Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138392e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3138392e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          oO1iXsY/DtDyRhWC4dSoL3FwURkHgVL1zfdQa+zVYWs=
Subject key identifier:   46:AC:5E:F1:8B:D1:9F:F1:CC:B7:50:08:A4:EF:7F:09:3C:F8:1C:9B
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       2442A58173B109EC256ACF58052B24867CFF9E9A
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138392e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:28 +0000
ROA not before:           Fri 23 Aug 2024 19:56:28 +0000
ROA not after:            Fri 22 Aug 2025 20:01:28 +0000
asID:                     262827
IP address blocks:        187.84.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:a5:81:73:b1:09:ec:25:6a:cf:58:05:2b:24:86:7c:ff:9e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:28 2024 GMT
            Not After : Aug 22 20:01:28 2025 GMT
        Subject: CN=46AC5EF18BD19FF1CCB75008A4EF7F093CF81C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6b:d3:2f:80:d0:49:dc:c2:18:62:8e:50:2d:
                    61:09:45:12:65:3e:88:78:24:a1:7a:fa:15:13:d5:
                    10:86:8d:9d:7f:e5:25:be:c0:25:91:53:ed:b8:3d:
                    60:fd:ba:78:51:3f:2d:2b:bc:3e:1a:ce:f5:e8:68:
                    6e:0e:69:5e:57:43:ca:49:e3:9c:a9:0e:85:eb:55:
                    05:79:84:85:4f:24:5b:0a:6a:49:69:ab:7e:5a:6b:
                    fb:a7:f0:2a:f6:d9:94:c4:82:9f:2f:b8:03:11:a8:
                    07:bb:79:68:6a:2f:ab:a2:e2:cc:17:a8:4e:77:8f:
                    59:03:bc:9b:3e:c7:07:a1:c3:8c:48:fe:fa:8c:17:
                    99:0c:df:ec:26:07:7a:6a:7a:e4:1e:05:f8:f5:4c:
                    5a:59:fe:f9:98:b1:c8:6a:96:7b:7c:35:c7:92:05:
                    bf:79:b3:13:92:a5:81:c7:1c:8f:61:69:a3:61:8c:
                    ce:33:0d:c5:bd:de:ca:8a:c3:75:3a:6b:a5:96:95:
                    22:1a:3c:20:55:a9:12:ed:0e:83:c7:de:35:86:74:
                    80:54:58:8d:27:ab:ba:42:cc:5b:c3:bf:82:f2:b2:
                    5e:bb:f0:6b:b9:bd:fc:93:cd:d3:41:ae:8e:02:18:
                    cd:4c:35:dd:9f:69:c2:0e:c9:37:63:81:8e:a5:51:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:5E:F1:8B:D1:9F:F1:CC:B7:50:08:A4:EF:7F:09:3C:F8:1C:9B
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3138392e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:1e:d4:ae:5f:dd:42:8d:32:46:f1:cb:8d:eb:a0:f5:ba:
         da:07:e2:ef:90:3a:9e:e6:33:42:62:9d:93:91:73:f8:69:ec:
         37:b7:a5:e5:d0:35:0b:1b:8e:1f:7f:cf:1a:6e:57:59:fb:d0:
         79:ca:a7:00:cb:5f:72:fd:fa:5e:3c:d9:d8:f5:aa:c5:18:1c:
         38:cc:fa:12:04:83:4f:95:44:95:a8:70:96:a0:e9:18:cc:d5:
         93:7b:4b:2e:ea:c5:9f:98:b0:97:18:9c:ef:da:35:01:b0:93:
         96:1a:b5:78:79:12:ce:e7:eb:7c:f3:42:2b:5d:d4:02:dd:f3:
         46:d3:5a:f0:d7:bd:aa:f2:e6:f8:69:00:44:f0:39:ca:cc:b2:
         0e:54:8e:d6:9e:f0:5d:88:02:a7:8f:45:6c:5d:42:e2:07:76:
         16:d9:a1:04:35:58:78:c3:5c:db:50:2f:96:9c:64:07:13:2f:
         24:e6:1e:0b:37:ae:8e:a0:93:a1:10:1f:0a:86:f6:0e:18:38:
         e5:24:97:2a:bd:bb:14:b5:92:2f:43:db:39:cb:63:98:34:37:
         7e:4a:c8:63:81:bb:c6:8c:3b:ce:dc:c4:87:19:f6:fb:a5:f7:
         dd:ca:fa:b8:aa:70:88:34:ae:cd:ce:e8:db:e5:68:7b:18:b6:
         89:8e:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:16 2024 by rpki-client on console-ams.rpki-client.org