Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3138342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          ydYBc1BrghjMVpEV8hso1INcm93dqdLtVvoTO1MOy78=
Subject key identifier:   C7:C7:74:62:0A:49:D3:03:E1:52:76:46:BC:A5:4D:1C:09:92:82:16
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       370557986B7E3807E5703A115551A426598E9A5A
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:37 +0000
ROA not before:           Wed 07 Aug 2024 13:09:37 +0000
ROA not after:            Wed 06 Aug 2025 13:14:37 +0000
asID:                     262444
IP address blocks:        200.79.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:05:57:98:6b:7e:38:07:e5:70:3a:11:55:51:a4:26:59:8e:9a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:37 2024 GMT
            Not After : Aug  6 13:14:37 2025 GMT
        Subject: CN=C7C774620A49D303E1527646BCA54D1C09928216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bb:01:6d:9f:b1:15:74:71:8b:6e:ed:3f:6e:
                    6b:d5:ca:3a:6b:15:a0:c3:20:bd:85:7e:bb:25:22:
                    c3:43:d6:c2:ac:38:f4:91:5c:c1:0b:80:e7:2f:fc:
                    42:88:06:09:1f:4c:04:a2:94:ad:51:a3:50:50:e5:
                    17:ed:62:c1:e6:c2:c3:1c:1d:ca:f5:fd:01:a3:75:
                    9d:aa:24:7e:01:54:1d:d8:b6:53:8a:cc:33:e3:88:
                    56:6f:ea:7f:45:60:c1:e1:fa:05:a5:e8:c1:6f:81:
                    25:87:af:de:08:94:ad:b5:31:0f:80:95:2a:33:8b:
                    bb:6c:09:27:98:9c:de:dd:30:1a:37:c6:aa:f6:37:
                    e6:45:d8:52:34:d3:da:a3:48:9e:5f:c2:82:ab:64:
                    7e:81:db:5a:00:22:df:c1:e3:71:ad:f8:11:10:99:
                    d1:88:50:93:7f:57:c9:31:5a:f6:e0:d4:72:47:d3:
                    5f:30:85:f9:22:60:78:37:8e:5b:22:82:62:41:dd:
                    c4:ac:b5:5a:64:06:30:31:ed:eb:38:00:6b:8c:2e:
                    67:8d:48:8c:bc:ea:54:e6:97:b9:f7:40:60:5e:68:
                    06:bb:90:26:3e:38:ff:cd:d8:50:94:99:e8:11:a6:
                    41:34:b9:96:bb:e3:f9:f4:cb:5a:5c:0d:53:34:b9:
                    5f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C7:74:62:0A:49:D3:03:E1:52:76:46:BC:A5:4D:1C:09:92:82:16
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:99:51:a8:3b:7a:02:d4:a8:37:95:50:77:d0:30:b7:c2:
         2b:1a:bb:c1:b1:cd:26:36:fa:96:1c:c3:49:8c:df:b2:c5:71:
         0c:28:0c:53:e8:0f:e7:c1:c4:f0:a8:34:1a:26:4e:41:d1:31:
         a7:91:40:c3:7d:ef:7f:18:5b:76:8f:7a:dd:a9:15:a9:15:aa:
         53:84:2c:8c:55:6a:cf:00:47:d8:8a:73:81:0f:9e:90:12:fa:
         1f:f8:81:c2:ec:0b:fa:b2:0e:ef:92:52:95:9e:8d:04:f4:a5:
         ef:8c:10:68:05:1c:48:44:75:06:e4:9e:ab:22:cb:96:37:43:
         81:4c:fa:3a:07:00:9c:41:eb:e8:63:c3:c9:70:0c:58:15:3e:
         c6:05:70:77:ef:ac:7d:13:3a:d6:b7:05:75:7d:cd:10:cd:0c:
         3e:20:15:61:8d:12:85:81:9a:1e:e1:1e:d5:bc:ca:3d:76:ac:
         0d:e9:ec:0c:dc:6e:71:24:06:44:19:0e:bc:55:b5:ee:3e:54:
         32:f6:5a:a0:93:02:93:17:07:7d:bb:7d:fe:7d:52:74:81:72:
         39:55:06:c0:c8:44:44:70:2b:75:ac:5c:b4:7d:1d:56:86:2e:
         a9:4e:c6:00:ce:cc:64:cb:16:c6:a1:69:76:bb:69:5e:e4:56:
         75:97:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org