Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa
File:                     3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa (raw, json)
Hash identifier:          loeLBNLP8iDpVatkYPWYkmWE+d5DSLp8g23BM+bw6xM=
Subject key identifier:   74:8E:86:89:06:A8:25:59:C4:84:B5:1A:35:1A:F2:50:2B:B0:2E:C6
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       3EBCB3513D06E67BEB3D4B4FFF0C99674B2DE666
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa
Signing time:             Thu 01 Aug 2024 16:31:59 +0000
ROA not before:           Thu 01 Aug 2024 16:26:59 +0000
ROA not after:            Thu 31 Jul 2025 16:31:59 +0000
asID:                     272549
IP address blocks:        187.84.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:b3:51:3d:06:e6:7b:eb:3d:4b:4f:ff:0c:99:67:4b:2d:e6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Aug  1 16:26:59 2024 GMT
            Not After : Jul 31 16:31:59 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:40:a8:a9:58:aa:cc:e2:7b:37:fe:53:aa:
                    54:1b:a0:86:c0:01:56:d7:f7:29:6d:bb:1a:9b:f9:
                    6a:99:15:1a:ef:00:8c:7f:22:a2:81:cd:68:28:3b:
                    d3:da:3f:00:a2:bf:fc:a7:4f:fb:0b:69:b4:dc:f7:
                    8a:e3:5d:3d:17:f6:5a:a3:34:ff:c4:f1:6d:12:05:
                    8f:4d:db:98:9e:b9:29:d4:e8:ee:cb:7d:d1:fd:69:
                    7f:4a:b9:3c:7c:be:24:39:9a:07:28:58:3a:fe:ac:
                    96:d4:dc:aa:44:e1:00:20:2c:8f:12:08:17:37:3d:
                    0c:76:11:d5:37:48:68:78:a1:4e:3b:48:ce:69:30:
                    d6:31:0b:0a:fa:67:5a:03:a9:de:ba:5b:f3:f2:22:
                    10:80:00:7c:98:b8:4e:1f:ef:56:2e:ac:d0:87:f8:
                    87:32:0c:41:28:e7:f1:b3:73:06:79:14:e2:92:21:
                    99:ca:13:6b:e6:8e:8b:48:7a:8e:59:38:1b:1d:e0:
                    b9:a2:94:d8:fd:4e:af:be:95:e8:c9:a6:12:44:be:
                    f1:50:a7:f6:d2:60:70:ad:91:6c:2b:f9:34:f9:c3:
                    98:50:90:1a:5a:c9:c5:aa:64:db:5d:9e:ba:01:a6:
                    03:84:ee:ce:30:5c:99:78:20:b9:c0:c4:d3:4c:92:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8E:86:89:06:A8:25:59:C4:84:B5:1A:35:1A:F2:50:2B:B0:2E:C6
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/3138372e38342e3135322e302f32322d3234203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:88:16:69:f8:de:0e:63:ed:29:fc:25:1f:ef:ad:8b:63:0b:
         c8:fc:ab:c5:6b:6f:58:36:24:74:ba:91:a2:92:33:1c:bf:f8:
         7b:2b:75:c3:a1:bf:86:de:74:1c:0f:48:2e:60:2f:36:84:4d:
         c2:70:ec:ab:f0:8a:ac:d8:72:01:6c:7a:a5:df:48:23:4e:6c:
         fb:8f:17:c2:a5:6d:3d:fb:e8:ba:d2:a0:d9:88:d0:b5:37:46:
         eb:ac:7d:88:b3:ea:cc:a7:e8:0c:b1:9a:0a:e3:13:49:76:d0:
         4a:bb:93:e2:56:99:a8:fd:f4:40:bf:35:27:be:9f:19:10:67:
         2a:e3:87:ad:85:16:57:74:c9:5f:47:00:c2:a4:d6:64:83:c5:
         7d:57:63:d3:4d:3a:a0:ef:bc:dc:c8:f2:48:cd:cf:c1:3d:3a:
         48:11:1c:a5:fb:5b:7f:9a:9d:14:1c:70:1a:49:3c:5d:58:70:
         cd:c7:b3:96:aa:c1:d2:12:6f:c4:63:69:7e:07:36:9e:ac:e1:
         1d:34:37:36:a6:77:ee:6d:77:24:7f:e7:91:95:96:45:84:c6:
         4c:1b:4b:1b:62:7a:ea:cc:f1:b2:a0:58:c7:00:6a:d2:45:51:
         69:d9:5b:a8:01:fc:de:df:d3:ca:69:fb:35:a8:dc:28:62:20:
         84:c1:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org