Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138372e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3138372e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          YkCyoMwjE0xt+5SgCDtL7scrN/RmGJeiIG1XwpoakO0=
Subject key identifier:   AB:34:E7:C0:3A:F5:81:B2:90:8F:43:0D:3C:2B:F1:B2:F4:2E:75:6C
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       798073F2D7C63BA21A2493DA177C06AF7EF8D3AF
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138372e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:15 +0000
ROA not before:           Fri 23 Aug 2024 19:56:15 +0000
ROA not after:            Fri 22 Aug 2025 20:01:15 +0000
asID:                     262827
IP address blocks:        187.84.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:80:73:f2:d7:c6:3b:a2:1a:24:93:da:17:7c:06:af:7e:f8:d3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:15 2024 GMT
            Not After : Aug 22 20:01:15 2025 GMT
        Subject: CN=AB34E7C03AF581B2908F430D3C2BF1B2F42E756C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:9c:65:a0:e5:a4:52:e1:7f:54:a3:d8:2d:
                    5e:8c:63:86:6f:03:1e:84:6e:96:78:36:72:32:85:
                    1c:5b:7f:70:47:8c:93:de:94:ca:c3:4c:72:5e:1d:
                    47:48:99:49:d1:25:99:d6:9c:21:81:95:09:26:6a:
                    2f:3f:1e:3c:a4:cf:30:7c:7a:83:c9:52:34:db:45:
                    de:70:c1:13:28:70:7e:1e:1a:13:aa:13:bf:31:e9:
                    08:65:e7:af:9c:78:7e:4e:74:8b:45:5f:3f:f4:72:
                    f5:68:01:bf:ba:71:4f:c2:6f:c0:c7:38:ae:bb:fd:
                    fd:b7:5c:6a:37:6e:e2:92:fe:3c:b8:1a:fb:dc:79:
                    1c:4a:05:3c:2b:65:51:2c:8c:4d:dc:79:bb:db:eb:
                    3e:9e:61:a4:c4:bd:12:33:47:81:a1:6e:19:3d:58:
                    91:a1:50:4c:e3:4f:6e:b3:4a:35:5a:55:bd:ea:e8:
                    60:0f:7e:a0:b2:49:a4:84:30:a9:9b:1f:86:ad:be:
                    2b:62:32:84:c2:3e:a5:ea:3e:c8:57:e3:42:c7:76:
                    35:9f:d3:a5:c5:75:b9:75:cb:e2:6f:ef:05:62:7d:
                    13:17:70:5d:2d:d9:1f:ae:49:d4:a7:35:88:48:db:
                    7a:57:d9:7b:d5:fb:01:fc:7a:ab:3a:ba:08:b9:b7:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:E7:C0:3A:F5:81:B2:90:8F:43:0D:3C:2B:F1:B2:F4:2E:75:6C
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138372e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:d4:2c:7a:7e:70:99:8b:fb:00:46:50:6a:c8:dd:35:9a:
         a0:9d:96:e7:79:27:53:2d:87:a3:6a:f0:ff:17:ed:a8:b2:db:
         15:71:25:32:47:63:5a:0e:97:78:fc:b8:c8:ec:2d:26:90:e3:
         09:76:d8:2e:b7:b4:6c:6f:55:28:c8:d7:3b:61:7f:7e:2d:2a:
         24:d4:6d:d1:05:b6:10:11:83:4e:34:50:27:58:1f:70:06:da:
         f8:43:a4:ee:44:d1:1c:03:d8:61:8f:07:cd:45:cf:a9:87:b0:
         9a:b3:38:20:d3:24:c8:1f:98:ca:cd:4a:64:1e:07:c0:9c:2a:
         00:04:a0:e8:7b:89:b7:11:29:19:1c:69:b6:83:2b:ff:37:67:
         97:e7:15:06:6c:00:ad:25:b5:b2:08:31:ea:d8:9a:74:ab:f9:
         a1:51:f5:ef:a9:a2:69:04:8c:9b:b2:f8:4f:5b:3f:0f:b0:34:
         31:87:9c:8c:51:f8:86:5b:f2:69:5e:42:09:c4:1f:df:5e:dd:
         a7:36:a2:3a:6b:85:8a:6e:5c:df:1c:65:c0:c0:3a:f3:89:fb:
         54:b5:be:61:c1:c4:bf:54:d2:15:02:b6:c8:78:39:ad:92:63:
         8c:e8:24:35:b0:6a:14:d9:e7:3d:84:0f:c3:9a:dd:32:af:1d:
         d3:27:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:50 2024 by rpki-client on console-fra.rpki-client.org