Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138322e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3138322e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          SJQpSwYmeXhpTt2xcIog3lLWyqpnIps1MDxEj6VztWM=
Subject key identifier:   6C:B2:9E:53:51:AB:41:83:82:2C:5E:3E:85:BF:DD:1F:46:A9:67:9D
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       24C437189C75F2DE3AC5A149C9F3D1982A75AF62
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138322e302f32332d3233203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:25 +0000
ROA not before:           Fri 23 Aug 2024 19:56:25 +0000
ROA not after:            Fri 22 Aug 2025 20:01:25 +0000
asID:                     262827
IP address blocks:        187.84.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:37:18:9c:75:f2:de:3a:c5:a1:49:c9:f3:d1:98:2a:75:af:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:25 2024 GMT
            Not After : Aug 22 20:01:25 2025 GMT
        Subject: CN=6CB29E5351AB4183822C5E3E85BFDD1F46A9679D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:1f:80:eb:7e:fb:ec:25:e1:22:18:18:05:
                    f6:41:a1:35:39:b8:eb:db:56:04:ae:9c:8b:3f:ac:
                    8d:07:b7:a8:17:72:77:0a:f4:02:9f:22:10:0f:30:
                    ef:03:9b:c4:df:e7:18:a2:16:d7:a3:f4:a3:af:24:
                    20:68:9f:0e:a1:14:12:73:90:d0:e5:2b:22:60:70:
                    97:5f:a3:5a:7b:a2:65:da:dc:40:2f:b8:aa:2a:1f:
                    61:d2:b1:87:52:e9:bb:4a:05:91:df:0d:d5:eb:66:
                    96:fd:62:d7:b4:53:d8:33:0e:64:ca:72:d7:3f:9a:
                    48:ca:2b:8b:ba:26:3d:56:7b:6d:67:5a:a2:b7:a0:
                    b7:58:7e:11:46:e5:e2:9c:fd:c2:47:77:bf:b6:95:
                    fa:24:1c:cc:f0:00:2d:95:97:06:ce:83:38:c6:b6:
                    a2:95:6b:26:1c:3a:1e:ed:1a:19:c3:08:be:a9:f3:
                    63:d7:f8:05:bb:c6:23:93:f7:16:c4:75:d1:8c:50:
                    cd:9f:a1:37:a6:bd:43:97:1d:f1:15:af:2b:86:d6:
                    33:d1:f0:1c:ac:6e:09:2f:78:56:7c:d0:21:02:b5:
                    8f:85:18:2f:d1:ef:34:83:db:91:ea:5e:fa:74:bd:
                    9c:6d:b3:52:8a:ba:58:78:be:8a:7f:02:ec:b9:52:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:9E:53:51:AB:41:83:82:2C:5E:3E:85:BF:DD:1F:46:A9:67:9D
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138322e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:7b:75:0a:a9:72:68:5f:62:5c:9e:18:20:c2:01:4a:a6:
         34:71:0a:a5:0c:2d:ad:26:3f:b5:f7:02:60:05:b4:5c:29:0e:
         7d:4a:33:ab:59:4d:ba:d5:99:10:a8:f5:14:50:8c:4f:e6:93:
         b4:23:d1:3e:66:60:a5:27:26:b3:fc:85:d9:21:94:dc:0c:28:
         64:ba:04:43:b8:37:c8:de:ed:04:49:8c:b3:0e:52:5a:17:f8:
         2b:36:7f:b8:94:65:17:aa:6f:bf:11:6e:87:45:a4:5f:da:aa:
         58:ff:b9:f2:24:e7:67:ef:07:27:60:11:61:62:55:dc:eb:3a:
         17:b1:8b:00:21:73:4d:4b:0b:19:c7:92:72:c5:e2:71:83:a4:
         2a:c2:50:7c:59:32:ef:00:35:5c:0d:98:0d:a5:ed:6f:5e:1e:
         0d:26:3c:84:99:2e:5b:c6:46:cf:95:d6:85:70:ef:56:d8:04:
         0f:68:d0:3a:9f:8f:a6:e8:6a:79:62:cb:88:79:eb:9f:27:d2:
         cd:dc:5e:31:e2:11:dd:7f:42:9f:6d:33:2c:b6:93:2c:d7:f9:
         52:6f:d1:f5:a6:d2:10:17:9a:a3:c5:17:78:b4:1e:11:87:bf:
         55:d7:b8:39:16:94:9a:95:a9:e7:57:a9:4a:af:10:d0:4e:dd:
         fb:ba:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org