Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3138342e302f32312d3231203d3e20323733363833.roa
File:                     3138372e38342e3138342e302f32312d3231203d3e20323733363833.roa (raw, json)
Hash identifier:          HdN8+QOPb9CJQV9l5fBmSJPDAD0Wo2AgmBjkhgXJ6Ww=
Subject key identifier:   5B:4F:96:78:D9:40:AB:90:55:82:AD:44:70:7F:BD:57:02:20:77:A8
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       51F7FDF2A47AB52E12080EA88ACCF2EA57DF5B46
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3138342e302f32312d3231203d3e20323733363833.roa
Signing time:             Wed 04 Dec 2024 08:33:15 +0000
ROA not before:           Wed 04 Dec 2024 08:28:15 +0000
ROA not after:            Wed 03 Dec 2025 08:33:15 +0000
asID:                     273683
IP address blocks:        187.84.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 18:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:fd:f2:a4:7a:b5:2e:12:08:0e:a8:8a:cc:f2:ea:57:df:5b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Dec  4 08:28:15 2024 GMT
            Not After : Dec  3 08:33:15 2025 GMT
        Subject: CN=5B4F9678D940AB905582AD44707FBD57022077A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:df:1d:f3:7a:d4:08:ac:d7:79:20:15:7a:
                    4c:50:3c:b0:59:68:0b:f4:41:6b:23:94:4d:b4:a7:
                    6e:62:95:8e:09:dc:6b:e9:34:07:be:dc:03:78:29:
                    98:cd:80:36:e5:5c:2d:d4:d0:70:b8:ae:86:ea:98:
                    4b:50:b4:c5:2f:85:20:b7:42:26:3c:c8:93:dd:19:
                    2e:e2:27:3a:80:ce:46:b7:b3:5e:df:b2:e0:82:86:
                    7e:1d:1e:50:ba:3c:fb:14:6b:56:16:da:ed:ac:6c:
                    3b:69:da:e0:8c:ca:4d:fa:1d:cf:a0:91:1d:86:1d:
                    10:9e:f6:3c:0e:bb:2d:a9:9a:8d:da:e3:e9:92:97:
                    ba:4e:e6:7f:fd:4b:8c:f1:b7:a3:65:76:26:4e:bd:
                    37:b4:96:c4:03:9c:ae:68:ed:1f:2b:14:60:5a:f0:
                    4d:50:69:04:fe:d1:57:55:d4:f0:73:24:e6:8b:a0:
                    00:16:07:3c:a3:f1:9c:34:cf:ff:b3:43:dc:a0:45:
                    da:dc:5b:ba:31:4a:d0:b7:99:ae:ca:e1:a3:3f:ce:
                    8e:bf:5f:fa:44:5a:e7:9d:f4:d6:a2:23:3a:9d:d9:
                    d3:11:9b:f8:49:c3:02:ee:0f:05:15:b3:2d:a7:34:
                    32:33:49:24:81:c2:f2:39:64:5e:a8:56:56:5d:a4:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:96:78:D9:40:AB:90:55:82:AD:44:70:7F:BD:57:02:20:77:A8
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3138372e38342e3138342e302f32312d3231203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:df:60:a4:47:fc:05:a8:73:51:14:06:75:d5:71:47:98:
         79:9a:c8:ac:45:c9:50:bc:b7:0d:b4:63:8e:88:3c:77:37:a1:
         6f:ff:c0:7f:75:24:96:63:8d:ea:8e:74:ef:ac:af:25:76:2d:
         7e:3a:a1:1e:a9:72:c1:18:19:dd:64:75:3e:e3:5e:91:78:11:
         e1:cc:b1:83:69:06:2d:47:a5:e6:7e:d3:e1:fe:99:36:c8:2e:
         06:44:6a:fd:11:50:df:75:94:db:9a:2f:8a:5b:e2:87:e8:fd:
         8d:c5:d9:df:10:38:67:5d:42:7f:50:3a:a5:d5:f2:47:65:90:
         7c:f2:29:02:f5:ac:42:80:ff:b0:66:d5:91:04:25:ea:d3:4b:
         92:86:84:c4:8c:ab:23:8b:c2:ea:73:9a:f1:d6:8e:c6:e1:5d:
         e0:15:74:d7:f3:fb:af:1d:c8:5e:af:28:c4:90:8e:e4:66:80:
         ae:17:aa:43:7e:e0:e1:77:aa:cd:70:7c:be:73:4c:e2:6e:4e:
         a9:53:f4:ab:8b:8f:15:a0:d6:00:d4:40:98:53:a8:c2:e7:24:
         fe:7b:a3:2b:61:df:ee:cb:12:a3:15:44:80:73:22:fc:85:07:
         66:cd:19:44:10:99:1c:11:2a:e3:63:d5:33:d7:70:7a:38:18:
         19:ed:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:03 2025 by rpki-client