Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa
File:                     3138372e38342e34342e302f32332d3233203d3e203533303532.roa (raw, json)
Hash identifier:          hThbYJzfCExtNbGoSnemWW7UDWQuojnSpPPKNsIgnJ0=
Subject key identifier:   8B:85:94:81:FB:0E:25:98:66:C1:A4:87:5D:F6:5F:33:69:9A:C2:F3
Certificate issuer:       /CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
Certificate serial:       6ED751520D791F8BD02C879CF3C8B5B7AE725736
Authority key identifier: CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa
Signing time:             Mon 30 Sep 2024 18:02:34 +0000
ROA not before:           Mon 30 Sep 2024 17:57:34 +0000
ROA not after:            Mon 29 Sep 2025 18:02:34 +0000
asID:                     53052
IP address blocks:        187.84.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl
                          rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:51:52:0d:79:1f:8b:d0:2c:87:9c:f3:c8:b5:b7:ae:72:57:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA6514D2DD1AF46E797D91C334C78A449B7403D
        Validity
            Not Before: Sep 30 17:57:34 2024 GMT
            Not After : Sep 29 18:02:34 2025 GMT
        Subject: CN=8B859481FB0E259866C1A4875DF65F33699AC2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:48:04:1e:e0:aa:df:b5:cb:cc:41:2f:b7:
                    84:01:c1:81:f0:23:e8:0a:bd:66:f5:3f:56:f5:52:
                    df:07:1e:5d:d0:88:43:14:59:37:13:bf:43:70:25:
                    bc:c9:9e:d2:0b:06:85:b8:77:a8:19:1d:fe:3a:5b:
                    37:5b:03:d0:50:10:1c:25:a4:c3:93:28:2d:39:b0:
                    9d:07:f1:39:96:fd:ba:86:7f:7a:1d:8b:cb:53:a7:
                    a0:6e:c0:ac:d6:ac:f4:6b:f5:4d:1d:ec:f5:0c:02:
                    8f:f1:0a:a2:a6:6f:d4:40:ae:85:f3:d6:ab:9e:fb:
                    ff:c7:48:00:7d:b2:35:f9:14:f4:d6:14:5a:16:30:
                    e1:56:45:94:0f:28:0c:b6:28:4d:bc:1b:31:4f:85:
                    a8:23:c4:dc:8a:dd:91:d5:59:74:e6:56:15:a2:93:
                    82:10:24:3b:02:52:bb:95:a3:73:8c:8c:6e:66:27:
                    5f:1d:94:bf:1e:7f:92:37:1e:45:7e:80:ab:80:41:
                    27:22:69:cf:6b:52:50:b9:9b:12:94:be:81:d8:11:
                    c3:60:f0:0c:14:ad:5b:03:ea:0a:3a:68:b6:65:b8:
                    ee:c6:f3:6f:2b:50:5e:1b:c2:dd:b1:5c:2f:fd:75:
                    2e:f3:e8:ed:9b:45:9e:04:dd:5e:c0:ba:8c:20:c4:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:94:81:FB:0E:25:98:66:C1:A4:87:5D:F6:5F:33:69:9A:C2:F3
            X509v3 Authority Key Identifier:
                keyid:CA:A6:51:4D:2D:D1:AF:46:E7:97:D9:1C:33:4C:78:A4:49:B7:40:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/CAA6514D2DD1AF46E797D91C334C78A449B7403D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAA6514D2DD1AF46E797D91C334C78A449B7403D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YU3uLQgUXu5EbRk7uWMaZdfLCKBgjQmX9Fg2tCw5LDU/0/3138372e38342e34342e302f32332d3233203d3e203533303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:18:6d:a4:bd:da:a7:89:f7:ee:cb:62:61:ea:8f:d5:8e:
         5a:90:2f:5b:e8:93:48:f5:37:3b:a3:df:79:9d:37:67:15:51:
         ef:ba:18:91:b5:3d:ad:13:e9:40:96:bb:de:37:ed:0d:76:78:
         b7:55:41:56:7e:9e:d7:f9:e1:64:51:6d:3d:ed:a7:5c:e6:b5:
         de:b7:27:75:3e:d9:e8:2e:53:9a:25:1a:f5:56:03:5f:55:de:
         67:18:d6:61:e2:06:02:83:6d:91:ca:8f:b1:14:a8:2b:11:36:
         81:66:a3:79:3c:4f:b7:04:ac:3c:60:ef:7e:ff:33:e9:a4:28:
         6c:42:68:0f:20:9b:12:a8:1a:88:4f:5f:ce:ad:c8:81:92:c9:
         7b:e4:f7:03:e1:d0:0f:50:9f:22:29:8d:02:dd:a1:f1:d0:b5:
         50:6a:04:f3:7a:c4:89:22:63:70:ab:43:56:b2:c1:99:8a:2a:
         a5:2f:e5:ec:c0:1b:e8:08:71:d0:57:be:9a:d2:2a:6d:6c:6c:
         6a:43:3c:c1:30:f4:dd:75:b7:d0:5f:8d:46:1c:b6:f0:e3:16:
         dc:70:7f:2f:4f:08:9a:24:67:d3:61:21:d5:5d:78:34:0c:1b:
         b5:1a:b4:65:33:2b:00:ad:5f:94:4e:a1:81:f2:f6:07:d9:1b:
         cb:49:56:76
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbtdRUg15H4vQLIec88i1t65yVzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBNjUxNEQyREQxQUY0NkU3OTdEOTFDMzM0Qzc4QTQ0
OUI3NDAzRDAeFw0yNDA5MzAxNzU3MzRaFw0yNTA5MjkxODAyMzRaMDMxMTAvBgNV
BAMTKDhCODU5NDgxRkIwRTI1OTg2NkMxQTQ4NzVERjY1RjMzNjk5QUMyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHEgEHuCq37XLzEEvt4QBwYHw
I+gKvWb1P1b1Ut8HHl3QiEMUWTcTv0NwJbzJntILBoW4d6gZHf46WzdbA9BQEBwl
pMOTKC05sJ0H8TmW/bqGf3odi8tTp6BuwKzWrPRr9U0d7PUMAo/xCqKmb9RAroXz
1que+//HSAB9sjX5FPTWFFoWMOFWRZQPKAy2KE28GzFPhagjxNyK3ZHVWXTmVhWi
k4IQJDsCUruVo3OMjG5mJ18dlL8ef5I3HkV+gKuAQSciac9rUlC5mxKUvoHYEcNg
8AwUrVsD6go6aLZluO7G828rUF4bwt2xXC/9dS7z6O2bRZ4E3V7AuowgxOEXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUi4WUgfsOJZhmwaSHXfZfM2mawvMwHwYDVR0j
BBgwFoAUyqZRTS3Rr0bnl9kcM0x4pEm3QD0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlVM3VMUWdVWHU1RWJSazd1V01hWmRmTENLQmdqUW1YOUZnMnRDdzVM
RFUvMC9DQUE2NTE0RDJERDFBRjQ2RTc5N0Q5MUMzMzRDNzhBNDQ5Qjc0MDNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQTY1MTREMkREMUFGNDZF
Nzk3RDkxQzMzNEM3OEE0NDlCNzQwM0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZVTN1TFFnVVh1NUViUms3dVdNYVpkZkxDS0JnalFtWDlGZzJ0Q3c1TERVLzAv
MzEzODM3MmUzODM0MmUzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMzMw
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbtULDANBgkqhkiG9w0BAQsFAAOCAQEAK8QYbaS92qeJ
9+7LYmHqj9WOWpAvW+iTSPU3O6PfeZ03ZxVR77oYkbU9rRPpQJa73jftDXZ4t1VB
Vn6e1/nhZFFtPe2nXOa13rcndT7Z6C5TmiUa9VYDX1XeZxjWYeIGAoNtkcqPsRSo
KxE2gWajeTxPtwSsPGDvfv8z6aQobEJoDyCbEqgaiE9fzq3IgZLJe+T3A+HQD1Cf
IimNAt2h8dC1UGoE83rEiSJjcKtDVrLBmYoqpS/l7MAb6Ahx0Fe+mtIqbWxsakM8
wTD03XW30F+NRhy28OMW3HB/L08ImiRn02Eh1V14NAwbtRq0ZTMrAK1flE6hgfL2
B9kby0lWdg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:12 2025 by rpki-client