Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138362e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3138362e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          92n+vLMXnINUOtdbWtI5eBW8B/JS47mLmQP6UbU+7kU=
Subject key identifier:   7D:33:72:5F:DB:EB:25:98:4E:BA:D2:8E:0B:DB:25:51:D1:9C:04:86
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       63ABB75CBDE92281A1E16BFB989575986AB45107
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138362e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:45 +0000
ROA not before:           Wed 07 Aug 2024 13:09:45 +0000
ROA not after:            Wed 06 Aug 2025 13:14:45 +0000
asID:                     262444
IP address blocks:        200.79.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:b7:5c:bd:e9:22:81:a1:e1:6b:fb:98:95:75:98:6a:b4:51:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:45 2024 GMT
            Not After : Aug  6 13:14:45 2025 GMT
        Subject: CN=7D33725FDBEB25984EBAD28E0BDB2551D19C0486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d9:16:cd:29:93:99:73:6b:8e:d8:d7:3a:b1:
                    17:db:64:32:33:41:b1:97:04:92:d6:1d:b6:18:1d:
                    8c:6a:cb:4e:c0:28:9c:b4:d1:df:d1:dc:c7:c1:42:
                    24:2f:af:83:c5:c9:3c:ff:41:f5:f3:19:76:01:91:
                    ba:d1:b6:8c:78:8c:ef:7e:48:63:91:2c:04:c0:5d:
                    e0:e6:31:63:97:17:17:25:8c:12:8c:dc:1c:e0:97:
                    6a:65:c2:15:1f:ea:7b:dc:43:f9:0f:1c:a9:b8:80:
                    c4:95:fb:ab:f2:4b:21:38:f2:ed:b9:8a:61:4d:4f:
                    19:99:ca:cd:bb:4a:32:fb:7c:4c:94:57:89:bc:5d:
                    59:1d:cc:fb:e7:ad:e6:d0:a7:13:cf:48:d1:3c:30:
                    73:23:d4:dc:5e:32:74:2d:32:fd:a6:6f:19:cf:60:
                    61:72:2a:14:b9:2d:34:44:82:2b:04:5a:e3:d1:5e:
                    87:8d:1a:42:ba:4e:32:ae:3c:9c:0a:3e:3c:68:ae:
                    c1:3b:7b:50:e4:93:ea:94:dc:3f:d8:7e:af:ef:6a:
                    81:36:83:39:ff:98:f4:c6:99:08:fe:ce:b9:fe:5a:
                    3a:60:6c:28:dc:72:9e:7e:be:2e:9b:c6:fe:51:0a:
                    01:43:49:50:7d:5a:96:3b:6e:02:98:c4:1f:b8:9a:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:33:72:5F:DB:EB:25:98:4E:BA:D2:8E:0B:DB:25:51:D1:9C:04:86
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138362e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:30:3a:61:f8:d6:0e:66:78:0d:ab:af:0c:f1:1a:28:04:5c:
         02:f4:56:bd:9b:2d:8b:51:3b:6f:57:3a:b0:84:9b:ac:e8:0c:
         48:db:b5:9d:f3:1a:1d:3f:9e:41:bb:cd:79:6a:69:62:21:bc:
         96:ac:e6:a2:91:93:a0:e8:6c:52:a0:33:71:fc:78:53:fa:f3:
         02:6b:b2:9f:dd:5a:26:2e:47:4e:74:ee:41:8a:64:89:c3:7e:
         a7:a3:64:e7:b3:c7:80:ff:7d:22:ae:e6:f5:6c:6a:89:a7:e5:
         eb:f3:bd:e8:77:83:17:56:07:cf:14:19:a2:f1:a9:3c:8c:50:
         92:c6:3d:68:92:9d:96:8c:98:13:a6:5d:3b:0a:8c:c4:9b:37:
         c7:9a:4f:c5:6e:38:e8:5d:97:3b:ed:81:71:3d:40:a5:6f:63:
         ce:6c:e8:3a:3f:3e:7f:2c:45:90:43:ac:0d:9d:0f:f8:1a:cc:
         46:fc:02:a3:9f:7e:02:26:56:74:85:d1:57:cf:c0:1f:83:23:
         be:93:5d:e0:cc:94:21:c0:e1:e4:4a:93:0f:ac:f2:f9:07:d5:
         10:ca:64:69:86:41:aa:3b:3e:ee:ce:3b:98:ba:62:9b:69:6f:
         a3:98:e2:f9:6b:9f:98:23:c4:b6:7c:08:bf:5f:43:6b:5d:7b:
         d4:8d:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:50 2024 by rpki-client on console-fra.rpki-client.org