+RnwCLDNclJwhoI5AxCvh5urUKs/OP9
idMiixnf9mqDG/vW6TCqMhpXmWCeCUSUW9yWWPxtlv6kDpzdX723KHDI+TmqfI9+
jRS2Ka0Q91zFLxu5lr3shp3c6q5SPOu4Qa98aSknwq7Pcjk0zONlnGkUBWWgwpyF
X9wJBs7eNARq
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org