Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          55kAOQaXSTGNhnYy14xi3+Av3QLv7nyIzjUCBa5HIZs=
Subject key identifier:   90:CB:56:B7:26:4D:EC:15:26:AC:AE:9D:F7:7C:BC:A5:09:17:85:50
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       43ACE2F24BB357D7D6627AA1A57378EBA9B6ACC2
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:38 +0000
ROA not before:           Fri 23 Aug 2024 19:56:38 +0000
ROA not after:            Fri 22 Aug 2025 20:01:38 +0000
asID:                     262827
IP address blocks:        187.84.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ac:e2:f2:4b:b3:57:d7:d6:62:7a:a1:a5:73:78:eb:a9:b6:ac:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:38 2024 GMT
            Not After : Aug 22 20:01:38 2025 GMT
        Subject: CN=90CB56B7264DEC1526ACAE9DF77CBCA509178550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:ef:69:49:a3:07:ac:2b:8f:a9:e9:45:df:
                    e5:42:f9:0c:3d:cb:6f:80:e0:17:eb:1a:9a:b3:14:
                    32:1d:19:a2:a9:e3:0a:2a:db:49:b1:36:6d:7c:ea:
                    69:dc:d7:79:cc:a5:a9:7a:dd:62:ed:85:e9:29:59:
                    b2:46:b4:9f:16:ab:c4:2a:73:e8:36:04:a1:a0:7f:
                    cc:6e:12:f8:ef:33:6f:08:c6:b4:c5:86:d7:67:65:
                    66:ac:9e:0a:8f:14:e2:3a:3e:f1:72:c8:db:84:2e:
                    02:dc:ae:4e:e7:cc:af:7a:16:f1:d3:bd:6c:a0:e1:
                    ce:d4:d3:e0:fc:f1:90:a0:6b:2e:d7:81:20:5c:a6:
                    f6:43:02:af:1f:3b:9e:a0:90:9e:54:c4:ed:75:fa:
                    cb:da:05:c8:62:ad:c6:a9:9c:d1:4a:44:4d:b9:c5:
                    fa:21:d4:e5:2e:b4:f2:13:5b:ad:b0:0b:94:ae:99:
                    32:cb:a8:f5:72:bb:2f:83:ce:67:fa:35:fd:5a:fd:
                    f0:66:17:a5:a1:b3:51:c1:56:2f:e3:cc:a9:0b:a2:
                    a7:ad:26:67:d9:f1:7f:3f:14:7a:1c:6d:0f:f6:16:
                    db:71:74:f7:58:6b:b0:ec:a8:85:67:42:cd:70:9d:
                    ee:21:c6:23:e8:4b:2d:db:00:96:a8:2d:c7:23:cc:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CB:56:B7:26:4D:EC:15:26:AC:AE:9D:F7:7C:BC:A5:09:17:85:50
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137372e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:f9:43:65:68:bb:52:3f:38:55:7d:00:c0:d0:1d:64:c1:
         63:c0:5f:32:2f:b6:9c:f0:3b:81:32:7e:1c:fc:24:ac:b8:30:
         69:d3:f0:c7:cb:ec:55:c6:c8:5f:81:79:8a:14:8b:34:49:16:
         7c:f3:0b:12:bb:e1:17:7c:52:f4:4b:a2:64:a7:1e:35:a4:c9:
         b9:e0:9a:01:e4:a9:4e:60:4c:75:92:be:1a:63:54:11:f9:a7:
         95:37:25:61:76:0b:cc:24:55:d5:fe:64:be:dc:db:2f:6b:24:
         3f:ab:cb:23:99:e9:6a:5f:0b:6b:93:a5:ab:2a:84:f7:ac:69:
         9c:13:0d:86:7b:14:13:41:e2:b2:dc:b7:0b:3d:e6:30:fd:b4:
         df:5c:d8:d9:6f:ff:2d:07:d1:5c:bd:85:48:7a:6f:b6:7c:cf:
         fc:1b:b4:19:e3:c7:0b:07:71:8d:73:df:11:36:9e:3e:6f:ce:
         15:54:50:14:68:6e:08:0d:d3:ea:45:77:05:c4:a2:f4:a2:ec:
         fd:b9:70:ed:6a:01:21:00:29:70:78:f1:be:18:29:1b:bf:52:
         21:12:e5:63:bd:f9:cc:d2:43:b1:9d:bc:2d:28:05:f4:a6:54:
         43:59:f5:d1:2e:82:29:49:66:8b:26:8b:f2:39:40:99:f0:38:
         c2:d1:2d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:50 2024 by rpki-client on console-fra.rpki-client.org