Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa
File:                     3138372e36332e39342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          DGM7zw/0PlvNPq41T3VvqAJby6d1AKoSty0daJH1ZGg=
Subject key identifier:   24:F5:6B:4C:95:E2:41:C4:F0:06:DF:67:28:51:52:4E:F1:6B:E4:8D
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       3E58D15C1D82D8115051E1FB21B19882400F25F3
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:36 +0000
ROA not before:           Wed 07 Aug 2024 13:09:36 +0000
ROA not after:            Wed 06 Aug 2025 13:14:36 +0000
asID:                     262444
IP address blocks:        187.63.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:58:d1:5c:1d:82:d8:11:50:51:e1:fb:21:b1:98:82:40:0f:25:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:36 2024 GMT
            Not After : Aug  6 13:14:36 2025 GMT
        Subject: CN=24F56B4C95E241C4F006DF672851524EF16BE48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:6b:eb:ee:a1:41:1c:69:b1:c5:8f:d7:ae:
                    87:36:6d:b4:9b:ad:48:12:89:87:91:0f:5a:c6:0c:
                    e1:cb:c9:ce:d3:b5:67:5c:9a:6e:89:1c:cc:0a:35:
                    d6:e4:11:53:ce:66:1e:b9:41:ee:7a:f2:74:26:9f:
                    8f:8a:48:c7:71:00:ce:5f:06:7c:bf:98:2a:8b:3f:
                    17:7f:10:db:f1:18:90:03:bf:68:64:cc:1a:b0:18:
                    07:f8:54:99:f8:b1:ed:dd:cf:c4:53:04:e8:b6:17:
                    14:b7:fe:7c:a0:16:80:a7:df:cc:aa:31:fc:99:c2:
                    d4:66:40:f1:59:cf:79:02:ff:a4:55:2b:2b:69:01:
                    2e:9e:18:3e:b4:1e:e0:90:a5:ef:fc:2c:c8:12:10:
                    85:d3:b6:0a:ed:34:4d:33:ad:cb:e8:c7:47:83:fe:
                    9c:0d:a9:d7:a6:6b:61:f7:cb:45:13:d4:5c:b6:7f:
                    1a:05:72:76:4e:77:e3:15:0f:85:1d:f6:b0:66:ba:
                    84:5b:9b:db:0b:6d:d0:5f:dc:c2:c5:cb:d6:2f:07:
                    50:2e:20:87:34:22:1c:7e:ec:bb:31:60:80:4a:97:
                    65:5e:1a:68:bf:41:11:37:a4:6d:5d:b2:da:e9:b0:
                    72:ba:d2:51:9e:2a:be:39:a4:ef:cb:3e:b4:1a:b0:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:6B:4C:95:E2:41:C4:F0:06:DF:67:28:51:52:4E:F1:6B:E4:8D
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3138372e36332e39342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:5f:d9:36:c8:ec:0a:d5:40:cd:4a:bb:31:8e:7e:da:78:db:
         d3:63:e9:2f:2f:e4:71:05:8a:d8:46:72:db:6d:c6:ff:78:4e:
         1d:a0:51:5d:6c:3e:75:79:3e:34:9f:61:7d:3c:05:b2:25:27:
         a1:9d:3d:b1:c2:1d:35:9b:67:20:8c:5a:b8:c1:56:f6:3a:9e:
         63:de:ef:c3:81:6e:a4:9a:cb:bc:73:94:36:4b:34:ea:ec:c8:
         b1:21:58:95:dd:be:29:a1:3a:26:85:93:0b:2b:52:b2:ec:4c:
         d5:54:73:a4:be:87:4e:49:40:09:47:ce:a8:a5:2f:ef:17:00:
         84:a9:d1:5d:00:f5:b7:3e:78:00:4b:ed:3a:53:9f:3e:89:13:
         83:59:7b:68:4a:ac:0f:5e:39:70:33:28:18:df:98:1b:d1:80:
         be:ff:16:63:a2:2d:c4:f8:2a:a0:32:a5:bd:7e:cd:08:c8:a7:
         07:97:1a:ec:73:f0:5a:5d:cf:d1:75:91:d0:81:e1:2c:d4:b2:
         21:66:d8:e4:b2:9b:13:ff:3c:ed:cc:90:ae:2e:88:a3:5b:13:
         1d:e3:52:0a:2e:31:d3:a1:14:f1:6f:a1:a4:1c:13:1a:5f:a6:
         94:74:9a:a2:3a:69:e8:60:66:7d:8c:11:1d:4f:c4:90:8e:78:
         c7:36:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org