Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa
File:                     3138372e38342e33342e302f32332d3233203d3e203533303532.roa (raw, json)
Hash identifier:          cUPScbWs/N6RqYu4Dr4VNtJi1NWcmLGYi2vArlUWhNw=
Subject key identifier:   EB:C7:05:2B:49:BA:A8:90:75:70:23:F9:16:87:CF:AD:C4:0C:2C:6C
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       4DE83A2BB892B76291462E698AF18CDA6C173942
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:02:11 +0000
ROA not before:           Mon 30 Sep 2024 17:57:11 +0000
ROA not after:            Mon 29 Sep 2025 18:02:11 +0000
asID:                     53052
IP address blocks:        187.84.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e8:3a:2b:b8:92:b7:62:91:46:2e:69:8a:f1:8c:da:6c:17:39:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:57:11 2024 GMT
            Not After : Sep 29 18:02:11 2025 GMT
        Subject: CN=EBC7052B49BAA890757023F91687CFADC40C2C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:6f:e5:83:e9:15:0a:29:a8:57:ff:54:b0:
                    28:90:04:3e:be:2f:a1:5e:a5:ec:1f:87:b6:98:b5:
                    ce:54:f9:76:b7:b5:42:ed:9f:c7:25:ab:c8:bf:86:
                    c3:0e:f8:71:2c:8c:e3:82:37:ef:34:b1:29:72:7e:
                    f7:67:a8:36:4b:ee:18:68:10:c2:68:68:2b:bc:d9:
                    93:e5:1e:c4:2e:e5:14:c1:05:7f:09:e6:a5:c1:e1:
                    7f:f5:1c:dc:cf:89:6b:85:7c:4b:d1:80:18:94:f1:
                    51:9e:3c:70:8d:5f:1b:80:09:0c:cc:69:43:7a:f2:
                    7f:80:83:4a:11:5d:cc:b3:73:08:e9:46:20:5f:c1:
                    99:3e:fc:51:ed:23:fe:12:9a:d6:81:50:13:e2:05:
                    64:a6:ba:34:87:7e:43:f2:8a:06:06:1b:9f:5a:88:
                    d5:12:04:5f:ad:b5:df:83:f0:38:4b:48:fd:9b:6a:
                    30:8f:c2:aa:fb:be:f9:0f:e4:be:ff:29:00:e3:33:
                    66:0c:0a:5a:75:21:94:e4:35:05:c7:62:71:32:d9:
                    40:8a:34:59:6d:d5:fe:37:de:f2:b2:2c:10:13:5a:
                    80:e5:f8:58:0b:0b:f6:a8:1c:00:31:b2:65:0f:e2:
                    52:16:70:6e:38:7f:6d:6d:24:d0:2b:70:7c:a0:d3:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C7:05:2B:49:BA:A8:90:75:70:23:F9:16:87:CF:AD:C4:0C:2C:6C
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e33342e302f32332d3233203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:50:29:2e:4c:78:ab:c1:8e:2d:2d:57:e3:22:14:90:17:89:
         8a:58:86:1e:ac:74:be:19:d1:1e:b3:75:71:ba:9e:54:5f:f2:
         d7:57:88:ea:18:64:48:30:6e:f1:fd:8c:09:83:b7:b1:ca:22:
         42:15:31:16:f5:b4:b8:32:14:c7:1b:9d:8e:82:1b:29:23:d9:
         bf:c1:3f:fe:d1:cc:99:d2:f2:85:da:be:c9:ba:a5:d8:77:9d:
         42:d5:f8:69:98:7e:e3:de:f3:c1:eb:18:ed:27:7b:ee:ce:f2:
         37:bd:b9:c8:36:d6:f9:84:27:a0:9c:ab:74:85:1e:5c:0a:26:
         a1:4b:2b:e7:ea:8d:31:eb:51:29:14:4a:c9:ec:d3:5a:79:bb:
         14:3d:73:15:97:19:bb:e0:92:4e:4b:5c:7e:7f:bb:e3:7a:db:
         1f:e6:6b:52:96:56:cc:c3:e8:97:41:46:7b:6f:ee:d3:7c:bc:
         cc:aa:7f:c8:3c:9e:f8:54:51:de:6e:06:17:e1:4e:6e:2d:2f:
         bd:6c:73:61:d2:13:e9:c6:4d:40:fc:94:0e:56:a0:70:78:3f:
         fd:f8:1b:59:71:53:32:b7:df:95:ac:b3:f6:88:a9:63:a7:63:
         9c:7b:60:5f:f8:9d:e0:8a:8e:39:31:36:d2:91:84:cf:65:4d:
         8b:02:4d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:59 2025 by rpki-client