Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32322d3232203d3e20323632383237.roa
File:                     3138372e38342e3138382e302f32322d3232203d3e20323632383237.roa (raw, json)
Hash identifier:          emBy6qlgepBl5TqCJIwft+1hKZBgNevG7OSKr/JqLcI=
Subject key identifier:   23:E6:EE:4C:53:41:6D:9C:6D:E6:56:56:AC:36:AB:9F:BA:E3:DA:79
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       305CC30B3448412C54B0092ACFFF94108A6D6CD2
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32322d3232203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:48 +0000
ROA not before:           Fri 23 Aug 2024 19:56:48 +0000
ROA not after:            Fri 22 Aug 2025 20:01:48 +0000
asID:                     262827
IP address blocks:        187.84.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5c:c3:0b:34:48:41:2c:54:b0:09:2a:cf:ff:94:10:8a:6d:6c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:48 2024 GMT
            Not After : Aug 22 20:01:48 2025 GMT
        Subject: CN=23E6EE4C53416D9C6DE65656AC36AB9FBAE3DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:a7:d8:fe:c0:0a:4e:2a:09:3e:de:40:ac:
                    58:4c:43:1b:8f:bc:ae:2c:b8:93:b3:b5:5e:3c:35:
                    c6:d1:f9:c0:a0:28:82:0b:47:23:8f:48:01:2e:be:
                    a2:51:af:a2:32:f2:01:71:15:6d:1b:21:40:7f:db:
                    b2:b2:34:4b:8b:10:af:0e:25:59:83:fa:5e:03:dd:
                    48:30:26:e1:b9:68:9e:06:4d:75:3d:dc:6f:a1:f5:
                    2d:95:25:02:57:49:0f:96:24:bf:30:cf:24:5c:15:
                    b2:c0:63:60:3c:87:f0:a2:0e:7f:56:ba:38:c7:22:
                    70:e9:82:1b:96:2a:56:0a:21:a8:c4:b8:ef:cf:01:
                    35:84:00:13:1f:83:3c:86:ac:60:e3:a6:ef:9f:fc:
                    7a:21:91:9f:e9:5b:48:f0:8e:6b:f0:4d:4d:da:7b:
                    38:48:e5:c2:00:fa:75:d7:45:e0:ca:60:ca:4b:da:
                    38:c7:01:71:77:73:61:34:33:8c:b4:85:57:cf:72:
                    12:51:e5:f5:20:eb:93:19:47:fe:f8:a9:08:4d:95:
                    c9:6d:d6:51:dc:56:93:a8:6a:46:96:6e:04:e9:e5:
                    41:9e:42:57:16:cb:1e:03:25:2b:32:4b:ed:92:63:
                    7b:88:4e:6b:fc:54:72:60:a4:f5:c4:a5:12:9b:e8:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:EE:4C:53:41:6D:9C:6D:E6:56:56:AC:36:AB:9F:BA:E3:DA:79
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32322d3232203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:f4:9f:1b:07:fc:56:2f:1b:17:8e:52:84:ce:f4:a7:54:37:
         93:24:0f:30:cb:70:c6:12:7a:65:5e:c3:76:b5:fc:b3:66:8e:
         59:ba:0b:44:7e:b0:c1:dc:0f:f9:de:58:85:f6:fe:61:fb:07:
         40:2d:dd:8e:6e:4b:2c:b2:76:d3:93:69:a6:90:b0:0b:d5:92:
         cb:78:20:15:99:d4:dc:df:e0:ae:c9:10:b6:72:2e:18:ac:0f:
         d9:95:ca:4d:5b:f6:f6:9e:2e:53:09:9e:13:ec:c2:b4:54:ee:
         37:b7:40:a8:6c:17:f5:92:d5:3f:94:33:f3:e0:32:0b:f8:4f:
         21:90:fb:26:46:3a:5a:f7:53:7d:cd:59:ce:f5:17:81:10:46:
         14:85:a8:a7:f4:ac:5c:07:6c:77:f5:27:06:5d:98:b8:48:af:
         48:ee:78:74:fc:43:ae:10:aa:9a:96:55:a8:5d:e4:c1:86:a2:
         b5:af:29:ff:84:5b:59:f0:60:13:ea:cc:fb:7d:12:e7:90:f7:
         37:c6:f3:97:6a:6c:ac:09:e9:b0:22:af:f7:24:a0:a9:f4:cb:
         bb:fd:3f:cf:81:24:8b:af:9c:d7:17:0f:de:d7:6b:74:67:bc:
         2c:da:b1:ff:2b:a3:1f:b3:8f:f1:9c:1b:c8:de:dc:f6:9c:a6:
         84:ad:2f:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMFzDCzRIQSxUsAkqz/+UEIptbNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJEM0ZFNkU5MDg0OTA3RThBQzVFNzRBRTNERDVEMURF
N0ZGRTRFQjAeFw0yNDA4MjMxOTU2NDhaFw0yNTA4MjIyMDAxNDhaMDMxMTAvBgNV
BAMTKDIzRTZFRTRDNTM0MTZEOUM2REU2NTY1NkFDMzZBQjlGQkFFM0RBNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVz6fY/sAKTioJPt5ArFhMQxuP
vK4suJOztV48NcbR+cCgKIILRyOPSAEuvqJRr6Iy8gFxFW0bIUB/27KyNEuLEK8O
JVmD+l4D3UgwJuG5aJ4GTXU93G+h9S2VJQJXSQ+WJL8wzyRcFbLAY2A8h/CiDn9W
ujjHInDpghuWKlYKIajEuO/PATWEABMfgzyGrGDjpu+f/HohkZ/pW0jwjmvwTU3a
ezhI5cIA+nXXReDKYMpL2jjHAXF3c2E0M4y0hVfPchJR5fUg65MZR/74qQhNlclt
1lHcVpOoakaWbgTp5UGeQlcWyx4DJSsyS+2SY3uITmv8VHJgpPXEpRKb6NHhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUI+buTFNBbZxt5lZWrDarn7rj2nkwHwYDVR0j
BBgwFoAUK9P+bpCEkH6KxedK491dHef/5OswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFVUVlzQ0RZNXNSZmZnYjlqdHFNZGtCY0d2S1JBVVJwS2NCb2NmZ1pu
M2MvMC8yQkQzRkU2RTkwODQ5MDdFOEFDNUU3NEFFM0RENUQxREU3RkZFNEVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCRDNGRTZFOTA4NDkwN0U4
QUM1RTc0QUUzREQ1RDFERTdGRkU0RUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBVVFZc0NEWTVzUmZmZ2I5anRxTWRrQmNHdktSQVVScEtjQm9jZmdabjNjLzAv
MzEzODM3MmUzODM0MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7VLwwDQYJKoZIhvcNAQELBQADggEBAGP0nxsH
/FYvGxeOUoTO9KdUN5MkDzDLcMYSemVew3a1/LNmjlm6C0R+sMHcD/neWIX2/mH7
B0At3Y5uSyyydtOTaaaQsAvVkst4IBWZ1Nzf4K7JELZyLhisD9mVyk1b9vaeLlMJ
nhPswrRU7je3QKhsF/WS1T+UM/PgMgv4TyGQ+yZGOlr3U33NWc71F4EQRhSFqKf0
rFwHbHf1JwZdmLhIr0jueHT8Q64QqpqWVahd5MGGorWvKf+EW1nwYBPqzPt9EueQ
9zfG85dqbKwJ6bAir/ckoKn0y7v9P8+BJIuvnNcXD97Xa3RnvCzasf8rox+zj/Gc
G8je3PacpoStL3Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org