Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138332e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3138332e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          /8EHrTrWh+xm/XTO1JsKIpsOSq0kgStaZW+Fcw0EryQ=
Subject key identifier:   9D:B7:29:22:DF:E5:9E:8F:95:D6:93:9B:3A:5F:3F:B7:26:4F:8E:80
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       386EFFA6F5257B8623AF28C6769B5B02DB884E5A
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138332e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:31 +0000
ROA not before:           Fri 23 Aug 2024 19:56:31 +0000
ROA not after:            Fri 22 Aug 2025 20:01:31 +0000
asID:                     262827
IP address blocks:        187.84.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:ff:a6:f5:25:7b:86:23:af:28:c6:76:9b:5b:02:db:88:4e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:31 2024 GMT
            Not After : Aug 22 20:01:31 2025 GMT
        Subject: CN=9DB72922DFE59E8F95D6939B3A5F3FB7264F8E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:7a:5a:b6:50:23:3c:3c:25:4a:0f:8e:e1:
                    70:36:1b:2d:62:a2:97:6c:85:ed:9f:c8:0e:63:bb:
                    84:a9:47:9c:ea:e9:3f:03:31:cf:09:73:0f:1f:46:
                    0b:05:e4:83:15:cb:03:38:63:41:3c:f1:d0:55:d9:
                    01:b6:bd:9c:a6:eb:39:42:2c:b0:44:f0:37:db:4b:
                    10:96:39:2b:5b:25:59:37:92:29:83:9c:77:c5:c3:
                    83:da:e5:e5:eb:41:7f:b7:d4:9b:b5:8b:6c:a2:48:
                    42:ff:b9:f1:4a:eb:1a:3b:26:e8:3d:d3:b1:b7:28:
                    56:d5:c5:da:2c:af:8a:1b:47:bc:89:5e:0a:8a:71:
                    d2:56:ba:1b:ac:be:bb:99:cd:e9:28:47:09:03:46:
                    27:51:98:ba:22:64:56:f6:44:51:a9:e3:9f:a3:6e:
                    da:bd:1a:67:d5:38:eb:d0:aa:88:e5:3a:82:f1:10:
                    27:c1:bb:5b:e2:fe:bb:bc:cb:fa:aa:87:b5:ba:66:
                    8d:31:e0:d2:71:72:55:8c:90:f3:f4:77:48:15:cb:
                    5c:37:74:08:ce:89:33:7a:db:34:1e:0f:33:d6:6d:
                    18:4a:66:c2:01:6a:38:15:3f:ac:a7:88:52:09:2b:
                    61:dc:11:be:41:10:70:27:be:4f:a0:0e:00:17:a4:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:29:22:DF:E5:9E:8F:95:D6:93:9B:3A:5F:3F:B7:26:4F:8E:80
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138332e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:84:f3:51:88:61:47:9e:4d:ee:f4:9f:34:83:39:53:a9:37:
         a8:23:2a:b0:8b:97:c3:81:04:29:7a:0b:aa:9b:e4:3d:71:a0:
         bf:85:04:68:44:79:38:a5:4f:2e:75:c3:55:c2:9e:ce:18:44:
         f3:03:ca:75:05:93:bd:a0:5f:e1:3a:9e:b3:f2:40:5f:6e:28:
         4a:b3:fe:78:e1:be:d2:df:a2:35:c3:c2:0f:4d:ec:df:7b:a5:
         92:d0:9d:2a:27:f9:18:85:dc:dd:de:34:14:12:0e:8f:38:4d:
         07:39:ff:af:3e:30:c9:df:ed:23:95:93:b2:1d:21:72:90:1b:
         71:16:14:d4:f7:2a:7f:12:e1:73:41:b1:9f:33:3c:b1:38:e8:
         4d:8d:d8:93:c7:d4:fe:cd:00:02:fe:fb:85:27:9b:88:a1:36:
         af:c4:96:23:d3:bd:6c:28:68:a2:6b:d5:3b:49:f1:79:e9:ff:
         dd:fb:89:d6:e6:af:92:81:d2:81:aa:71:4b:d4:3b:06:15:04:
         de:4b:f7:34:ad:32:df:8e:88:96:e1:93:30:fa:3c:49:94:59:
         4c:14:35:da:3c:4c:6e:71:1d:7d:b7:5c:08:e6:88:25:6c:02:
         ee:46:d7:e3:9b:d3:c2:3f:d8:89:be:67:3a:60:9e:9b:7b:67:
         2a:5c:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:50 2024 by rpki-client on console-fra.rpki-client.org