Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          xsO8nxbFNtrdn+PO+1+cwFwUj3ZeVF9f0T/c7r5jYMY=
Subject key identifier:   63:2F:C0:E4:E2:71:D4:76:B7:F1:32:15:68:3A:11:E8:DC:59:6D:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2CAE2425335A0BBB05EB2A3ACFCBA34FE26A998F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        177.200.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ae:24:25:33:5a:0b:bb:05:eb:2a:3a:cf:cb:a3:4f:e2:6a:99:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=632FC0E4E271D476B7F13215683A11E8DC596D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:93:bd:a0:e5:c2:4f:d1:fb:33:a2:06:45:ed:
                    76:71:38:c0:2f:3d:36:78:b2:4a:5a:b0:d7:28:e0:
                    a3:75:61:21:77:a1:81:9c:ef:ae:2e:46:21:66:b9:
                    24:dc:9e:93:7d:7c:0a:02:a8:fa:90:a0:5f:47:35:
                    77:01:52:f1:d2:23:70:ed:fb:45:cf:ad:38:44:e0:
                    22:5e:da:5f:a8:79:c7:4c:2b:89:d8:56:92:0a:9c:
                    cd:90:d5:e5:d4:b4:bd:7f:92:e0:50:bb:3d:42:d0:
                    43:92:a7:81:3c:b6:92:42:64:69:7f:e3:af:bd:34:
                    33:fd:39:38:f0:d6:b1:57:5a:dd:a3:3e:d7:9e:13:
                    92:80:e9:41:74:d6:12:b4:e0:63:7c:4b:9b:e1:06:
                    6f:0c:e6:38:cb:19:1e:3c:8e:ae:66:16:a0:dc:11:
                    b1:3e:50:71:c6:04:11:d1:d3:47:82:6e:f9:c3:c5:
                    90:e3:fc:f6:1d:e6:5b:0a:d4:25:c2:d1:0d:35:24:
                    9d:b0:73:45:3e:d7:ed:cb:e3:eb:48:c8:0e:82:34:
                    ec:d9:5b:1c:fd:c7:6a:80:cc:0b:bc:2e:43:9e:6b:
                    16:c7:6b:bd:2f:52:1e:29:7a:9b:2b:f8:a2:a4:37:
                    3a:e1:32:4a:41:0b:70:02:88:46:11:5e:9e:77:48:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:C0:E4:E2:71:D4:76:B7:F1:32:15:68:3A:11:E8:DC:59:6D:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:5f:60:d3:94:21:2a:24:15:a1:f5:00:3d:ce:9b:dd:9f:
         f1:95:a3:6f:1f:41:95:39:02:19:d6:96:d7:09:f5:95:a6:94:
         9f:1e:b8:30:21:61:4c:54:7e:3d:3a:e7:59:8d:8b:cf:36:60:
         81:4b:a5:ae:33:aa:ca:45:29:27:b8:54:84:43:38:da:85:92:
         ce:28:86:6c:33:0d:3a:0e:1b:50:61:14:4b:0c:ef:46:39:6f:
         a8:9a:ff:83:cb:81:cb:e5:bf:e7:57:ff:fa:9e:86:26:5c:8e:
         62:58:4a:14:38:c0:43:a9:a9:fd:89:51:d4:cf:7e:a2:fb:91:
         32:38:8f:ac:b0:00:f5:11:f7:7e:c8:b0:21:0d:e3:b4:c4:9f:
         2f:99:cd:9f:5d:08:1c:23:3d:d0:a4:1d:bc:a8:53:2c:d3:b4:
         8f:c9:92:fc:95:5f:ea:76:3a:76:58:6e:a7:34:f0:67:07:21:
         4b:b9:6b:88:ad:79:2f:f7:bf:ba:17:26:13:11:cd:4b:59:68:
         9d:2f:1c:82:29:a8:be:d8:6f:10:05:ef:d1:be:7a:ea:3c:1c:
         7b:b0:f4:f7:57:ab:c3:7b:34:3c:b3:7e:a4:79:3f:f2:af:cd:
         23:c8:ac:80:e3:ee:64:83:da:5c:cd:51:d1:4d:10:62:fe:7f:
         29:20:18:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:28 2025 by rpki-client