Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          F9gTYX6jTCl02s+J07RRDhGPww2ohTHJCIm1nXKNIlM=
Subject key identifier:   1A:4F:02:7E:F5:CC:91:9C:FC:48:5E:83:0C:8B:C1:75:40:BE:7A:EF
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       2C1989EEE40973312574ADFD56F38F5396A40F38
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:35 +0000
ROA not before:           Wed 07 Aug 2024 13:09:35 +0000
ROA not after:            Wed 06 Aug 2025 13:14:35 +0000
asID:                     262444
IP address blocks:        187.63.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:19:89:ee:e4:09:73:31:25:74:ad:fd:56:f3:8f:53:96:a4:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:35 2024 GMT
            Not After : Aug  6 13:14:35 2025 GMT
        Subject: CN=1A4F027EF5CC919CFC485E830C8BC17540BE7AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:98:2e:67:67:08:8a:f8:d0:c5:cf:f6:83:
                    9c:b0:89:bf:cb:39:e2:b7:ae:b1:12:98:d5:9c:77:
                    be:dd:33:a0:f1:ca:d9:8c:56:99:f0:9d:b0:cd:8b:
                    7e:cf:bc:fe:23:b5:cd:5e:18:36:ee:87:e9:92:b0:
                    6c:d5:a7:52:cf:d6:92:e8:01:1b:47:ca:ef:27:35:
                    cc:23:b8:d3:86:5a:ae:4f:1b:d2:6f:4d:cd:e3:1a:
                    d2:52:30:ba:b1:e2:65:41:5f:d0:83:7e:01:20:43:
                    76:f2:15:fe:7b:ac:70:ef:c1:06:46:e9:31:02:24:
                    2f:bd:ef:ba:f6:65:d5:7c:a4:a8:b3:37:68:cb:3e:
                    7d:35:ab:53:15:23:0b:f1:cf:09:6a:f2:88:93:cb:
                    52:59:b4:84:2f:da:57:84:12:b7:db:97:58:9e:c9:
                    61:38:de:fb:e4:3a:db:e4:39:65:35:a9:8e:38:0c:
                    79:7f:8e:fd:75:df:9c:58:93:d8:79:9f:b3:2d:33:
                    13:9a:78:bc:7d:16:3d:ca:f0:19:b6:a7:a7:7a:ef:
                    b6:de:2f:99:aa:bb:ee:8b:1c:e8:e9:9a:6b:17:6b:
                    7c:cb:ce:49:66:69:29:ba:54:55:fa:43:5c:95:46:
                    64:ba:4f:1a:a7:f4:5f:f9:72:e0:2a:7b:63:78:a3:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:02:7E:F5:CC:91:9C:FC:48:5E:83:0C:8B:C1:75:40:BE:7A:EF
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:94:f1:30:0e:18:87:53:d4:f1:84:b8:77:cf:27:4c:65:4e:
         45:47:a8:85:e7:ea:a5:e5:c8:6d:a4:e0:3c:b3:a9:c5:03:e4:
         9f:1d:21:ca:28:96:98:1d:39:3e:e2:bb:dc:98:e7:7c:ce:ac:
         c3:2d:91:08:1b:b7:01:8c:f2:f6:5a:b9:4e:aa:98:b2:a1:ef:
         d0:73:4b:f5:d9:33:43:c1:14:3e:dd:9a:91:b8:9b:be:3b:23:
         c4:c2:a4:86:7e:0c:22:fd:a7:62:f9:09:f8:1b:53:c8:70:60:
         8f:f5:81:2b:19:72:65:06:0b:2c:45:16:55:6e:8c:78:a4:1f:
         92:95:6a:ac:4f:7d:02:6e:8c:83:17:8d:95:dc:84:1d:45:f3:
         c2:3e:04:03:5d:ec:65:1c:01:f5:0e:d9:29:c2:1e:6a:9e:22:
         30:9c:4b:3e:7c:13:92:ee:b6:23:b4:0d:c4:2e:5b:7c:6d:6b:
         77:5b:07:4f:3c:14:0a:00:7d:1e:07:08:0a:97:b0:49:2a:f8:
         cd:90:32:2a:f1:e1:13:63:fd:29:71:09:eb:58:e5:c6:48:43:
         9e:a8:99:67:f3:07:d8:66:21:f7:82:84:15:a7:c6:05:8b:1c:
         9b:e2:ac:30:8a:80:bd:e9:1a:99:9b:49:65:fc:68:73:d6:bb:
         50:e2:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org