Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32302d3230203d3e20323733363833.roa
File:                     3138372e38342e3137362e302f32302d3230203d3e20323733363833.roa (raw, json)
Hash identifier:          44/qn+BCd6JggZRKJ3MvdBuM9Yrk+dCN2n15NBzxxvU=
Subject key identifier:   CD:31:61:7E:69:BA:28:9E:0C:B2:63:DD:0D:99:13:97:E6:40:96:F6
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       4605C600EA5C8C778ED2B24BADB555FFA4A57B2B
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32302d3230203d3e20323733363833.roa
Signing time:             Wed 04 Dec 2024 08:32:17 +0000
ROA not before:           Wed 04 Dec 2024 08:27:17 +0000
ROA not after:            Wed 03 Dec 2025 08:32:17 +0000
asID:                     273683
IP address blocks:        187.84.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:05:c6:00:ea:5c:8c:77:8e:d2:b2:4b:ad:b5:55:ff:a4:a5:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  4 08:27:17 2024 GMT
            Not After : Dec  3 08:32:17 2025 GMT
        Subject: CN=CD31617E69BA289E0CB263DD0D991397E64096F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:a0:c8:00:e9:5d:5c:9c:ba:61:7d:0c:73:
                    a2:02:fc:42:59:b8:e9:e3:b5:ad:d6:c4:c6:74:2e:
                    eb:71:96:e4:77:5f:d3:0b:b1:52:82:c3:0e:32:f1:
                    c6:6f:ba:80:77:7f:3c:71:c3:57:ea:80:2f:f7:41:
                    51:a8:c2:68:d7:8c:dc:c0:d2:d4:ae:c8:14:f1:68:
                    ef:f8:f0:6e:74:89:90:cd:b9:3f:8e:5a:bf:29:e2:
                    7e:7e:7a:2c:e1:b6:f3:04:6a:8d:06:3d:d2:b3:d4:
                    9e:5d:3d:90:89:35:0c:5c:a5:60:24:16:b5:85:4d:
                    fb:cb:58:3b:e6:e9:45:38:e4:60:ae:68:25:be:93:
                    79:a1:d7:98:b0:18:ee:24:78:b8:dd:a3:d5:9b:96:
                    a6:b5:51:0a:05:5a:d5:0a:a0:62:11:51:be:6d:74:
                    b6:f5:34:e8:74:e4:52:15:3f:9d:7c:52:50:ef:a1:
                    13:30:98:32:1c:5c:03:4e:61:f0:a5:a8:e5:75:39:
                    99:62:66:c2:f6:b5:78:8c:b1:6d:5d:b7:18:0d:b3:
                    7d:9e:6a:fb:a9:e0:6e:89:3a:2e:b2:06:e8:2b:be:
                    45:9c:d0:a6:44:06:21:0f:69:96:bb:b9:92:5b:70:
                    b7:71:04:ad:12:5e:08:0d:b4:d4:ae:7e:87:ae:08:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:31:61:7E:69:BA:28:9E:0C:B2:63:DD:0D:99:13:97:E6:40:96:F6
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3137362e302f32302d3230203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:df:92:51:02:8c:96:9d:91:1b:e0:84:bb:e3:8f:b0:2c:
         d3:1a:82:d3:07:d6:ec:83:db:4d:ef:d3:88:28:f1:26:c4:db:
         30:2a:c0:c2:55:d7:21:43:f4:02:bc:12:e8:77:cd:ec:28:13:
         d4:68:49:21:43:17:78:b8:eb:0e:c8:3e:e1:a8:bb:e8:f7:9d:
         bf:4b:46:f5:3c:dd:50:51:60:fe:8d:7f:b3:d4:a6:ae:f1:dc:
         b3:da:b6:0d:65:cf:07:e0:e4:94:eb:ef:8d:8f:89:5c:1b:c0:
         4a:86:cb:84:e9:94:81:09:98:84:ec:8e:39:e9:de:fc:be:56:
         c3:5b:d7:17:aa:35:27:7d:a1:1b:dc:99:6b:64:a0:39:b6:d4:
         f2:07:39:71:d3:61:d3:f2:aa:97:34:a0:cc:54:03:7b:a3:96:
         66:22:5f:0a:69:92:d9:3c:9b:37:cb:f6:67:e7:5d:90:eb:1e:
         c7:da:0f:7a:cd:79:9e:47:39:ab:67:36:18:44:14:6c:16:c2:
         5f:94:d4:c3:ab:05:66:db:a2:e4:04:15:20:be:e2:d2:5e:57:
         27:91:3f:16:4b:7d:4c:8d:ae:df:77:2c:d9:26:b0:08:38:1f:
         ca:a3:ab:e7:27:02:41:83:c1:70:63:40:10:72:6a:61:0d:e1:
         02:69:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:53 2025 by rpki-client