Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32312d3231203d3e203238333638.roa
File:                     3137372e3230302e38302e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          Vro7RrkbmT5Puis86/TZWA8GCjjov5ccN0M4w+36J7k=
Subject key identifier:   16:60:6D:10:E3:45:43:7C:A9:AA:07:C2:A5:0C:60:E7:69:CA:A1:00
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0C836877BCE2CBAE489ED623F044FD0D3C6E149F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:09 +0000
ROA not before:           Thu 04 Apr 2024 02:21:09 +0000
ROA not after:            Thu 03 Apr 2025 02:26:09 +0000
asID:                     28368
IP address blocks:        177.200.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:83:68:77:bc:e2:cb:ae:48:9e:d6:23:f0:44:fd:0d:3c:6e:14:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:09 2024 GMT
            Not After : Apr  3 02:26:09 2025 GMT
        Subject: CN=16606D10E345437CA9AA07C2A50C60E769CAA100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:3d:64:8a:2e:e8:a5:01:6e:58:0b:b3:c5:
                    ae:ca:4e:b4:6e:df:82:ab:68:46:aa:85:07:64:f8:
                    85:b3:77:23:91:d1:da:89:39:23:18:2c:d3:63:75:
                    7a:ed:d2:b0:b1:3a:dd:69:25:b4:cd:57:bf:a3:4b:
                    38:31:46:41:1a:36:7e:fc:8f:e4:a2:1d:9c:56:ea:
                    81:3f:52:46:6e:7c:1e:95:3e:68:81:4a:f7:4b:18:
                    65:e5:20:e6:ca:a2:a8:68:87:37:bf:bd:03:00:6b:
                    9b:aa:d9:fe:38:0d:12:33:ee:25:69:f3:9b:a2:1b:
                    80:7e:b6:34:5d:c5:8b:6f:01:8b:48:63:0f:44:47:
                    7d:55:c7:ee:a7:90:af:fe:97:94:13:20:5a:b6:40:
                    28:b2:21:c6:65:b5:93:8e:39:d6:7c:b4:26:61:6f:
                    4f:3b:5b:28:09:b4:4e:f4:3c:c0:e2:9e:2f:3f:18:
                    f9:9b:f2:57:b0:be:9d:a6:4a:3b:20:f3:60:32:d1:
                    30:0c:06:d0:99:04:b0:7c:0b:f3:a2:ee:09:67:a7:
                    ad:b1:4b:41:18:f7:6e:20:3c:e2:72:8a:b3:9d:6d:
                    85:2d:af:db:f2:ca:3a:51:2b:4e:ec:ab:50:59:71:
                    e8:47:3c:1d:b2:b0:ba:65:d6:84:8c:55:6a:ca:12:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:60:6D:10:E3:45:43:7C:A9:AA:07:C2:A5:0C:60:E7:69:CA:A1:00
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:c5:9f:7b:0b:a5:a4:6e:c1:20:67:53:04:44:d0:f3:08:
         ab:1c:7e:b3:17:c5:6a:2f:31:b4:a3:a5:e2:08:94:5a:02:32:
         07:b8:86:0e:83:7a:27:49:8b:2a:70:9d:3c:89:69:80:4d:d3:
         2b:62:58:98:11:22:17:35:ea:3b:3e:15:80:ef:28:f1:15:51:
         86:fa:50:a6:e5:0d:55:95:8c:f3:98:83:a3:1f:33:4f:bb:d0:
         b7:6a:d7:80:59:d0:62:c2:ad:fd:02:58:61:61:e4:51:67:3e:
         fd:ee:0c:67:72:b6:6e:e2:d6:f5:46:cc:93:31:df:96:30:77:
         4d:fa:e4:ff:e3:c1:74:fe:5f:7f:73:d1:52:57:6a:41:ef:e9:
         88:e1:b6:df:1b:39:40:1c:e3:14:1e:7d:5f:c1:af:be:b4:59:
         75:fd:0d:2c:70:c3:94:0a:66:20:b9:7c:9d:c0:a8:c7:2f:d8:
         c3:09:30:07:5a:26:f0:2d:8c:0d:d2:66:ef:6f:87:5a:b0:84:
         d6:25:5d:3b:d4:e1:9c:e7:b8:60:c7:d1:a9:7d:d1:52:d7:dc:
         10:a2:c3:48:76:e0:11:f1:4b:aa:dd:b1:75:b3:02:47:e8:ac:
         4e:fd:bc:b0:bc:e7:6b:b4:5d:8a:92:2a:dd:d9:b3:2b:b7:1b:
         3e:15:de:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org