Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32312d3231203d3e20323632383237.roa
File:                     3138372e38342e3137362e302f32312d3231203d3e20323632383237.roa (raw, json)
Hash identifier:          YNEsKHY4W7ix9usRrPS1p6i7KVklUu9fLMVy00Zemq8=
Subject key identifier:   D7:A5:11:74:57:0C:9B:E0:A3:1C:D1:C5:C2:0F:7C:54:DD:11:C3:C2
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       78492AC6B018DD3FDA9A3F7D36BE738832EF87D5
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32312d3231203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:44 +0000
ROA not before:           Fri 23 Aug 2024 19:56:44 +0000
ROA not after:            Fri 22 Aug 2025 20:01:44 +0000
asID:                     262827
IP address blocks:        187.84.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:49:2a:c6:b0:18:dd:3f:da:9a:3f:7d:36:be:73:88:32:ef:87:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:44 2024 GMT
            Not After : Aug 22 20:01:44 2025 GMT
        Subject: CN=D7A51174570C9BE0A31CD1C5C20F7C54DD11C3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:29:e9:56:18:41:2f:93:fe:b9:23:cd:49:
                    29:12:95:11:4b:82:fa:53:48:89:5f:39:f6:16:70:
                    4c:20:17:56:b5:b2:1a:f5:81:69:27:74:14:9a:4d:
                    15:9a:a8:32:d6:e7:eb:27:a2:34:9b:be:13:f3:fa:
                    eb:9e:9d:bc:26:79:d8:3b:c8:9d:82:87:09:0e:37:
                    ed:0c:71:34:4d:a0:07:68:3b:a3:20:fd:0e:89:65:
                    c5:12:5c:28:bc:c7:91:71:2b:95:e6:66:71:b5:43:
                    f6:9d:a1:61:28:0a:1b:ba:50:9b:c6:0e:a3:3c:c4:
                    ea:8c:c1:d9:64:ba:8b:6f:82:2c:fd:46:64:9f:75:
                    a1:3f:26:f7:28:87:f7:12:b7:ce:c9:7a:dc:55:9c:
                    02:8f:4f:83:38:9d:25:54:c4:53:0a:96:1b:cc:d1:
                    11:e7:3c:3a:d9:08:92:1f:ec:86:1f:b3:2e:e6:68:
                    1e:7e:71:5e:84:23:77:24:39:ca:05:f8:78:e9:74:
                    58:dc:17:99:ae:10:5b:85:9a:7a:6c:b9:1d:13:ab:
                    28:9a:43:f0:7b:40:45:2f:bd:9f:42:c6:fb:72:0a:
                    a1:32:7b:cb:82:58:60:46:c9:8f:c0:63:f8:50:72:
                    96:1a:5c:41:18:f9:87:0c:da:f7:53:5e:6d:87:a4:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:11:74:57:0C:9B:E0:A3:1C:D1:C5:C2:0F:7C:54:DD:11:C3:C2
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137362e302f32312d3231203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:2f:5b:6a:0c:9c:c3:84:cf:65:d1:21:46:d0:8a:07:51:
         af:da:5b:83:58:b8:5d:f7:3e:93:43:31:0c:3b:e5:b0:67:74:
         5c:56:e8:9e:2a:76:b4:31:f7:10:a8:b5:d5:54:2e:40:f4:0f:
         65:46:72:7a:12:19:6e:32:35:48:87:4e:65:b1:0b:b7:6e:ce:
         8d:9d:88:26:05:f4:94:43:f6:f0:1b:39:ac:f9:68:5e:9d:f0:
         55:69:1d:b5:84:3c:93:a2:6e:92:c5:61:0d:40:37:79:a8:03:
         94:70:7c:3c:06:3f:f3:e5:c7:8d:bd:23:9c:74:e7:ce:f3:d8:
         dc:77:8f:eb:fc:08:b9:15:ac:df:55:a4:43:a0:07:8e:75:03:
         ad:df:47:47:3f:77:4f:ef:fe:b8:70:94:a4:6f:9d:f2:6b:04:
         0a:be:0f:e4:51:64:7c:75:b7:c9:4a:f0:30:ae:2c:f0:c6:15:
         8e:29:2a:0f:68:08:ef:96:97:97:b3:1b:45:2d:4b:12:7b:9c:
         8b:2a:5d:7c:cc:d2:94:e5:45:fa:65:34:4b:ee:29:35:53:83:
         87:c5:dc:3f:ee:28:52:25:b8:10:0a:ee:51:9c:c4:3c:1f:41:
         4c:ee:56:92:3f:6c:05:30:62:80:8f:77:a7:c3:78:02:e5:8d:
         36:16:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org