Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3138362e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          TyIbykRi+rjG2LBB4diqYBlrLEztn7GUNYCALp80if4=
Subject key identifier:   25:C9:92:6A:05:A1:A8:F5:6F:BF:1C:41:17:93:24:AB:FA:D5:BD:5F
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       7B2CB129BD38A540C5FF916F1F07E353FBD59F19
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32332d3233203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:16 +0000
ROA not before:           Fri 23 Aug 2024 19:56:16 +0000
ROA not after:            Fri 22 Aug 2025 20:01:16 +0000
asID:                     262827
IP address blocks:        187.84.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2c:b1:29:bd:38:a5:40:c5:ff:91:6f:1f:07:e3:53:fb:d5:9f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:16 2024 GMT
            Not After : Aug 22 20:01:16 2025 GMT
        Subject: CN=25C9926A05A1A8F56FBF1C41179324ABFAD5BD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:89:d2:e9:96:52:06:62:97:80:5c:91:10:
                    08:4b:f5:42:e7:1c:86:47:64:85:02:bc:f6:75:61:
                    fd:77:6e:87:3e:a3:bf:1a:f5:51:ea:67:4a:1f:62:
                    f7:67:d3:30:bc:3b:dc:c3:bb:d9:68:62:b8:75:30:
                    aa:18:f5:2f:9c:59:a9:50:31:df:d4:9d:cb:03:97:
                    fe:f8:63:4c:c9:6e:b4:a2:fc:d9:ef:92:e4:5b:b6:
                    4c:99:ee:c0:a5:02:ee:a0:cd:c4:e6:6b:ae:60:5b:
                    78:b9:32:3b:60:c3:33:56:c5:af:ce:d2:79:2f:e7:
                    9d:b2:c2:af:e7:13:67:63:47:cb:d2:95:37:bf:8c:
                    8e:1e:5e:99:4b:05:cf:42:25:0b:ae:d7:66:7b:0d:
                    8c:af:78:88:04:08:80:46:46:21:69:2d:1d:4b:60:
                    9c:ad:76:5a:a8:a4:e7:86:4c:5b:74:56:f1:01:fa:
                    f6:2b:12:c8:7d:1c:a2:d5:13:78:3d:19:4f:c1:fc:
                    72:1c:25:69:30:e0:21:19:7d:ae:2b:ba:89:47:a8:
                    ba:0a:c8:9e:5d:03:0e:9f:d5:54:47:7e:c9:59:4f:
                    d2:9a:99:4d:52:23:99:f1:0e:6d:52:2e:fd:75:c6:
                    9c:43:cb:62:96:2f:8c:df:03:2e:1c:22:6e:3c:0f:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C9:92:6A:05:A1:A8:F5:6F:BF:1C:41:17:93:24:AB:FA:D5:BD:5F
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:7e:9f:f6:71:6d:5b:66:46:b0:cf:55:2a:20:cb:5c:86:4a:
         b6:68:b4:eb:24:53:1e:e9:bb:20:be:16:35:13:dc:44:ef:cb:
         6d:26:3a:04:de:f0:50:e3:cb:8f:0d:2b:b5:d0:d2:27:5c:a4:
         98:e4:3c:9e:4d:eb:e9:35:c5:1d:87:fe:c7:d2:11:71:64:55:
         54:a2:aa:1f:48:a3:46:96:37:de:df:32:f7:b8:e1:71:e7:59:
         bc:52:d7:45:f7:27:0b:38:b0:f0:41:9f:6a:e1:66:ff:8a:ed:
         aa:4e:6f:0b:5d:46:27:71:99:54:18:ee:ed:4a:20:74:f0:0d:
         6c:e7:7d:ad:98:f9:26:a5:90:d4:c6:ba:f3:be:ea:1d:b6:71:
         19:86:0b:73:2c:e0:84:9c:2c:f9:69:71:86:08:10:c7:20:b2:
         95:e0:e7:4d:4b:5e:88:7c:e0:2b:98:2f:18:67:35:5e:ae:04:
         e0:ef:d2:e6:8a:44:86:52:4f:ae:a6:81:2f:b6:59:a2:e4:d3:
         05:1b:e8:86:75:ca:94:a4:07:b2:f7:28:29:45:3d:ef:15:53:
         6b:90:a5:0c:90:9c:4b:e5:34:3b:e4:f3:95:44:a7:07:06:d4:
         53:f2:58:20:d6:41:78:4d:c7:60:38:df:5c:80:ab:31:0c:8f:
         01:b2:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:50 2024 by rpki-client on console-fra.rpki-client.org