Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32322d3232203d3e20323632383237.roa
File:                     3138372e38342e3138342e302f32322d3232203d3e20323632383237.roa (raw, json)
Hash identifier:          jnKDboPvMdGa3dhky5ovEZc67Ub32k3u2cnmf9rBwPY=
Subject key identifier:   45:B9:41:81:8D:F2:92:0F:C6:A3:19:61:06:9F:B2:C5:8C:40:88:69
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       18720CB5FBF82D60A68C63081A83106C157BFD8B
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32322d3232203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:20 +0000
ROA not before:           Fri 23 Aug 2024 19:56:20 +0000
ROA not after:            Fri 22 Aug 2025 20:01:20 +0000
asID:                     262827
IP address blocks:        187.84.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:72:0c:b5:fb:f8:2d:60:a6:8c:63:08:1a:83:10:6c:15:7b:fd:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:20 2024 GMT
            Not After : Aug 22 20:01:20 2025 GMT
        Subject: CN=45B941818DF2920FC6A31961069FB2C58C408869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:d8:b7:03:c5:4d:58:3e:63:e6:48:16:9f:
                    6e:73:58:e4:f3:25:f3:be:90:a2:15:f7:f6:21:e1:
                    fc:db:6b:c9:f0:82:68:dd:cc:be:b8:3b:85:9a:7f:
                    4d:4c:99:66:fc:74:24:4e:76:1d:65:6c:f5:03:83:
                    4d:92:e4:86:51:a6:c8:cc:e3:0b:16:fa:63:26:27:
                    ea:c9:55:93:2d:a0:10:ac:86:43:49:3d:d0:f4:fa:
                    59:35:0f:91:04:12:56:9e:67:55:c2:22:31:ca:14:
                    20:c5:33:3c:fa:c7:a9:e2:f3:70:ea:d2:ed:4a:d4:
                    4a:0b:29:d7:59:38:e7:a4:00:88:8f:5e:02:2d:1c:
                    0e:93:7c:23:8a:e2:d9:ec:68:89:76:2a:8a:4d:f8:
                    b0:05:8a:83:2a:32:a7:05:f6:9d:61:6f:b4:05:25:
                    6f:e8:0b:8e:b2:0a:39:72:4d:8e:f9:39:32:e9:ea:
                    bf:51:3f:3d:1a:af:b3:96:2d:40:9c:88:42:01:a1:
                    6e:08:66:e6:80:e6:0f:ee:43:9e:7c:8a:95:e8:06:
                    82:cc:dc:5a:76:06:34:ad:05:0c:50:29:7b:2c:e3:
                    79:62:c9:ef:d7:3b:9d:05:47:ff:72:23:5f:9a:57:
                    0d:0a:ce:91:9b:23:67:46:51:14:40:f4:97:82:dc:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:41:81:8D:F2:92:0F:C6:A3:19:61:06:9F:B2:C5:8C:40:88:69
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138342e302f32322d3232203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:49:b9:77:6a:15:b2:85:9b:31:9a:0f:d1:4b:05:45:3b:8a:
         c1:d3:7c:75:e4:d5:96:17:08:e4:50:77:38:ba:88:02:42:56:
         32:ea:d1:f1:6a:34:14:05:4d:27:dd:36:85:45:a2:2f:3f:75:
         d9:05:59:cc:08:f0:ba:c2:77:76:92:fa:3f:b5:ce:bd:c7:33:
         be:08:3f:75:1a:18:f8:f3:cc:84:a7:bf:5b:d0:73:f9:c9:1b:
         47:76:a7:38:18:29:d5:01:8b:3a:d0:de:9d:e1:6b:8c:94:d0:
         e6:8c:5e:03:3d:cf:16:be:fb:16:56:b0:42:f7:64:fa:79:ee:
         8d:8f:ff:b6:77:8b:86:cd:51:88:94:66:6a:88:5f:9e:29:27:
         ea:a8:0a:c2:95:17:71:0d:91:b1:fe:76:77:a9:49:2a:be:51:
         c4:51:1b:44:45:17:77:2e:66:af:ff:71:83:e9:3e:72:50:d8:
         18:e5:c8:e8:c2:2c:f3:f5:72:e2:69:79:0b:7e:8f:15:ad:6b:
         cb:5f:f3:28:e7:e0:3f:c8:44:bc:aa:a9:fd:3a:78:2c:df:2d:
         91:99:de:5b:ea:95:36:91:a7:a7:c1:0a:a1:b5:08:ee:35:19:
         b1:77:08:b3:ce:da:f4:29:4d:39:65:98:19:6d:41:35:78:c4:
         84:e8:d6:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGHIMtfv4LWCmjGMIGoMQbBV7/YswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEM0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURF
N0ZGRTRFQjAeFw0yNDA4MjMxOTU2MjBaFw0yNTA4MjIyMDAxMjBaMDMxMTAvBgNV
BAMTKDQ1Qjk0MTgxOERGMjkyMEZDNkEzMTk2MTA2OUZCMkM1OEM0MDg4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpti3A8VNWD5j5kgWn25zWOTz
JfO+kKIV9/Yh4fzba8nwgmjdzL64O4Waf01MmWb8dCROdh1lbPUDg02S5IZRpsjM
4wsW+mMmJ+rJVZMtoBCshkNJPdD0+lk1D5EEElaeZ1XCIjHKFCDFMzz6x6ni83Dq
0u1K1EoLKddZOOekAIiPXgItHA6TfCOK4tnsaIl2KopN+LAFioMqMqcF9p1hb7QF
JW/oC46yCjlyTY75OTLp6r9RPz0ar7OWLUCciEIBoW4IZuaA5g/uQ558ipXoBoLM
3Fp2BjStBQxQKXss43liye/XO50FR/9yI1+aVw0KzpGbI2dGURRA9JeC3AQpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURblBgY3ykg/GoxlhBp+yxYxAiGkwHwYDVR0j
BBgwFoAUK9P+bpCEkH6KxedK491dHef/5OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMC8yQkQzRkU2RTkwODQ5MDdFOEFDNUU3NEFFM0RENUQxREU3RkZFNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDNGRTZFOTA4NDkwN0U4
QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBVVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAv
MzEzODM3MmUzODM0MmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7VLgwDQYJKoZIhvcNAQELBQADggEBAG9JuXdq
FbKFmzGaD9FLBUU7isHTfHXk1ZYXCORQdzi6iAJCVjLq0fFqNBQFTSfdNoVFoi8/
ddkFWcwI8LrCd3aS+j+1zr3HM74IP3UaGPjzzISnv1vQc/nJG0d2pzgYKdUBizrQ
3p3ha4yU0OaMXgM9zxa++xZWsEL3ZPp57o2P/7Z3i4bNUYiUZmqIX54pJ+qoCsKV
F3ENkbH+dnepSSq+UcRRG0RFF3cuZq//cYPpPnJQ2BjlyOjCLPP1cuJpeQt+jxWt
a8tf8yjn4D/IRLyqqf06eCzfLZGZ3lvqlTaRp6fBCqG1CO41GbF3CLPO2vQpTTll
mBltQTV4xITo1o4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org