Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138302e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3138302e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          7LX8LlIPr+4YVdPm1VK+oTaJDdK7RLyEoP65fJBs0zA=
Subject key identifier:   C9:80:24:00:8B:12:C3:CB:07:9D:3F:27:D6:35:6D:52:42:7A:36:5A
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       1810C691654F4EBF0F8095DDFE87997974791E0A
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138302e302f32332d3233203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:17 +0000
ROA not before:           Fri 23 Aug 2024 19:56:17 +0000
ROA not after:            Fri 22 Aug 2025 20:01:17 +0000
asID:                     262827
IP address blocks:        187.84.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:10:c6:91:65:4f:4e:bf:0f:80:95:dd:fe:87:99:79:74:79:1e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:17 2024 GMT
            Not After : Aug 22 20:01:17 2025 GMT
        Subject: CN=C98024008B12C3CB079D3F27D6356D52427A365A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:01:27:9d:b2:56:cc:2d:10:72:47:20:03:
                    42:70:c1:32:88:35:77:62:b3:a5:cd:a7:eb:a9:86:
                    64:98:c3:c1:a0:46:7b:a0:2f:3a:36:c0:9c:1f:37:
                    b6:8d:21:2b:ae:e8:1d:a8:11:98:c1:40:42:57:0d:
                    93:92:da:f4:e5:63:2f:d8:06:0d:a8:79:1c:7e:ef:
                    76:5f:dc:a4:10:ca:c5:d0:aa:0d:5e:56:ea:1f:a5:
                    e1:c2:98:0e:d8:5b:7d:2c:e0:92:f1:f0:d9:dc:37:
                    4e:f6:a3:e4:d1:e9:ad:5f:c3:13:a5:4e:60:c8:e3:
                    cf:67:fe:99:13:83:b7:be:b1:75:bb:23:65:88:59:
                    cf:6d:23:da:76:64:ef:a2:9e:1c:63:70:da:f8:33:
                    94:53:f9:95:64:d3:66:c8:42:c1:ef:53:ee:3d:3f:
                    df:63:bb:c5:ec:ff:53:6d:60:fc:0b:06:16:0b:fc:
                    06:9f:6e:16:0f:1b:f9:92:f9:a9:95:af:fe:6b:4d:
                    ae:43:36:1d:cb:99:04:04:04:58:1e:3f:68:bb:7b:
                    70:13:b1:cd:c8:fc:0a:07:ea:89:29:aa:01:84:d4:
                    d6:f6:4f:5c:ae:5c:06:a5:ed:93:fa:b1:50:62:e8:
                    2e:f4:29:ae:ba:f7:51:9e:50:b9:2e:d2:69:08:5f:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:24:00:8B:12:C3:CB:07:9D:3F:27:D6:35:6D:52:42:7A:36:5A
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138302e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:27:22:b7:87:d4:e1:f1:35:cc:5d:05:c2:3f:38:00:6f:ac:
         0b:39:d6:e0:90:a6:42:91:b3:bd:bd:7b:3a:ae:e6:16:93:bb:
         26:3b:1b:64:a5:e6:63:57:9b:8b:41:fd:40:f3:a7:86:14:ad:
         00:01:b2:a0:4f:ab:73:5a:b6:a7:16:00:1f:51:9d:20:d9:7d:
         af:c6:90:1b:32:a0:54:08:a0:16:51:46:dc:4a:cc:b3:5d:82:
         ef:88:a9:c3:27:f5:dc:da:c2:50:60:c0:76:e1:f0:5f:ff:19:
         e0:ef:82:f6:29:97:3b:64:f9:3f:ac:36:14:f7:10:b0:a1:18:
         ff:da:20:97:b1:9c:33:51:2e:03:71:c1:9a:92:eb:49:78:36:
         3d:f7:2a:ca:4b:22:91:f9:25:98:7c:83:7c:59:dc:ed:f2:48:
         3a:89:1b:bd:74:45:a6:47:9e:ef:93:0f:13:98:44:e8:77:90:
         1f:af:76:cb:92:38:69:e3:c2:39:5f:d0:ea:57:70:2d:8a:43:
         a6:90:bb:c8:0e:76:ed:48:97:2d:ae:13:30:aa:0b:37:29:a4:
         f2:cd:61:ca:09:07:e6:f9:6c:12:e9:b0:7b:77:c6:1f:ca:4f:
         dd:bc:f8:ea:2b:7e:12:df:c7:6e:de:05:e2:7b:9a:37:a4:57:
         83:e4:6c:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGBDGkWVPTr8PgJXd/oeZeXR5HgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEM0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURF
N0ZGRTRFQjAeFw0yNDA4MjMxOTU2MTdaFw0yNTA4MjIyMDAxMTdaMDMxMTAvBgNV
BAMTKEM5ODAyNDAwOEIxMkMzQ0IwNzlEM0YyN0Q2MzU2RDUyNDI3QTM2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJzgEnnbJWzC0QckcgA0JwwTKI
NXdis6XNp+uphmSYw8GgRnugLzo2wJwfN7aNISuu6B2oEZjBQEJXDZOS2vTlYy/Y
Bg2oeRx+73Zf3KQQysXQqg1eVuofpeHCmA7YW30s4JLx8NncN072o+TR6a1fwxOl
TmDI489n/pkTg7e+sXW7I2WIWc9tI9p2ZO+inhxjcNr4M5RT+ZVk02bIQsHvU+49
P99ju8Xs/1NtYPwLBhYL/AafbhYPG/mS+amVr/5rTa5DNh3LmQQEBFgeP2i7e3AT
sc3I/AoH6okpqgGE1Nb2T1yuXAal7ZP6sVBi6C70Ka6691GeULku0mkIX7FFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyYAkAIsSw8sHnT8n1jVtUkJ6NlowHwYDVR0j
BBgwFoAUK9P+bpCEkH6KxedK491dHef/5OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMC8yQkQzRkU2RTkwODQ5MDdFOEFDNUU3NEFFM0RENUQxREU3RkZFNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDNGRTZFOTA4NDkwN0U4
QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBVVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAv
MzEzODM3MmUzODM0MmUzMTM4MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG7VLQwDQYJKoZIhvcNAQELBQADggEBABQnIreH
1OHxNcxdBcI/OABvrAs51uCQpkKRs729ezqu5haTuyY7G2Sl5mNXm4tB/UDzp4YU
rQABsqBPq3NatqcWAB9RnSDZfa/GkBsyoFQIoBZRRtxKzLNdgu+IqcMn9dzawlBg
wHbh8F//GeDvgvYplztk+T+sNhT3ELChGP/aIJexnDNRLgNxwZqS60l4Nj33KspL
IpH5JZh8g3xZ3O3ySDqJG710RaZHnu+TDxOYROh3kB+vdsuSOGnjwjlf0OpXcC2K
Q6aQu8gOdu1Ily2uEzCqCzcppPLNYcoJB+b5bBLpsHt3xh/KT928+OorfhLfx27e
BeJ7mjekV4PkbAI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org