Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39322e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          6CUqbqRpjLiyUbN8hUq88Sn1PXgQ5qPg67umkLEl0z8=
Subject key identifier:   D4:F3:FF:18:16:D7:F9:B1:F6:3B:8D:7B:EF:42:08:F7:FF:7B:C6:92
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       0424C54551D064A97DACE4F44B8012D63FD57029
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:33 +0000
ROA not before:           Wed 07 Aug 2024 13:09:33 +0000
ROA not after:            Wed 06 Aug 2025 13:14:33 +0000
asID:                     262444
IP address blocks:        187.63.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:24:c5:45:51:d0:64:a9:7d:ac:e4:f4:4b:80:12:d6:3f:d5:70:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:33 2024 GMT
            Not After : Aug  6 13:14:33 2025 GMT
        Subject: CN=D4F3FF1816D7F9B1F63B8D7BEF4208F7FF7BC692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:c4:2f:55:39:2e:b8:9a:0b:9e:e3:c1:ef:
                    d8:01:cf:42:e6:20:95:f6:f7:b3:f4:f8:d8:6c:83:
                    45:05:50:94:36:4a:f8:88:9c:de:f2:ab:fa:d9:a0:
                    38:7e:3c:aa:57:f2:0f:5d:42:c7:17:98:66:22:b0:
                    3f:99:7f:e2:72:3f:30:ff:c3:b9:4e:77:91:c8:56:
                    b9:5d:8b:51:71:a2:ed:d2:ae:b6:cc:30:80:b7:8d:
                    36:82:46:c3:3a:7f:b5:fa:3d:15:de:46:e7:28:a8:
                    9c:4c:15:05:27:9e:6e:29:8c:74:25:3f:27:f0:f1:
                    63:43:19:75:6a:ca:38:c2:f7:1e:81:64:cd:8a:6f:
                    ed:83:a5:63:3c:39:a8:6f:7c:90:7d:ce:f2:52:be:
                    32:df:00:f5:75:03:3c:ac:a4:4a:ab:32:df:31:eb:
                    3f:6d:d1:88:98:d0:68:a8:56:1e:c3:e7:dc:12:64:
                    c8:06:93:b3:d0:19:80:9f:7e:62:ab:f4:c0:4b:df:
                    77:f5:ec:42:a4:58:1d:25:79:eb:39:72:26:c3:61:
                    40:35:63:29:64:d5:1b:93:f3:53:29:a8:58:e6:4c:
                    34:f1:c4:d2:91:98:86:6f:0d:43:df:d2:f0:93:38:
                    82:f1:f4:8f:c9:ed:6f:f3:48:fe:9c:7e:27:0a:19:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F3:FF:18:16:D7:F9:B1:F6:3B:8D:7B:EF:42:08:F7:FF:7B:C6:92
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39322e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:00:2c:ec:61:6a:03:6e:1d:b2:5f:e3:8f:04:7b:aa:0a:
         13:48:c0:bc:71:45:20:71:e0:f3:c7:93:a4:27:17:09:2a:cf:
         5c:a0:b6:bc:1c:1a:e0:5d:5b:c0:e4:2b:4f:11:b1:be:13:65:
         b9:94:d2:1b:43:37:57:cc:dc:6a:9b:f6:82:b1:80:bc:2f:e2:
         78:2c:94:7f:79:a6:1a:9d:03:d2:90:1b:d6:67:c4:07:b4:0c:
         ac:44:14:49:f5:f2:3a:2d:79:f0:82:45:53:ae:e2:07:a6:b8:
         14:5f:db:69:9d:9f:9e:7e:b7:b3:ce:2f:6f:04:bf:22:00:3c:
         8b:27:db:8f:7d:f4:14:26:cc:a3:b9:5e:13:40:82:a3:85:4f:
         2e:ff:b6:ba:f8:0a:d3:2c:d4:57:15:65:f1:6a:34:c5:79:d5:
         2a:7d:1f:50:08:b6:cc:37:19:a3:24:69:4d:08:f3:c7:e5:71:
         b7:33:f2:65:4b:fb:eb:a0:7d:e4:77:c6:71:2a:bc:62:dc:98:
         86:c1:af:e5:39:ff:13:c8:1c:18:6b:9a:7f:74:aa:87:36:74:
         dd:d8:98:30:d0:b1:f2:9e:49:e1:87:f7:a6:ab:d9:9b:a0:57:
         6c:3c:20:7b:18:3b:4e:00:41:2c:8b:5b:2f:c7:0f:5e:7e:9a:
         03:b9:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org