Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3138362e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          apC89R1EcpRhsFMuSJ5dtseXI0q+V/rnMAj4qn15Bug=
Subject key identifier:   0D:17:75:FC:00:28:7D:A4:81:09:FF:85:CE:BE:8E:E2:43:EA:F6:25
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       074C843A8047B093759021FFE5A49EE58F9CC338
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:46 +0000
ROA not before:           Fri 23 Aug 2024 19:56:46 +0000
ROA not after:            Fri 22 Aug 2025 20:01:46 +0000
asID:                     262827
IP address blocks:        187.84.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4c:84:3a:80:47:b0:93:75:90:21:ff:e5:a4:9e:e5:8f:9c:c3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:46 2024 GMT
            Not After : Aug 22 20:01:46 2025 GMT
        Subject: CN=0D1775FC00287DA48109FF85CEBE8EE243EAF625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:73:aa:4e:0a:b1:a1:da:87:89:0c:03:e3:e7:
                    07:44:9f:75:ac:bb:81:b7:28:15:c8:6d:e1:9f:6a:
                    c9:07:03:96:0d:f1:69:24:c8:fc:50:2d:6c:4a:59:
                    67:b3:84:55:ee:b7:55:e5:11:90:0b:6e:74:c1:c6:
                    98:90:2e:28:73:35:3d:fe:1f:8c:19:06:01:11:73:
                    5a:7c:96:91:e5:1a:97:fc:e9:34:df:25:7e:c3:d6:
                    17:32:93:30:86:10:a6:f0:52:ec:55:c6:16:4c:1d:
                    0d:70:9f:05:d7:f0:af:42:f8:04:23:d6:6b:85:09:
                    91:6d:c8:db:3b:fc:6b:05:4e:48:22:5d:7d:71:61:
                    92:dc:a6:94:93:7a:13:7d:8a:48:41:01:8d:bf:83:
                    13:45:81:71:2a:1a:1d:6d:a3:96:9e:a5:79:e2:ae:
                    8d:f2:31:7a:f0:29:fc:d0:ec:2e:48:40:01:89:a1:
                    9b:cb:c4:fa:2a:ad:11:7c:9e:11:77:2f:4a:11:f7:
                    3c:46:52:d4:d7:90:ec:67:dc:b1:50:fc:13:3e:b2:
                    ad:40:99:84:64:73:1d:c0:a2:a5:7d:b8:4f:6f:5e:
                    e9:ff:78:e8:f5:f3:c0:66:62:df:a5:f0:83:e5:cc:
                    1c:fd:67:bb:f2:61:ac:b4:f8:b7:e2:0d:55:86:a3:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:17:75:FC:00:28:7D:A4:81:09:FF:85:CE:BE:8E:E2:43:EA:F6:25
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138362e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:0d:f1:3d:f8:0e:25:a3:15:45:54:ef:d7:a5:ec:53:ad:
         b2:bc:67:f8:96:96:75:cc:74:6b:36:8a:b8:fb:24:4d:7f:d5:
         15:5d:31:df:43:1f:80:42:ee:dc:71:4c:9c:17:25:48:45:f2:
         d2:25:cb:4a:c6:4e:f4:45:48:5a:c4:10:75:06:f1:e5:e5:43:
         46:df:a5:9a:28:bf:7e:c1:82:ea:63:c7:42:76:98:e5:64:9f:
         62:52:11:b3:88:25:5e:5e:db:d7:f2:45:ff:c1:a7:5d:98:f6:
         aa:b5:87:4b:57:38:30:78:f6:a2:7d:76:d9:bf:d6:07:26:00:
         f6:ec:33:36:77:eb:f7:88:18:34:ff:43:75:94:34:02:c2:15:
         06:69:6d:08:23:d4:5e:61:e8:48:2b:2c:f8:2f:2e:0b:06:59:
         7b:39:ee:f2:c2:81:5b:8f:a1:0a:28:57:f6:6e:52:de:f1:82:
         25:1e:1d:d4:53:d0:ee:af:41:b7:27:30:84:1f:74:cf:a1:1a:
         cd:03:60:58:f0:b4:5d:8e:72:cd:ec:2d:05:9c:1c:87:88:3a:
         59:83:97:fe:a1:d1:b2:ad:b7:bc:7f:68:41:00:50:80:62:56:
         2a:ce:62:3e:31:1e:6a:e0:42:63:a7:be:00:83:f9:b3:67:f7:
         78:cf:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:34 2024 by rpki-client on console-ams.rpki-client.org