Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa
File:                     3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa (raw, json)
Hash identifier:          kU5HapuHuX5PYfcw6t0wspdwLBh+DKMH/UgGTeAxllc=
Subject key identifier:   EE:99:0F:7B:47:C6:45:88:5C:B2:44:4A:DA:71:9E:80:55:07:46:0E
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       4777219F2AB4917837A526E6DD118B019357881A
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:35 +0000
ROA not before:           Fri 23 Aug 2024 19:56:35 +0000
ROA not after:            Fri 22 Aug 2025 20:01:35 +0000
asID:                     262827
IP address blocks:        187.84.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:21:9f:2a:b4:91:78:37:a5:26:e6:dd:11:8b:01:93:57:88:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:35 2024 GMT
            Not After : Aug 22 20:01:35 2025 GMT
        Subject: CN=EE990F7B47C645885CB2444ADA719E805507460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f1:d6:ca:0b:79:39:fb:e2:48:ab:d8:80:98:
                    5b:a5:ba:a9:84:c7:f3:69:37:a8:16:2a:69:31:b4:
                    dc:a9:71:c4:6b:c9:bc:6c:36:48:02:ee:6e:f4:94:
                    90:35:7f:c1:aa:fd:18:d5:f3:0d:0c:7a:7e:b1:29:
                    9d:2e:03:51:b2:68:7c:d7:45:57:d7:cf:94:7e:c1:
                    5f:a2:c2:68:43:69:a8:cd:79:9f:eb:3b:b1:ce:a7:
                    56:3c:46:6a:38:ff:5e:02:59:c4:4d:21:b4:2a:e8:
                    f6:88:b7:b2:48:91:95:56:55:fc:81:32:76:e9:33:
                    62:2b:32:8d:ab:1c:03:00:f3:2b:2f:e9:b5:d6:9f:
                    86:7c:87:35:bd:2f:ec:33:11:0a:a1:98:2a:7d:ea:
                    0f:e1:ed:87:ee:5a:b1:a9:93:fb:e9:3f:3b:08:33:
                    97:c8:5b:95:d1:d7:49:78:68:c8:a9:0f:9b:8b:b5:
                    f7:ae:c5:f1:f2:58:c5:27:4f:5a:81:7d:79:b5:4b:
                    f0:7a:79:58:85:e4:53:8a:cf:36:c2:0e:2b:a9:ff:
                    fe:33:75:de:66:4d:93:1b:6a:95:04:59:e1:57:8b:
                    92:8a:9e:f0:a5:f3:54:3d:cc:42:41:49:7a:65:9e:
                    b9:d5:6f:1c:38:8d:e9:58:64:63:a1:56:51:fc:b6:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:99:0F:7B:47:C6:45:88:5C:B2:44:4A:DA:71:9E:80:55:07:46:0E
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138382e302f32332d3233203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:c2:3f:d5:89:f8:2d:90:7a:b0:80:b1:be:b8:f4:16:60:
         34:cb:cd:5c:40:77:6b:11:8c:a6:b7:e7:09:6a:ba:01:59:e6:
         9f:f4:82:07:b4:01:a6:8b:d0:b9:bf:1c:10:67:ab:70:f2:ff:
         15:94:f9:ab:6d:43:b0:0c:92:17:94:28:b3:4c:78:06:a4:ec:
         e5:7a:a8:b9:c0:74:f5:45:14:fe:41:0d:0e:bc:0e:32:1c:ca:
         b6:f2:e4:c1:5d:1b:00:40:b5:94:cc:00:88:7b:7d:48:60:a4:
         14:cd:47:fd:7a:73:28:81:56:4c:9b:54:93:18:76:8b:74:a8:
         32:da:fe:72:52:cd:78:6a:88:d1:d9:bb:24:5c:5a:d8:ee:88:
         ac:ca:ea:56:82:19:30:6b:42:e5:c7:24:7a:61:eb:0a:c1:c0:
         ad:8f:3b:fe:54:33:60:9e:80:1f:63:7b:e9:7c:3a:4e:d7:46:
         8e:20:a1:e2:87:38:27:e6:5a:be:e6:67:66:cc:b4:39:a0:22:
         ee:91:7f:60:76:93:01:d5:aa:85:fd:ae:a5:c2:20:1f:67:ec:
         ce:48:89:d5:40:62:cb:04:b5:0e:eb:f2:dd:17:95:3c:3b:87:
         50:c4:7c:a5:59:b3:73:18:f7:e9:14:44:94:00:3f:e5:9a:89:
         95:44:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:10 2024 by rpki-client on console-fra.rpki-client.org