Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32302d3230203d3e203238333638.roa
File:                     3137372e3230302e38302e302f32302d3230203d3e203238333638.roa (raw, json)
Hash identifier:          fLtFzqwgCG9FCY3wfJoAfNLgRsiht6efpPxgu8HAnsQ=
Subject key identifier:   0C:75:C6:2C:EE:C3:66:AD:E5:68:CC:99:86:1D:A5:62:67:F5:B6:B2
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       766D0595D68102298CF75B9D7B3C50080A8FEF99
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32302d3230203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:12 +0000
ROA not before:           Thu 04 Apr 2024 02:21:12 +0000
ROA not after:            Thu 03 Apr 2025 02:26:12 +0000
asID:                     28368
IP address blocks:        177.200.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6d:05:95:d6:81:02:29:8c:f7:5b:9d:7b:3c:50:08:0a:8f:ef:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:12 2024 GMT
            Not After : Apr  3 02:26:12 2025 GMT
        Subject: CN=0C75C62CEEC366ADE568CC99861DA56267F5B6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:89:5c:43:96:38:62:24:13:15:db:93:36:
                    4e:1c:b8:1a:c0:ba:35:2f:09:0e:7c:10:d8:ec:4c:
                    8d:dd:62:96:55:d5:36:76:f2:07:a9:47:96:64:d5:
                    4b:95:b8:53:00:cc:25:bc:43:7c:21:c4:ff:b7:42:
                    ef:4a:cf:53:2e:2f:09:d6:9a:a4:96:38:30:d5:86:
                    ea:6f:3e:1d:03:62:6d:89:b4:3e:14:d7:0a:ad:68:
                    94:59:6e:9a:b9:88:c3:be:3c:ea:ab:ce:99:d4:45:
                    64:ec:7f:3a:4f:53:02:f0:37:66:05:38:52:ce:c8:
                    d1:75:36:21:1f:cc:7e:43:db:88:d7:93:a0:aa:50:
                    ff:7f:25:0d:cd:fc:8b:4d:85:37:0e:c9:8d:c0:70:
                    4f:bf:60:ab:d6:9b:34:e4:c9:ea:5c:d9:56:73:96:
                    2d:c8:8e:75:f9:cf:01:85:f4:b0:87:a8:06:66:96:
                    91:13:1f:bd:00:aa:6d:5a:1e:30:3d:c8:90:97:a0:
                    2d:6a:f6:1e:b7:0e:17:de:29:3f:b7:4d:09:f4:40:
                    14:19:f8:89:eb:3c:64:09:4c:fb:28:a5:3e:68:6b:
                    a1:63:14:26:01:d9:c6:18:01:19:06:75:05:a8:2e:
                    a3:c6:b2:79:9d:39:a1:0a:1c:3d:d5:df:51:0d:5c:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:C6:2C:EE:C3:66:AD:E5:68:CC:99:86:1D:A5:62:67:F5:B6:B2
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32302d3230203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:20:fd:a6:18:01:94:ca:76:37:62:a5:a1:fc:23:7a:df:ba:
         c1:86:ce:a3:10:f3:5d:23:12:f6:35:44:05:9b:79:37:83:f3:
         97:3b:33:6e:df:a9:c0:3f:d5:81:a8:bf:cb:05:c9:3a:b8:51:
         74:4f:b9:98:8b:d8:74:5b:e6:bb:2b:c2:29:3c:1d:3c:e8:30:
         61:d3:d7:e8:28:4a:1a:47:01:b1:1b:18:3a:2b:b3:d1:6a:f5:
         df:64:e3:8c:08:9b:b1:e1:2f:8e:cf:33:76:ec:67:fc:39:31:
         22:e2:43:ec:26:d7:09:16:92:ba:0f:fc:6f:b2:b7:2f:e6:4d:
         4a:5e:1b:09:21:08:5a:29:ed:4a:59:0a:68:58:ab:ef:e2:f5:
         77:46:a7:6d:96:e9:2b:cc:e0:52:d6:21:54:ef:68:70:71:c2:
         e9:76:f8:f9:eb:b6:12:45:6e:9b:ff:37:d0:12:b4:11:93:3f:
         5d:96:ab:bc:33:11:f8:f8:01:4f:94:8b:f9:4d:82:0e:e2:7e:
         b8:af:d6:21:35:55:3f:d0:9e:66:5e:80:df:b2:1c:62:5c:ee:
         30:cf:89:ba:cf:66:bc:0b:e5:85:89:dd:44:ee:55:11:81:ce:
         a3:75:97:84:fb:0b:cc:9a:64:33:84:52:92:38:ed:96:f8:9e:
         d5:ed:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org