Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          KM9ltCXMkORuUQOKL1vagdYtyo6/oMuclZ/mQKjzAzQ=
Subject key identifier:   60:26:81:16:C8:A7:C4:7D:D1:DF:11:78:5E:44:E3:4A:3F:7E:FB:58
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       4108D4FB89D8D4EF2FF9BEABDA5A0EFAE94A51AA
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:08 +0000
ROA not before:           Thu 04 Apr 2024 02:21:08 +0000
ROA not after:            Thu 03 Apr 2025 02:26:08 +0000
asID:                     28368
IP address blocks:        177.200.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:08:d4:fb:89:d8:d4:ef:2f:f9:be:ab:da:5a:0e:fa:e9:4a:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:08 2024 GMT
            Not After : Apr  3 02:26:08 2025 GMT
        Subject: CN=60268116C8A7C47DD1DF11785E44E34A3F7EFB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:46:a9:43:cc:1f:a2:24:b9:43:ad:df:3c:
                    79:a8:78:a1:1f:ed:59:52:a9:c4:ad:48:64:a4:be:
                    ce:9c:22:dc:64:c9:af:ea:18:f7:5a:3d:c0:38:84:
                    18:91:b3:aa:e9:a5:49:e3:6c:93:c1:b1:35:b6:59:
                    f6:62:c7:7a:3b:04:bf:13:6c:9a:fa:67:5a:5d:e2:
                    f9:d6:c2:d7:3a:54:8b:e7:7c:fb:8d:bb:d8:2a:4c:
                    b3:34:c0:77:23:bf:73:9b:b7:05:09:88:cf:6f:41:
                    5e:62:e5:1b:e5:7c:b5:f2:32:9c:d9:64:5e:f6:64:
                    7b:df:51:08:e5:6f:01:68:ba:35:32:a0:9d:57:1a:
                    5b:17:d5:98:b3:b2:d3:93:e7:ba:2b:02:56:d2:af:
                    04:b3:ff:33:0b:a7:06:27:36:d4:91:f7:4b:ea:ac:
                    84:f5:b7:75:73:0c:1e:be:5f:84:ee:96:01:7c:47:
                    93:75:6c:f9:17:49:e1:09:b6:c0:0c:84:c2:13:92:
                    ba:d7:da:2c:72:39:e0:9a:a8:a4:a2:b3:e1:ae:de:
                    b6:1b:a7:50:a0:62:67:16:0c:4d:af:e7:2e:c1:0a:
                    3e:47:9c:48:3b:e8:34:02:52:68:d5:6f:24:9d:1c:
                    6f:8c:cb:a4:1d:3b:dc:d7:dc:03:7f:8c:b7:ac:10:
                    9a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:81:16:C8:A7:C4:7D:D1:DF:11:78:5E:44:E3:4A:3F:7E:FB:58
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:14:79:04:c8:ad:a1:2b:20:c1:41:da:66:d6:31:7b:23:04:
         eb:49:09:32:49:59:55:e9:85:b8:39:73:74:a4:3d:21:6e:d7:
         56:32:80:f7:a3:2b:ca:57:f2:0e:3e:fc:b0:62:0b:94:bf:7e:
         3a:4f:d8:0e:d0:da:2a:4c:c3:69:18:93:58:21:75:c6:c8:44:
         7a:fb:3a:86:ca:2b:92:d8:b0:12:d1:36:79:6d:b6:7f:c9:09:
         1e:b3:ac:29:28:b7:72:c2:76:8e:5f:e9:2e:26:c3:70:47:79:
         95:d6:4b:fe:83:f9:8f:b8:f6:36:fa:54:5f:f0:07:e6:3a:da:
         87:9a:01:96:a5:4b:36:d9:68:59:b3:7c:87:ec:df:25:38:98:
         23:5e:83:b7:ea:36:a9:75:fc:15:02:ab:d8:cd:ce:67:71:5c:
         f2:65:c8:08:1b:e4:94:3b:16:0f:18:86:6f:ef:8c:dc:60:30:
         7c:b4:cc:bf:71:82:68:e6:6b:30:af:83:5f:b0:c0:bc:49:6c:
         f0:c9:0b:0c:db:34:5a:01:59:e1:db:6b:92:28:f4:4e:33:7d:
         d1:5b:82:50:dd:ba:c4:c3:f7:3c:04:de:28:81:fb:6f:ac:0e:
         9f:01:5e:8f:7a:71:e6:17:5a:08:42:96:db:50:57:d2:db:ad:
         92:46:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org