Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32322d3232203d3e203238333638.roa
File:                     3137372e3230302e38302e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          +kbj4+owv5GPV0rtkg7nH0KTr8WxepBN2GPlCClTAbc=
Subject key identifier:   79:F0:7B:18:DF:11:97:6D:0E:AC:91:2F:18:64:23:84:CB:B2:AE:FC
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1B4FA5811D18D73B8C361EC97F917D3B728BFBEF
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:09 +0000
ROA not before:           Thu 04 Apr 2024 02:21:09 +0000
ROA not after:            Thu 03 Apr 2025 02:26:09 +0000
asID:                     28368
IP address blocks:        177.200.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4f:a5:81:1d:18:d7:3b:8c:36:1e:c9:7f:91:7d:3b:72:8b:fb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:09 2024 GMT
            Not After : Apr  3 02:26:09 2025 GMT
        Subject: CN=79F07B18DF11976D0EAC912F18642384CBB2AEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:5b:73:5e:b2:27:39:08:d3:21:87:3b:b8:
                    f2:bb:a4:d9:14:a4:e9:76:01:70:56:02:10:84:38:
                    7f:f1:44:3d:bc:4d:fc:0c:e4:e4:e9:5e:9d:fc:9b:
                    34:81:30:f2:69:82:e5:e0:ef:97:65:b1:3f:b6:f0:
                    93:78:a9:39:f6:57:0d:0a:25:1a:68:d3:63:a9:c8:
                    18:4a:2f:b8:a9:90:58:54:ac:d3:a1:4e:f8:e6:5e:
                    09:ab:a2:08:c0:77:54:02:b7:ae:47:91:5b:b1:c7:
                    2b:b3:c3:f8:90:1f:03:0d:83:3c:8d:e3:b5:32:b3:
                    fc:81:d0:17:a9:c0:b5:d3:9d:2a:3a:89:05:50:50:
                    0d:d3:67:61:27:2a:7c:ad:b9:74:47:58:39:e2:84:
                    30:b4:0f:15:a0:26:52:29:83:d3:8c:5f:d7:bd:7a:
                    ca:4c:d2:47:3f:65:a7:82:23:62:cb:a9:d0:9b:d0:
                    3e:5b:83:d5:6b:1c:12:04:b1:e2:e0:9c:51:51:db:
                    05:fb:0d:70:0f:4b:82:e1:1c:c6:56:81:ff:a5:ab:
                    e5:2f:d7:af:ba:cb:eb:99:0f:ca:d6:d4:5c:a7:48:
                    ae:79:8c:60:3d:21:70:11:34:6c:cd:67:97:b5:c7:
                    0f:0e:74:7a:88:b0:ba:f9:12:f1:0e:86:de:70:64:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:7B:18:DF:11:97:6D:0E:AC:91:2F:18:64:23:84:CB:B2:AE:FC
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:0a:fd:bf:af:04:f1:99:3d:96:ee:60:1a:21:ad:f1:5f:
         4c:6f:c0:1f:47:62:a3:05:f5:d0:5a:84:34:53:b1:0f:43:2c:
         21:ae:b4:5a:02:b1:4d:7c:1d:95:a3:41:c4:5a:e2:17:02:38:
         6f:a1:a8:b0:51:38:84:8a:35:ed:ae:bb:a7:aa:3f:ac:3e:35:
         96:b8:58:5c:ea:17:4b:de:f8:51:5d:5a:ee:e2:85:06:a0:a8:
         83:9f:89:52:3f:35:58:31:0b:5c:1c:0a:ae:31:39:aa:03:9e:
         ae:0e:a9:c2:fa:3a:8e:47:3f:31:3b:ae:0d:b1:38:db:ee:fa:
         fe:89:9a:fa:a1:a9:2a:9b:af:6f:de:f3:02:23:fe:b4:29:e9:
         41:9d:15:7c:23:17:f9:23:6a:99:aa:75:09:4e:c2:d5:72:40:
         7d:c4:d9:43:14:6d:ed:32:05:88:59:11:f8:6e:d1:05:b9:b8:
         89:7a:31:15:07:73:0a:de:cf:83:29:e4:7f:5b:91:15:b1:f6:
         73:9e:68:ef:1b:e9:1c:1a:ce:ef:f0:89:42:e6:3b:46:70:3c:
         0f:c7:d1:54:a8:bc:d7:de:58:fa:6e:a4:e6:34:82:55:57:2e:
         95:7d:f9:be:0f:c2:bd:f9:45:06:40:5e:66:19:0c:6f:c7:a0:
         fa:8a:05:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG0+lgR0Y1zuMNh7Jf5F9O3KL++8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMDlaFw0yNTA0MDMwMjI2MDlaMDMxMTAvBgNV
BAMTKDc5RjA3QjE4REYxMTk3NkQwRUFDOTEyRjE4NjQyMzg0Q0JCMkFFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocFtzXrInOQjTIYc7uPK7pNkU
pOl2AXBWAhCEOH/xRD28TfwM5OTpXp38mzSBMPJpguXg75dlsT+28JN4qTn2Vw0K
JRpo02OpyBhKL7ipkFhUrNOhTvjmXgmrogjAd1QCt65HkVuxxyuzw/iQHwMNgzyN
47Uys/yB0BepwLXTnSo6iQVQUA3TZ2EnKnytuXRHWDnihDC0DxWgJlIpg9OMX9e9
espM0kc/ZaeCI2LLqdCb0D5bg9VrHBIEseLgnFFR2wX7DXAPS4LhHMZWgf+lq+Uv
16+6y+uZD8rW1FynSK55jGA9IXARNGzNZ5e1xw8OdHqIsLr5EvEOht5wZE1lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUefB7GN8Rl20OrJEvGGQjhMuyrvwwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzNzM3MmUzMjMwMzAyZTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCschQMA0GCSqGSIb3DQEBCwUAA4IBAQCGowr9v68E
8Zk9lu5gGiGt8V9Mb8AfR2KjBfXQWoQ0U7EPQywhrrRaArFNfB2Vo0HEWuIXAjhv
oaiwUTiEijXtrrunqj+sPjWWuFhc6hdL3vhRXVru4oUGoKiDn4lSPzVYMQtcHAqu
MTmqA56uDqnC+jqORz8xO64NsTjb7vr+iZr6oakqm69v3vMCI/60KelBnRV8Ixf5
I2qZqnUJTsLVckB9xNlDFG3tMgWIWRH4btEFubiJejEVB3MK3s+DKeR/W5EVsfZz
nmjvG+kcGs7v8IlC5jtGcDwPx9FUqLzX3lj6bqTmNIJVVy6Vffm+D8K9+UUGQF5m
GQxvx6D6igVu
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:15 2024 by rpki-client on console-ams.rpki-client.org