Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa
File:                     3138372e38342e33322e302f32342d3234203d3e203533303532.roa (raw, json)
Hash identifier:          JReu8cGFxxLvA4Jdlc1SX2dVoJNJ3KsK3BHRHFp4m5I=
Subject key identifier:   A6:6D:4C:9B:96:21:32:96:31:4B:D9:8D:F3:FA:55:B2:C5:5D:E9:C3
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       41F6057065034EF7FF33582D24A7F2B537577B8B
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:02:02 +0000
ROA not before:           Mon 30 Sep 2024 17:57:02 +0000
ROA not after:            Mon 29 Sep 2025 18:02:02 +0000
asID:                     53052
IP address blocks:        187.84.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:05:70:65:03:4e:f7:ff:33:58:2d:24:a7:f2:b5:37:57:7b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:57:02 2024 GMT
            Not After : Sep 29 18:02:02 2025 GMT
        Subject: CN=A66D4C9B96213296314BD98DF3FA55B2C55DE9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:0c:fc:c2:20:a4:86:be:48:b8:1e:69:59:
                    4d:2d:28:30:ea:a9:c6:05:f1:18:ef:98:d1:47:98:
                    12:24:90:6b:6f:62:04:87:3c:50:72:38:94:7c:a8:
                    e8:37:5f:df:4e:8d:14:8f:b5:c9:3d:24:e0:19:c0:
                    37:29:25:6e:af:bb:b6:3c:db:04:af:29:ce:aa:f0:
                    19:55:69:c1:b4:f4:65:f6:89:1d:0b:54:ac:13:c9:
                    fd:a5:44:9f:5b:c5:d5:49:fa:f9:d1:e8:59:bf:8d:
                    bd:74:89:a8:34:ca:15:fa:1b:92:20:9c:05:34:7d:
                    3e:38:08:18:e6:d4:80:d6:71:a7:ae:59:36:e4:e0:
                    4a:34:ac:44:48:2c:a6:c1:08:fb:e6:be:af:52:d2:
                    2b:cc:f2:76:4b:23:72:75:b0:26:cb:1c:31:0d:c6:
                    ad:81:42:b4:fc:1e:8b:70:51:2b:4b:38:51:b6:65:
                    35:b1:f2:3f:ea:4a:aa:c8:eb:f1:53:56:91:d3:97:
                    8d:b7:c4:f1:db:15:31:69:66:a4:8c:01:69:12:0c:
                    74:d5:0b:78:42:30:32:98:38:df:27:9e:a5:26:2e:
                    7a:5a:dd:28:bf:13:8d:3f:66:74:a7:e8:e6:90:70:
                    06:c5:81:30:cc:fc:7c:2a:d3:7e:75:f5:ff:c5:e1:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6D:4C:9B:96:21:32:96:31:4B:D9:8D:F3:FA:55:B2:C5:5D:E9:C3
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33322e302f32342d3234203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:ef:52:2d:bc:b8:2c:00:3a:11:fe:72:f2:33:f8:a6:17:
         70:53:eb:54:fc:fe:ce:e8:d4:fe:f9:dd:41:da:a1:fa:90:68:
         38:34:42:05:e1:c5:58:c9:06:9b:7a:0f:36:97:21:49:e9:87:
         22:62:bb:78:11:74:ca:e3:a3:a3:fd:11:f8:72:b4:e1:c2:1c:
         d3:09:68:0a:34:7e:f2:da:ca:43:ae:2b:6c:8a:f9:0f:9e:dc:
         39:a4:06:79:1f:38:67:42:52:a9:08:f2:4c:8b:ba:56:68:79:
         9e:8f:61:2d:89:cb:45:46:32:0f:56:30:0c:11:b3:13:9a:11:
         86:8f:08:68:61:b6:60:93:6b:b6:2c:5a:6c:b2:40:c9:7a:a0:
         4b:5a:7e:64:06:c5:3b:62:1c:9c:00:00:18:a9:6e:91:e6:33:
         5f:7b:5c:37:cf:f7:6c:ab:77:0e:26:ae:19:cc:34:8c:7b:41:
         17:0c:9d:6b:cf:a6:14:48:d7:6f:f0:4d:b8:45:f0:54:28:5e:
         39:5e:e0:fb:25:d3:ae:c0:dd:18:27:3e:48:98:ba:ad:2e:97:
         87:4b:4f:fb:e2:15:67:92:0a:8a:36:ec:85:30:eb:fd:17:d2:
         5e:be:a4:0a:81:82:f8:54:78:51:88:1d:59:0a:e7:92:c6:7d:
         ce:4b:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:36 2024 by rpki-client on console-fra.rpki-client.org