Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          IdlE9x8G1Yq+nL9fN5/kOIKXzqmEam86i7S8ino2QGA=
Subject key identifier:   3E:CD:E6:95:71:28:EB:0A:56:53:45:9B:94:21:67:7F:00:D9:90:D8
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5CE45BA4A5D55D9869D2356AD5DE8BB848351A6A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:17 +0000
ROA not before:           Thu 04 Apr 2024 02:21:17 +0000
ROA not after:            Thu 03 Apr 2025 02:26:17 +0000
asID:                     28368
IP address blocks:        177.200.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e4:5b:a4:a5:d5:5d:98:69:d2:35:6a:d5:de:8b:b8:48:35:1a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:17 2024 GMT
            Not After : Apr  3 02:26:17 2025 GMT
        Subject: CN=3ECDE6957128EB0A5653459B9421677F00D990D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:42:62:c9:af:e6:46:d8:8c:a7:3c:38:07:
                    1a:84:40:5e:7d:b2:c5:ee:a2:e8:70:02:5e:4b:d2:
                    a0:b1:7e:8b:91:0b:a5:34:14:64:98:45:27:7c:11:
                    a2:b0:4d:fb:aa:fb:24:66:24:94:16:2f:c9:fd:89:
                    4a:c1:59:04:fa:87:97:a2:d1:d4:db:47:34:a8:c6:
                    ad:18:63:c5:7f:14:00:a4:84:b4:2a:ed:ee:34:86:
                    a4:f6:46:bb:27:db:43:84:c9:50:16:57:d9:b6:50:
                    4e:70:ef:16:bf:da:5e:4d:ba:94:16:af:1a:4a:94:
                    e9:4a:53:f4:a2:2b:d5:a3:0c:63:5e:c8:49:cf:d5:
                    9a:a4:c2:af:43:b7:46:e3:92:dc:15:26:00:53:5e:
                    59:c0:01:a2:02:80:53:c1:e4:93:1a:da:de:e6:69:
                    46:c7:35:82:b3:d5:6e:c4:ce:7e:05:e0:1c:4c:c2:
                    ba:2e:25:d6:33:3c:1a:4c:06:07:83:e7:52:11:c6:
                    8e:8d:03:c9:73:46:fe:a7:9d:8d:ff:14:f6:aa:d9:
                    f8:c6:5a:6e:c0:13:aa:95:e1:39:3f:1a:d1:ac:a6:
                    7a:1b:aa:6f:a6:87:bf:28:b1:59:45:50:39:4d:fa:
                    04:13:8d:29:98:80:7c:79:e5:3a:94:87:30:c1:7d:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CD:E6:95:71:28:EB:0A:56:53:45:9B:94:21:67:7F:00:D9:90:D8
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:2f:af:52:94:bc:bb:11:50:ad:7b:29:c7:51:6d:50:bb:
         95:62:af:01:f4:4b:79:07:62:d7:9f:cc:5d:88:97:e1:d0:7a:
         04:2c:e6:62:bf:5a:c8:c5:3d:3c:02:f5:fc:86:d5:04:bb:ef:
         c8:a0:f5:53:93:49:64:ca:a7:ce:1f:6e:e1:7e:d6:a6:31:07:
         d4:fb:9f:c6:3f:4c:cb:13:c5:8c:86:42:58:7d:77:3f:12:e6:
         27:0e:64:f8:a6:46:32:ce:ba:d0:b2:37:fc:3d:20:65:25:be:
         5f:29:ca:72:5d:69:b5:a5:ca:a8:ea:31:55:88:19:b3:81:e0:
         87:bf:2b:91:e4:6c:54:4c:23:5a:6a:dc:d1:bc:70:32:50:31:
         71:c9:f2:59:fa:8c:4c:26:06:a3:5d:94:b3:5e:1b:e9:c5:f3:
         fd:7f:9e:91:7f:05:ae:f7:54:60:14:0f:5f:17:ff:a5:5f:f9:
         54:45:83:03:9b:ae:62:02:2a:ee:30:89:7f:25:7d:11:41:73:
         a8:bb:7e:8d:2a:08:c3:30:df:6a:92:06:f6:7f:19:b4:fe:cc:
         af:92:a3:b1:39:4e:a3:14:fb:d6:c6:6e:c0:63:bb:b0:86:3e:
         4f:25:e1:b7:68:a3:24:86:8a:b8:50:81:4c:d6:b9:71:ed:9a:
         13:5a:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org