Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32322d3232203d3e203238333638.roa
File:                     3137372e3230302e38342e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          XJ3FxkcX5SDe3tKE5S9FRwyCF9EvKBx/Qexe+rtTtO8=
Subject key identifier:   D0:B3:EB:28:19:EE:E0:8A:02:19:6D:9C:B1:67:8F:E9:9A:C5:78:75
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7BEA5CFF541F2ACD0B97C20B1CEB9D2E1F8ECD51
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:12 +0000
ROA not before:           Thu 04 Apr 2024 02:21:12 +0000
ROA not after:            Thu 03 Apr 2025 02:26:12 +0000
asID:                     28368
IP address blocks:        177.200.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ea:5c:ff:54:1f:2a:cd:0b:97:c2:0b:1c:eb:9d:2e:1f:8e:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:12 2024 GMT
            Not After : Apr  3 02:26:12 2025 GMT
        Subject: CN=D0B3EB2819EEE08A02196D9CB1678FE99AC57875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:28:09:8e:97:d8:f6:72:b4:bb:2f:89:b4:
                    d4:9f:8e:f4:42:57:c8:18:40:b4:cd:b0:a2:91:e8:
                    83:6e:44:e0:30:59:b8:35:7a:eb:1d:25:72:c1:02:
                    b6:57:c9:77:e5:6f:7e:67:f2:f2:35:64:cc:f0:6d:
                    e7:5f:71:3e:55:1a:64:38:43:8f:18:f4:de:32:00:
                    18:b2:f3:22:df:04:bb:42:a5:77:cd:66:ba:9c:ab:
                    f8:e1:68:25:2c:b7:01:d3:56:cb:8e:f2:7d:2b:d4:
                    34:f7:b2:ae:06:45:22:de:12:db:a6:ce:06:77:de:
                    54:d3:b8:27:b4:8b:d8:47:08:b9:7d:42:dd:0e:56:
                    b6:a0:01:c7:7e:35:e2:94:2d:e2:d4:3d:f3:09:1f:
                    3b:c2:8f:61:c2:89:b6:ea:e0:38:4b:21:85:e7:e6:
                    89:21:20:fd:b8:a1:e3:3f:e4:6d:c2:a7:50:1d:85:
                    28:f6:52:dd:33:52:03:d9:63:5f:5d:d7:1c:e2:cc:
                    a0:32:33:d4:d2:fb:f3:bd:68:ce:1b:70:b4:0e:a3:
                    4b:0b:73:6e:c1:5d:2e:08:11:21:ec:56:26:0e:b0:
                    f0:62:8a:00:c3:d8:90:f5:b0:c3:2e:56:ab:22:df:
                    69:b6:6b:e9:6c:36:54:1f:4c:0f:ac:f1:84:9c:f4:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B3:EB:28:19:EE:E0:8A:02:19:6D:9C:B1:67:8F:E9:9A:C5:78:75
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:bd:15:9f:96:bb:af:ff:a4:42:f2:68:23:7e:b2:42:a5:
         d8:0c:a7:9c:a5:8f:3b:b5:ae:2c:b9:90:d8:d3:e3:a9:d6:1d:
         8c:cc:e9:2f:47:92:50:e7:88:91:17:c2:f6:4c:0f:dd:9c:90:
         6e:4d:99:a8:dd:94:87:98:4e:3e:61:7d:3a:6a:c1:1e:eb:0b:
         f1:b1:ee:da:32:7c:cf:5c:95:2d:ed:af:9d:c9:99:5f:cf:d1:
         6e:77:ec:61:26:99:f3:28:ce:66:6f:c8:3c:a3:59:c4:72:0a:
         4c:24:ae:a7:33:35:8b:6f:16:61:0e:19:d9:cb:9d:87:69:9b:
         bb:3f:31:b5:d3:94:6b:48:d3:53:6b:df:af:b4:97:60:cb:d7:
         de:2e:58:a9:34:5d:4e:b4:fd:b8:f0:4c:fa:c2:25:cb:1b:2e:
         04:53:f7:a6:dc:47:2f:64:ad:2f:c9:97:18:18:b1:34:1a:8f:
         d9:cc:27:a3:42:d5:8f:0f:5b:07:9c:06:8e:01:f6:e7:33:5e:
         6b:a2:46:73:05:38:4f:f3:9f:53:b6:98:3e:b8:19:72:e8:2d:
         9c:bc:03:c2:f6:66:2c:c7:a9:e4:b2:bc:4d:03:61:0d:6f:15:
         46:5a:8f:31:cc:a7:43:6c:de:d2:4a:ea:4a:3e:24:e8:65:ca:
         76:f8:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org