Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38362e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e38362e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          zCs7sZFboPYnYtijdweyacsSK+B8rlvzXLlh6IGOHGk=
Subject key identifier:   BF:1D:2C:6F:09:A4:10:FC:9C:63:A7:F3:ED:90:8A:D9:27:B0:28:64
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       4A5E6959E0CD257EC5B36024FCE5DA64E4120E0B
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38362e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:42 +0000
ROA not before:           Wed 07 Aug 2024 13:09:42 +0000
ROA not after:            Wed 06 Aug 2025 13:14:42 +0000
asID:                     262444
IP address blocks:        187.63.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:69:59:e0:cd:25:7e:c5:b3:60:24:fc:e5:da:64:e4:12:0e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:42 2024 GMT
            Not After : Aug  6 13:14:42 2025 GMT
        Subject: CN=BF1D2C6F09A410FC9C63A7F3ED908AD927B02864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:86:d0:a9:f1:8f:71:0e:49:ab:45:fc:53:5e:
                    1e:92:40:d2:2e:45:46:80:f4:69:a2:65:ba:d4:df:
                    90:1c:a6:2d:57:86:c3:d1:14:30:48:8e:9e:79:b3:
                    39:e8:02:24:8c:d4:86:f7:0c:ee:5c:32:ee:a7:37:
                    db:77:c1:f8:29:17:a1:20:76:d3:1d:bc:f3:76:4b:
                    aa:31:d4:10:6c:01:83:8f:ce:5a:b5:43:59:11:55:
                    ea:04:30:c8:66:19:35:d6:e2:c5:c0:67:fd:ec:3f:
                    e5:97:b0:f1:bb:65:b7:02:dd:c2:d6:f5:b8:6c:ad:
                    f0:c1:cd:b0:0a:b8:d9:50:9b:b8:7e:03:db:d5:a0:
                    73:d7:79:cf:f4:85:e0:aa:11:27:6a:a9:2f:ce:f8:
                    0b:db:39:00:59:4e:05:a7:1a:93:76:b4:08:65:38:
                    55:c2:db:94:2a:31:ac:22:05:59:41:59:35:76:4b:
                    3d:2f:43:3b:1b:58:75:36:31:92:bb:49:50:1d:c6:
                    26:6b:7e:a4:cb:8b:8b:ad:ec:c9:88:e5:37:bf:24:
                    c0:3b:7b:e0:7a:e0:cc:1a:39:c1:9d:ac:45:b8:08:
                    d8:bd:27:44:eb:fa:3a:6b:bc:36:36:fa:3b:d9:f9:
                    03:19:2d:a1:36:21:96:20:70:0c:8a:d8:f2:b9:24:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1D:2C:6F:09:A4:10:FC:9C:63:A7:F3:ED:90:8A:D9:27:B0:28:64
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38362e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:fd:48:1c:64:94:13:cd:6a:93:8c:28:ec:78:f1:cb:10:08:
         66:b3:cd:0d:3e:fb:86:e7:1e:a2:8f:f1:84:11:58:04:c5:83:
         06:e4:cd:ed:c3:69:9e:9c:3f:51:ee:82:90:96:4c:41:a7:93:
         8c:4d:f7:58:d4:c6:49:55:00:0c:c7:9d:ff:17:dd:a3:84:94:
         16:61:a2:0c:3b:89:6f:da:6d:6a:25:fb:87:19:24:dd:74:ff:
         0a:db:a2:eb:96:8a:c6:f2:00:84:6d:60:c5:3a:23:8f:6e:67:
         60:6e:43:7f:12:67:ce:9f:29:b0:ac:50:8c:82:ff:aa:be:c5:
         fe:f7:51:d3:5a:a0:76:8f:ac:aa:2e:23:9b:d2:df:53:76:03:
         21:5f:a9:a9:ce:4c:f8:ae:2e:46:51:bc:29:7f:d2:22:23:c4:
         2d:f2:61:c4:5a:6f:e5:52:ea:fc:85:62:aa:63:76:d5:44:09:
         1b:74:b0:45:bb:a0:e4:84:b5:b4:9d:01:9f:f3:a1:0b:20:48:
         ac:09:33:c8:f5:f4:9e:12:ac:c0:01:62:6e:56:a8:3d:f7:3e:
         fa:96:0e:f4:cd:09:2e:ed:d1:24:99:76:67:fb:8c:f0:af:36:
         81:f3:74:03:e6:53:d8:8c:9e:23:ad:6e:a9:96:08:d4:0f:fa:
         17:96:93:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org