Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32332d3233203d3e203533303532.roa
File:                     3138372e38342e33322e302f32332d3233203d3e203533303532.roa (raw, json)
Hash identifier:          HJmD5qUaMT1AgS6AUbX/55PhShz/3XuHcmcin8crVsg=
Subject key identifier:   85:3F:35:66:9E:5E:0B:25:97:87:ED:F1:2B:F2:7C:5E:A7:C4:A4:9A
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       5A9426FFAC02E6D06292C5F86C544D6E1B025848
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32332d3233203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:01:58 +0000
ROA not before:           Mon 30 Sep 2024 17:56:58 +0000
ROA not after:            Mon 29 Sep 2025 18:01:58 +0000
asID:                     53052
IP address blocks:        187.84.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:94:26:ff:ac:02:e6:d0:62:92:c5:f8:6c:54:4d:6e:1b:02:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:56:58 2024 GMT
            Not After : Sep 29 18:01:58 2025 GMT
        Subject: CN=853F35669E5E0B259787EDF12BF27C5EA7C4A49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:01:81:16:75:5d:24:c2:d7:e5:f6:30:1a:
                    51:4d:cc:34:98:99:df:98:7f:45:9b:8f:4b:ee:71:
                    31:08:d7:35:70:8b:9a:6f:fa:ca:3f:93:1a:d7:68:
                    23:aa:1f:04:0e:91:ba:2a:8f:61:c6:a2:48:b4:78:
                    0a:33:9d:fb:5b:64:bc:1a:67:65:3f:13:55:37:0a:
                    04:f3:80:d9:49:a6:c9:4a:a2:04:a1:fb:83:05:b6:
                    9c:41:eb:e4:ff:3e:8a:9f:5e:ac:bc:91:af:0c:46:
                    e2:56:dd:06:79:f0:c7:62:f8:74:71:83:14:ca:ff:
                    16:bc:ba:24:33:dd:7f:c3:c9:51:0f:80:51:5f:18:
                    c2:90:c3:1e:f6:b6:6e:78:91:eb:d5:c2:52:b7:86:
                    36:3d:f3:f3:2b:66:cb:db:e7:88:b3:d6:6a:af:2e:
                    7d:ba:21:08:22:cd:b5:53:33:59:8a:95:3e:0c:2b:
                    cd:51:f6:ac:68:d9:32:48:cc:07:bc:01:b5:72:79:
                    9e:a8:05:b2:fa:0a:b0:41:db:41:f6:de:c0:79:2a:
                    4d:ab:1a:3f:f6:71:d3:5b:be:12:23:bd:90:a3:e1:
                    88:c6:17:a1:7c:6a:ef:19:86:8e:60:71:5c:15:39:
                    dd:76:0b:e8:41:aa:1d:36:9a:98:87:5e:03:77:8a:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3F:35:66:9E:5E:0B:25:97:87:ED:F1:2B:F2:7C:5E:A7:C4:A4:9A
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32332d3233203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:77:9e:15:d3:b9:00:96:78:a5:32:82:93:b6:9d:07:97:
         5a:d8:8a:2f:9e:90:87:28:d8:81:8d:d7:1a:a0:cc:16:a9:f2:
         35:8a:15:55:5e:eb:ae:a9:21:2b:d8:27:fe:eb:89:c6:21:9a:
         b9:5b:b1:79:03:e5:19:1a:b9:12:5b:ec:91:2f:e5:49:ff:72:
         91:27:11:23:b7:db:d8:78:d0:33:7f:d8:ec:c2:c8:59:70:28:
         70:45:41:f1:90:9a:2c:5f:1a:4c:0e:dd:82:fe:01:4a:46:e9:
         40:86:a5:bb:fd:16:ee:52:ec:54:14:b5:ff:d1:d4:ce:8c:ba:
         ea:b0:2a:f8:00:33:4d:07:30:41:8f:a3:a8:ef:96:01:40:77:
         d2:7f:aa:6e:88:c7:5a:a7:c2:ac:fe:b5:cb:12:f5:69:72:fb:
         00:06:4e:f7:d6:5e:b5:a3:1e:0c:47:d8:8d:7c:9d:8f:3b:a9:
         ed:fb:78:8f:1a:3e:a6:b5:1d:91:18:50:dd:c7:0c:84:73:8f:
         28:89:ae:c1:b2:51:e5:05:c1:02:a9:41:f6:94:5d:88:96:96:
         be:bb:f7:bf:e6:b0:21:14:a9:5c:0f:e6:49:04:6e:29:2e:13:
         18:4e:fc:5f:e6:a3:e8:82:8c:09:da:2d:eb:4e:d6:fd:f4:60:
         ec:8e:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:27:02 2025 by rpki-client