Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e38342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          Mkit5yKfZ53hz3JfcOo55fwmEo+CaeLDdtqejqRRYzo=
Subject key identifier:   44:17:42:C0:3C:FD:8B:9A:DE:C8:67:F4:8B:06:73:EE:F8:A0:14:CE
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       45F82CF84CA36757BAC6CF74EAE65F2B877CF653
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:46 +0000
ROA not before:           Wed 07 Aug 2024 13:09:46 +0000
ROA not after:            Wed 06 Aug 2025 13:14:46 +0000
asID:                     262444
IP address blocks:        187.63.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:2c:f8:4c:a3:67:57:ba:c6:cf:74:ea:e6:5f:2b:87:7c:f6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:46 2024 GMT
            Not After : Aug  6 13:14:46 2025 GMT
        Subject: CN=441742C03CFD8B9ADEC867F48B0673EEF8A014CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:cd:e1:af:21:3c:68:75:d5:fc:73:d8:68:
                    f6:43:3d:0b:97:4a:6a:99:56:b1:2f:85:26:42:98:
                    5a:6e:80:e7:b4:f3:c4:1f:05:cc:4b:bf:16:0a:16:
                    7f:1a:84:fa:c7:76:96:90:fd:f9:fa:0d:b5:7c:e8:
                    fb:34:aa:1c:87:4d:68:5e:4a:74:52:71:46:a8:8f:
                    69:51:72:21:a0:51:41:e4:82:55:dc:69:3f:c6:0e:
                    de:07:ea:12:97:18:eb:89:44:d8:f1:cd:90:00:18:
                    0a:8e:dd:9c:b3:ae:70:e5:d1:19:fb:5e:ac:3f:34:
                    ce:3b:bc:90:20:6c:8d:85:d3:8e:e1:c8:52:f9:b0:
                    42:10:fe:d2:b6:34:94:60:1f:bf:09:09:04:a3:16:
                    92:fd:2b:fe:4b:9e:01:50:d8:af:e4:01:3d:76:e9:
                    9c:d4:49:23:65:46:6f:01:3a:59:b8:ac:13:42:db:
                    96:0a:c0:fc:1a:06:00:37:45:a6:98:29:be:b8:7e:
                    67:da:f3:7d:58:5b:8b:4a:c1:ed:03:61:d1:be:da:
                    1b:26:a1:b4:4a:4a:a5:4d:58:f8:58:c9:b7:8c:20:
                    72:3c:59:6d:e8:95:fb:62:ba:0c:5d:34:58:15:ef:
                    7b:39:a1:27:6c:eb:97:31:c7:4c:5c:bc:79:27:ad:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:17:42:C0:3C:FD:8B:9A:DE:C8:67:F4:8B:06:73:EE:F8:A0:14:CE
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:88:d3:23:c0:e9:0e:cf:99:30:fb:30:64:84:08:52:1b:94:
         d6:4a:cd:cf:dd:96:c9:78:50:6c:21:d2:a7:c4:52:13:88:54:
         4a:90:d4:5d:07:14:94:60:4f:e9:26:24:81:3c:5c:0e:56:6a:
         a0:77:e4:69:aa:b8:d0:ce:5f:4d:36:f8:32:23:bb:03:4b:34:
         34:71:0f:b2:aa:e9:66:6f:8c:47:b5:0c:44:e9:5d:3a:3d:ae:
         e2:63:3b:7b:87:b5:a2:34:2e:b1:2c:3a:7f:43:06:6e:ae:3e:
         4a:c9:94:87:9a:82:87:47:e9:04:41:69:5b:63:55:c2:56:c1:
         c4:d9:a5:1d:a5:4f:54:46:3e:8e:ed:ba:b0:6b:ee:f0:1c:79:
         21:ca:1c:da:0d:52:1c:99:a7:57:de:1b:01:8a:06:3c:30:e8:
         04:10:d6:d3:1c:e5:73:d6:e3:91:63:a3:f3:39:d8:39:a9:00:
         8e:bf:22:05:80:94:39:35:73:9a:2f:18:84:52:f2:13:53:d5:
         63:a9:e6:60:e5:4d:ae:a5:24:ba:3c:d2:f9:1f:ef:4c:b5:c5:
         1c:95:38:5e:cc:a6:23:9d:d3:83:4b:ec:35:24:18:57:f8:94:
         e2:77:18:d9:42:89:3d:45:25:18:61:73:4d:bd:3f:a3:59:c3:
         50:76:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org