Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137392e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3137392e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          Pv/rbzajqft2Ks9xttP3vmFf0TF3JkTqBIxnRu0/xD8=
Subject key identifier:   7D:B8:0D:4C:82:12:21:2C:E3:0A:27:0E:90:A8:DE:13:8F:3C:E3:D7
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       08AC2F6BB23A432BE1D0FA4E45296E7899A3A01D
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137392e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:41 +0000
ROA not before:           Fri 23 Aug 2024 19:56:41 +0000
ROA not after:            Fri 22 Aug 2025 20:01:41 +0000
asID:                     262827
IP address blocks:        187.84.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 19:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ac:2f:6b:b2:3a:43:2b:e1:d0:fa:4e:45:29:6e:78:99:a3:a0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:41 2024 GMT
            Not After : Aug 22 20:01:41 2025 GMT
        Subject: CN=7DB80D4C8212212CE30A270E90A8DE138F3CE3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e9:17:b0:e6:d9:93:51:02:6e:aa:c5:13:56:
                    b1:ec:0b:08:b8:30:9c:ec:48:4e:6a:cd:58:1a:ca:
                    32:43:20:73:46:d9:f4:a8:59:a5:ae:35:34:18:5c:
                    c4:52:54:89:6e:8b:54:3e:57:1e:a9:7c:cc:09:2e:
                    ce:06:da:37:e5:85:d5:55:43:25:28:34:8b:f1:98:
                    0c:1f:81:3d:4a:a5:0c:dd:9b:7c:ba:51:9f:ca:67:
                    b8:07:c0:c7:2c:05:bf:2b:22:71:a5:91:38:a9:f2:
                    50:be:c8:6e:5e:dc:e8:ee:9e:2f:d7:f4:dd:c4:9c:
                    89:7c:54:85:5b:f2:d9:7b:67:13:9f:6d:0e:26:1c:
                    0c:b4:b0:a7:d7:68:4f:89:39:cc:d8:20:77:4c:1b:
                    f6:69:bf:b1:8e:37:92:f2:98:0f:eb:b0:b4:66:4b:
                    0d:6a:09:b4:67:a0:13:23:3e:68:ce:ec:5d:df:93:
                    19:10:3d:14:fe:63:6f:31:56:0e:39:b8:18:3d:b7:
                    12:e3:7b:31:11:5c:ce:41:ab:b3:9e:a4:6f:0e:d9:
                    8a:e1:45:ad:fb:d3:42:36:e1:94:01:6a:ed:ee:c2:
                    90:63:26:a0:1a:90:f3:8d:3f:7f:60:a2:a0:8d:d2:
                    c6:a0:26:7c:47:db:12:6f:45:11:ad:7a:02:7f:df:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B8:0D:4C:82:12:21:2C:E3:0A:27:0E:90:A8:DE:13:8F:3C:E3:D7
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3137392e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:52:0d:32:fc:b6:6e:49:83:3b:56:b0:62:88:3a:2f:43:
         60:1c:77:ed:98:9e:20:6a:c9:e5:7f:e0:e0:f4:4a:8a:23:b4:
         02:ce:2d:b4:49:30:1e:08:67:d8:c0:2f:42:53:b9:07:f5:af:
         16:53:20:78:46:d3:e1:54:c4:38:d2:42:7a:c7:96:d4:50:bb:
         11:55:b8:25:f8:24:9b:01:68:1d:27:b8:94:a0:c1:01:19:df:
         bb:38:8d:c2:79:98:e1:ae:9f:dd:91:15:6b:55:dd:d8:3a:e7:
         3c:84:93:18:d7:f4:23:8d:1b:29:b0:4e:5c:bd:dd:68:1b:9b:
         7a:aa:a9:42:12:83:eb:a3:e0:7e:d2:89:75:60:b0:7a:5a:bb:
         86:e4:52:a4:0d:ba:5d:4e:59:57:32:bb:d1:ed:ed:35:8f:fc:
         8c:4d:d9:e9:59:20:b3:b0:fd:19:a3:e5:ff:47:48:e3:92:9a:
         43:03:a4:29:c6:45:dc:2a:66:f7:c1:da:b7:31:2c:86:26:e7:
         5a:2c:45:18:9a:47:d0:cb:0a:c9:04:a4:d1:fd:14:88:b1:1e:
         75:19:48:db:37:cf:35:8e:e9:48:b9:62:19:ff:f6:d3:a2:d0:
         d8:1b:98:63:5a:06:f3:96:be:eb:e6:2e:a7:5e:9c:fb:4c:cf:
         82:9d:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:41 2024 by rpki-client on console-fra.rpki-client.org