Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32312d3231203d3e20323632343434.roa
File:                     3138372e36332e38382e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          PjSfQt/s9eRdBChJbY71ORp1BhM+6rytJt5vxEMiRrU=
Subject key identifier:   2E:4E:20:27:27:49:F2:AD:A8:30:1D:6B:EA:CA:25:1F:31:97:8E:DA
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       766B4198AC9885B694850A3831A9F2ECE570CC27
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:40 +0000
ROA not before:           Wed 07 Aug 2024 13:09:40 +0000
ROA not after:            Wed 06 Aug 2025 13:14:40 +0000
asID:                     262444
IP address blocks:        187.63.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6b:41:98:ac:98:85:b6:94:85:0a:38:31:a9:f2:ec:e5:70:cc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:40 2024 GMT
            Not After : Aug  6 13:14:40 2025 GMT
        Subject: CN=2E4E20272749F2ADA8301D6BEACA251F31978EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:04:34:b6:6a:32:22:05:e6:1b:ab:38:f5:
                    b6:c9:48:87:25:59:a9:cf:a3:72:50:cc:ae:30:0c:
                    2a:d0:81:3a:fa:d1:5b:1a:2e:84:e0:d8:ea:bf:1c:
                    ca:1e:f7:6c:8a:d4:b9:c3:00:e5:ed:4c:13:b9:a2:
                    76:8d:ad:f4:74:79:a5:60:0a:cb:5a:52:83:88:02:
                    87:d1:79:cb:71:7f:41:f5:d9:f1:04:84:f5:01:5a:
                    c4:e4:a0:3b:0b:ff:a9:4e:60:a4:8f:c2:d1:ac:ff:
                    61:90:e3:e9:c0:4a:83:59:54:20:6d:7c:82:14:01:
                    26:27:14:2e:26:1d:06:fc:ad:1e:69:23:a4:ec:6d:
                    cc:d6:ba:7c:f6:ec:7d:26:db:fb:f6:a9:87:ef:1a:
                    a8:43:08:b0:19:f7:b9:f9:69:2a:6f:9b:dc:49:7b:
                    ae:f4:09:3e:c6:a9:73:cd:54:4e:89:e0:4b:8f:61:
                    79:2f:a0:7e:d3:8d:41:8b:fa:9b:e5:df:cb:20:f6:
                    c2:f7:6b:a6:72:ee:31:fc:11:bc:6c:c4:02:72:72:
                    2c:de:3c:5b:e8:fd:a3:3f:5a:4d:f2:5b:19:7b:22:
                    be:bf:78:da:2c:40:31:93:cb:18:3c:81:45:ec:40:
                    dd:bb:82:e5:ab:76:6a:e2:0d:83:34:9c:33:1f:80:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:20:27:27:49:F2:AD:A8:30:1D:6B:EA:CA:25:1F:31:97:8E:DA
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e38382e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:63:3c:fd:ee:0b:b5:1c:e4:47:4e:d5:1d:cc:d4:d3:d9:d4:
         cc:34:bc:87:cd:85:e4:3d:61:ab:d5:c2:ae:6e:70:af:92:8f:
         d4:b8:be:d3:a0:9a:fe:25:ba:71:a5:df:24:95:24:9c:6f:72:
         95:1e:ab:74:23:8a:96:d5:4a:9e:cd:63:3b:53:69:5c:74:2f:
         31:3e:39:c0:23:cd:65:b4:71:1e:df:96:ee:ea:50:ff:ab:99:
         a8:a8:d3:29:19:4c:8b:b6:b0:18:ac:32:e1:63:03:01:d8:63:
         6d:a5:29:4a:f7:fb:dc:20:51:04:56:6b:82:78:09:1d:28:e9:
         31:3a:8a:4f:44:d8:7b:3c:66:6c:a9:2a:1d:f7:82:cd:44:77:
         92:6a:cf:bf:48:c0:b0:8a:59:c8:79:57:62:d0:96:38:90:8d:
         a3:b7:b0:64:2a:47:1a:2e:e9:84:99:57:3e:98:b0:34:51:7a:
         53:2e:49:76:38:9e:28:83:ab:81:c2:cb:9d:6a:e1:0f:ea:f9:
         18:b1:32:72:35:d8:69:23:a2:eb:d1:00:4c:d8:ea:ce:1e:24:
         71:61:4d:d1:cf:1c:d5:ac:e6:03:5a:9a:ad:88:30:d3:b4:4f:
         c3:35:c4:11:5e:64:9b:5c:5a:85:e1:6e:7d:45:bd:a6:74:90:
         d6:16:f1:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdmtBmKyYhbaUhQo4Many7OVwzCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDBaFw0yNTA4MDYxMzE0NDBaMDMxMTAvBgNV
BAMTKDJFNEUyMDI3Mjc0OUYyQURBODMwMUQ2QkVBQ0EyNTFGMzE5NzhFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsQQ0tmoyIgXmG6s49bbJSIcl
WanPo3JQzK4wDCrQgTr60VsaLoTg2Oq/HMoe92yK1LnDAOXtTBO5onaNrfR0eaVg
CstaUoOIAofRectxf0H12fEEhPUBWsTkoDsL/6lOYKSPwtGs/2GQ4+nASoNZVCBt
fIIUASYnFC4mHQb8rR5pI6TsbczWunz27H0m2/v2qYfvGqhDCLAZ97n5aSpvm9xJ
e670CT7GqXPNVE6J4EuPYXkvoH7TjUGL+pvl38sg9sL3a6Zy7jH8EbxsxAJycize
PFvo/aM/Wk3yWxl7Ir6/eNosQDGTyxg8gUXsQN27guWrdmriDYM0nDMfgNJtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULk4gJydJ8q2oMB1r6solHzGXjtowHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzODM3MmUzNjMzMmUzODM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMy
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuz9YMA0GCSqGSIb3DQEBCwUAA4IBAQAsYzz97gu1
HORHTtUdzNTT2dTMNLyHzYXkPWGr1cKubnCvko/UuL7ToJr+Jbpxpd8klSScb3KV
Hqt0I4qW1UqezWM7U2lcdC8xPjnAI81ltHEe35bu6lD/q5moqNMpGUyLtrAYrDLh
YwMB2GNtpSlK9/vcIFEEVmuCeAkdKOkxOopPRNh7PGZsqSod94LNRHeSas+/SMCw
ilnIeVdi0JY4kI2jt7BkKkcaLumEmVc+mLA0UXpTLkl2OJ4og6uBwsudauEP6vkY
sTJyNdhpI6Lr0QBM2OrOHiRxYU3RzxzVrOYDWpqtiDDTtE/DNcQRXmSbXFqF4W59
Rb2mdJDWFvEV
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org