Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/3138372e38342e3135362e302f32322d3232203d3e20323636393230.roa
File:                     3138372e38342e3135362e302f32322d3232203d3e20323636393230.roa (raw, json)
Hash identifier:          sR5F9LvMuH8EtMHc4X3RT3QIydHGi1gv5pJwpeDghIc=
Subject key identifier:   2B:6F:83:03:5F:49:E4:E4:06:E5:00:12:1E:70:F0:C6:3D:A9:53:98
Certificate issuer:       /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial:       73B36B313633B876E2087C6C34E97DD7B30DBC88
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/3138372e38342e3135362e302f32322d3232203d3e20323636393230.roa
Signing time:             Tue 24 Sep 2024 15:59:21 +0000
ROA not before:           Tue 24 Sep 2024 15:54:21 +0000
ROA not after:            Tue 23 Sep 2025 15:59:21 +0000
asID:                     266920
IP address blocks:        187.84.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b3:6b:31:36:33:b8:76:e2:08:7c:6c:34:e9:7d:d7:b3:0d:bc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Validity
            Not Before: Sep 24 15:54:21 2024 GMT
            Not After : Sep 23 15:59:21 2025 GMT
        Subject: CN=2B6F83035F49E4E406E500121E70F0C63DA95398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:ad:e4:c6:9b:c4:9b:e2:c2:d8:c0:a3:64:
                    75:c3:82:91:9a:d0:e3:49:61:94:04:b5:f7:9e:4e:
                    41:31:0b:26:4e:1b:d0:f7:2a:51:37:d1:bd:4c:e8:
                    51:fa:0d:4c:9d:30:9e:79:43:c7:dd:e8:9f:3b:e9:
                    b4:0e:a9:f3:06:1a:69:bf:fa:94:eb:97:24:52:47:
                    78:cf:41:6a:0f:ae:45:25:5e:cf:75:89:70:14:44:
                    a7:e1:ba:8b:22:c5:80:01:e5:49:e8:4a:d3:24:da:
                    c2:42:f8:6a:80:ed:50:71:74:f3:c7:19:a4:f3:40:
                    81:69:32:89:87:da:05:e1:96:43:fb:ad:59:49:24:
                    ac:cd:e8:bc:5b:bf:03:4b:09:ca:00:27:b6:4d:e4:
                    06:49:44:24:ed:5a:0d:3e:0d:db:6f:a2:d2:70:b8:
                    cf:0e:f7:ea:8b:79:c4:49:99:34:59:1e:dc:78:fb:
                    f1:4c:3d:e9:86:6d:72:8a:5a:02:ca:a2:1c:71:a8:
                    4d:fb:36:ae:ee:6a:a4:1a:78:81:27:1a:a8:27:89:
                    4a:af:bb:3e:50:ed:de:f7:0e:f4:44:df:04:50:66:
                    b0:1a:85:88:bb:76:dc:31:c0:ad:38:78:29:ba:46:
                    51:0d:0a:2a:d0:6a:e9:23:6c:f8:ff:10:37:c4:4f:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6F:83:03:5F:49:E4:E4:06:E5:00:12:1E:70:F0:C6:3D:A9:53:98
            X509v3 Authority Key Identifier:
                keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/3138372e38342e3135362e302f32322d3232203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:77:74:0c:79:07:67:04:b9:54:97:a4:f5:1e:f4:dc:d8:
         be:1d:1d:b5:e8:d9:96:22:db:d5:89:e0:99:ce:7d:e7:b1:fe:
         22:f1:19:f2:c6:2a:00:e8:86:eb:93:57:ea:cc:fa:15:b0:3e:
         75:45:2e:57:60:16:d2:e8:1f:5b:d5:07:fa:e6:61:42:87:f5:
         47:42:6d:20:b8:96:00:d7:f5:5f:26:66:e4:62:16:ac:ff:86:
         36:b3:08:b9:4b:ca:18:bb:70:bd:16:0b:a2:35:d3:7b:e0:f9:
         a3:ed:dc:e5:8c:12:29:5f:64:98:dc:57:30:1c:73:61:d5:ac:
         85:4e:3b:f9:73:42:81:3f:e6:64:8b:2d:8f:5a:eb:62:08:53:
         ba:06:e3:cd:9d:06:eb:b6:85:9a:71:d8:47:75:df:d1:74:9d:
         0c:57:a6:23:e8:f5:6a:28:75:7c:5a:df:32:78:31:a1:f1:c3:
         78:f7:70:4c:c1:a4:53:d6:1c:87:cb:45:b3:4f:f1:64:0c:19:
         39:49:47:d2:a2:01:77:43:13:fa:b0:27:c6:4b:8f:03:7e:a3:
         6b:a4:6f:4b:a0:6e:ed:4f:e0:f4:ba:12:dd:22:aa:23:46:33:
         72:92:af:d4:3a:aa:2a:4a:59:59:62:0d:d2:c4:d1:71:1c:bc:
         0d:8e:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org