Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa
File:                     3138372e38342e33322e302f32322d3232203d3e203533303532.roa (raw, json)
Hash identifier:          WvMSp+GFpz1ZLnYoRXApOoLFeFsurLKwhA6gN9z3vso=
Subject key identifier:   E1:80:3C:42:E7:23:C3:9D:CD:1C:3A:CA:C4:88:45:8D:F7:E0:F8:DB
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       0E44D540730D53F1F2F068E768382F786790319B
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:01:55 +0000
ROA not before:           Mon 30 Sep 2024 17:56:55 +0000
ROA not after:            Mon 29 Sep 2025 18:01:55 +0000
asID:                     53052
IP address blocks:        187.84.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:44:d5:40:73:0d:53:f1:f2:f0:68:e7:68:38:2f:78:67:90:31:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:56:55 2024 GMT
            Not After : Sep 29 18:01:55 2025 GMT
        Subject: CN=E1803C42E723C39DCD1C3ACAC488458DF7E0F8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:7e:06:3a:fe:0d:b5:cb:f1:98:86:5b:09:
                    d6:90:a2:e7:2d:7f:31:9f:a8:06:ec:8e:e6:d4:69:
                    ac:89:b6:cc:8b:bc:f4:a1:ea:63:0c:ad:94:ad:27:
                    43:1c:c7:d1:70:03:9d:fd:a2:da:92:ae:d4:88:7a:
                    ac:1d:0e:9d:b0:41:ec:9f:72:ed:09:b0:df:b1:cb:
                    e6:18:71:4e:14:5f:d4:1d:38:11:04:6d:58:7e:69:
                    4b:c0:3d:e9:6a:0a:0f:03:b2:1a:61:33:49:c6:f5:
                    81:28:37:ce:8f:81:e6:33:e9:de:4d:08:a6:41:bc:
                    29:6f:b1:b7:7f:86:db:dc:07:e1:32:43:ae:ee:b6:
                    a6:08:53:25:27:b2:99:f6:94:7f:5a:d5:e4:9d:ef:
                    26:85:9c:49:7e:2c:19:8e:69:4d:1f:e3:b9:fe:df:
                    46:ee:c2:a0:c1:95:36:67:dd:d7:c3:0f:4d:64:04:
                    c9:de:8a:75:29:18:e1:87:9b:f3:76:08:8b:82:53:
                    5d:16:3d:e2:fa:9c:6b:15:f0:2d:71:82:52:ac:24:
                    f1:ec:b9:c7:1c:d6:4f:aa:48:d8:49:c6:1a:0a:fb:
                    3e:a0:72:b9:94:6c:71:d4:4d:21:e9:dd:8d:b6:53:
                    f1:f6:4d:17:12:17:f3:16:fd:a1:d2:be:00:31:c9:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:3C:42:E7:23:C3:9D:CD:1C:3A:CA:C4:88:45:8D:F7:E0:F8:DB
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32322d3232203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:9c:81:8b:81:72:8f:4f:56:ec:54:0c:97:d0:f3:33:8d:0c:
         b2:0c:ab:cf:e4:55:75:d3:ae:d5:ca:af:b6:8e:cd:be:e7:2c:
         e4:1f:82:62:bb:5d:45:e2:8d:38:fd:cb:2e:08:fe:ff:ab:b4:
         c0:e2:2c:d1:32:83:50:f4:a8:07:13:90:8e:2c:e5:ae:1f:d3:
         00:8b:aa:a3:db:5e:84:a4:55:ed:bc:74:2d:79:19:9b:1f:ed:
         ee:17:b3:95:92:48:ea:9e:c1:f8:d5:67:b7:34:1e:24:60:0c:
         0a:f4:d9:db:78:e5:f7:39:df:70:15:4d:7c:19:a5:b0:3c:00:
         a1:c2:5d:b6:47:b7:60:41:89:6f:f9:95:98:99:44:a4:c6:cf:
         c7:2a:33:52:fd:3b:47:05:b7:18:fc:e2:2c:40:0e:dc:91:04:
         b2:91:bf:db:e3:bf:e0:ad:2f:94:aa:8e:10:a7:64:6d:47:dd:
         2a:3a:52:b4:85:b8:32:70:c9:14:47:08:b7:51:c4:5b:d0:14:
         75:20:17:5e:90:ab:31:f5:bb:7a:d0:a4:fb:16:6e:6a:87:79:
         c7:8d:c7:a9:3a:b8:c5:eb:c2:97:de:63:89:67:35:f9:3c:ba:
         fa:ad:82:3d:d8:72:87:47:a7:4f:e9:d7:13:e3:e3:ff:d4:5d:
         c8:8c:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:36 2024 by rpki-client on console-fra.rpki-client.org