Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3139302e302f32342d3234203d3e20323632383237.roa
File:                     3138372e38342e3139302e302f32342d3234203d3e20323632383237.roa (raw, json)
Hash identifier:          2KUxvosSGVunT1DS7Ux9+M+OZC+7zYZ9Tc9K2tnnpe0=
Subject key identifier:   7B:74:BA:BE:BB:A1:A4:1D:FE:DD:14:CE:1A:D7:17:4E:54:72:08:CE
Certificate issuer:       /CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
Certificate serial:       255C3E66C49A54032DAE3F0127D72BC088001E88
Authority key identifier: 2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3139302e302f32342d3234203d3e20323632383237.roa
Signing time:             Fri 23 Aug 2024 20:01:13 +0000
ROA not before:           Fri 23 Aug 2024 19:56:13 +0000
ROA not after:            Fri 22 Aug 2025 20:01:13 +0000
asID:                     262827
IP address blocks:        187.84.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl
                          rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 19:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:3e:66:c4:9a:54:03:2d:ae:3f:01:27:d7:2b:c0:88:00:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB
        Validity
            Not Before: Aug 23 19:56:13 2024 GMT
            Not After : Aug 22 20:01:13 2025 GMT
        Subject: CN=7B74BABEBBA1A41DFEDD14CE1AD7174E547208CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:b0:de:5a:62:af:61:a9:4c:cd:f1:0f:16:
                    bf:0f:6b:bf:c9:35:44:24:46:29:f3:09:51:c1:fd:
                    68:7a:6f:c9:21:22:d3:36:35:e2:01:de:9b:3e:c6:
                    21:74:9c:50:9a:9a:8e:d2:21:56:6e:03:26:84:e5:
                    7f:ae:66:0c:ff:f9:04:d9:11:dc:43:ef:97:24:46:
                    b2:95:28:96:a0:82:79:94:20:42:1a:bd:2e:ee:00:
                    e6:e6:39:20:79:76:fe:c7:8f:f5:86:6a:2d:24:69:
                    3d:5c:db:12:5a:20:bb:e7:20:9e:43:1b:f8:56:3b:
                    42:26:a8:65:b8:17:2d:19:8d:f7:66:ec:e5:be:5c:
                    5d:e3:59:6d:3f:bf:ff:5a:96:ee:34:42:da:cd:51:
                    82:97:eb:8d:94:73:ee:3e:a5:a2:ad:54:b0:05:39:
                    d4:1d:ab:19:9d:19:3e:6b:7f:66:f0:97:ab:6c:9f:
                    9a:15:66:27:05:29:96:2e:36:e8:c4:d2:9a:4a:96:
                    2d:15:f3:bb:f0:62:28:85:35:30:97:d8:ba:55:13:
                    21:e8:07:e5:c2:d2:09:18:0d:ea:19:33:59:56:d4:
                    74:15:57:7f:ce:f5:30:c2:bb:93:eb:15:84:2e:72:
                    68:f4:55:db:21:1e:8c:e5:f9:30:3e:29:51:ea:0f:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:BA:BE:BB:A1:A4:1D:FE:DD:14:CE:1A:D7:17:4E:54:72:08:CE
            X509v3 Authority Key Identifier:
                keyid:2B:D3:FE:6E:90:84:90:7E:8A:C5:E7:4A:E3:DD:5D:1D:E7:FF:E4:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD3FE6E9084907E8AC5E74AE3DD5D1DE7FFE4EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAUQYsCDY5sRffgb9jtqMdkBcGvKRAURpKcBocfgZn3c/0/3138372e38342e3139302e302f32342d3234203d3e20323632383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:61:4b:00:1a:bd:ef:c4:71:70:d0:92:b1:d6:84:6e:1d:94:
         58:96:4b:4c:09:73:cc:f0:2f:5f:50:d9:a9:11:9e:0d:f9:91:
         ee:ff:92:02:1e:51:9c:b4:dd:36:b9:30:76:7e:9d:db:2a:1d:
         a4:79:d3:0a:45:65:7f:cf:4a:35:75:c6:08:42:e4:75:82:49:
         b9:4a:82:d2:b3:4a:e5:78:b6:ad:97:dd:2e:05:6b:03:42:49:
         9c:ac:f1:08:10:4e:eb:0a:c0:b5:18:36:54:a2:8f:de:0e:23:
         c4:4b:bf:cf:b4:3d:c7:a3:9c:c7:8b:2c:af:bb:d9:05:cb:f6:
         b5:17:96:90:94:2e:f7:fe:2f:b6:2c:3e:f8:9d:03:c7:d6:34:
         33:70:6f:a2:d2:d5:c2:fb:cc:53:4b:36:7e:8a:8c:f2:0f:38:
         5c:49:26:5f:bb:5e:b6:14:4d:1a:13:ab:2a:56:7e:50:b1:95:
         a9:bb:8d:a3:31:3e:31:cb:41:05:0d:5a:06:b7:9f:72:5e:5f:
         00:80:c7:2b:dc:72:48:41:3a:24:f5:ed:1b:cd:2a:1a:dc:cc:
         75:33:14:44:9c:f6:c6:06:43:ac:a8:a7:04:5c:94:8d:8f:b7:
         f8:f0:b9:a0:01:c8:4a:b9:f1:af:b4:3e:20:2c:75:7f:5e:df:
         a1:1a:ca:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:41 2024 by rpki-client on console-fra.rpki-client.org