Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3138342e3132382e302f32302d3234203d3e203238333638.roa
File:                     3137372e3138342e3132382e302f32302d3234203d3e203238333638.roa (raw, json)
Hash identifier:          u05fwQ6DKdE6mGnL+MWN5yWdWNYpQsi3+2CWwWcLNnE=
Subject key identifier:   87:7F:F5:2A:A9:60:D3:CA:2A:27:08:0E:8D:83:3A:7C:95:03:11:DC
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       052E36E7D3F65D2FD4BC1C5810BF6DD82D5D289B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3138342e3132382e302f32302d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:02 +0000
ROA not before:           Thu 06 Mar 2025 02:37:02 +0000
ROA not after:            Thu 05 Mar 2026 02:42:02 +0000
asID:                     28368
IP address blocks:        177.184.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2e:36:e7:d3:f6:5d:2f:d4:bc:1c:58:10:bf:6d:d8:2d:5d:28:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:02 2025 GMT
            Not After : Mar  5 02:42:02 2026 GMT
        Subject: CN=877FF52AA960D3CA2A27080E8D833A7C950311DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d4:95:4e:20:9b:2c:c8:00:17:3c:6c:8f:db:
                    ad:a6:5c:92:d6:90:07:91:1c:5d:65:5c:7b:99:77:
                    77:2b:a9:cf:c5:7a:6c:15:d8:3d:3b:82:7d:e1:aa:
                    b1:fd:9c:44:bc:9e:5f:39:b3:47:7f:4a:b7:82:91:
                    8b:5a:db:ec:ba:ab:c1:33:01:fe:88:93:72:32:b3:
                    7e:2f:e0:a8:06:aa:e7:f7:fc:b0:b4:12:fd:23:0b:
                    9f:0b:73:4a:84:f3:de:c8:d9:b9:d0:54:5f:ba:27:
                    5c:86:b7:c5:c7:ab:1e:13:4a:15:3d:8a:68:98:5e:
                    db:4a:dd:c9:b5:d9:cb:8e:6c:bd:1f:66:be:a9:9e:
                    52:ae:5c:19:4d:6d:df:b9:79:70:d6:fa:54:9c:26:
                    7e:35:ac:8e:60:88:1a:10:45:75:36:aa:c0:70:67:
                    60:da:22:fd:92:7f:c5:f9:5a:61:01:38:ae:9e:c8:
                    6b:d0:99:20:56:a4:f6:a9:27:42:10:cd:2f:64:fb:
                    a4:4d:02:48:21:70:2d:a8:b5:60:8b:45:3f:ea:da:
                    bb:30:79:d4:d4:6f:ce:5c:b2:5c:ae:54:1d:ae:b9:
                    f2:ae:3d:98:cc:c2:5e:fd:b4:7d:0b:59:e0:05:f0:
                    50:b7:81:13:ae:66:51:13:6a:cb:a8:fb:ab:fe:20:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:F5:2A:A9:60:D3:CA:2A:27:08:0E:8D:83:3A:7C:95:03:11:DC
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3138342e3132382e302f32302d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:5c:c7:13:3c:22:ee:a8:3c:fb:29:2b:21:4d:f5:9d:3c:
         02:76:a4:43:b1:b1:7b:d4:a4:ff:41:fd:df:39:fc:13:62:49:
         e1:53:d8:d0:67:c1:01:6e:8b:22:7a:4a:f0:cb:0e:a2:6d:90:
         6d:0b:0d:87:65:cd:70:2e:55:3b:d8:ec:9c:63:60:8a:ba:46:
         03:1f:2d:0e:67:d9:e0:0a:04:7e:15:5d:14:d3:ca:14:86:8c:
         40:10:dc:9c:26:53:95:11:76:3d:16:ca:a1:6e:ab:55:67:88:
         b4:5e:d9:e7:e1:ca:af:c7:83:b1:25:d9:c3:4f:62:6c:20:3d:
         0f:75:55:e6:6b:87:1c:c1:e1:0a:79:41:38:18:ab:46:89:64:
         f6:83:6e:e9:27:ff:3c:9e:2e:09:08:f4:d5:1c:0e:e4:50:78:
         b0:f4:75:3f:0a:bd:3b:25:53:39:bb:80:63:f7:16:21:14:c5:
         69:d6:db:20:11:35:f2:41:84:fc:5e:98:9a:20:4a:3e:b2:1b:
         0f:08:e6:cf:8d:d7:48:fa:82:7e:55:ba:38:93:84:7e:36:c1:
         7d:f6:e3:50:bd:59:6f:fd:7e:f8:e2:52:31:18:d2:89:ac:90:
         da:35:0e:68:10:66:20:16:38:0b:ea:b4:30:c3:86:0b:0a:3b:
         a2:24:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:49 2025 by rpki-client