Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa
File:                     3137372e3230302e38352e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          s6Mslk65iyuazvl3qIvH/yHN3TpVRQZZCc5yWtPOo1Q=
Subject key identifier:   DA:F7:E1:9D:6D:5A:DB:CF:EA:09:52:31:8C:92:76:EF:6E:80:80:42
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0C122952FB18E71274875CA9512038FB7AADEB71
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        177.200.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:12:29:52:fb:18:e7:12:74:87:5c:a9:51:20:38:fb:7a:ad:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=DAF7E19D6D5ADBCFEA0952318C9276EF6E808042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:5b:e7:0b:66:0d:51:ac:cf:1f:98:92:b7:
                    c9:ac:46:da:21:9d:4a:67:ec:a1:35:8a:df:82:4e:
                    22:4e:09:86:77:5a:5e:58:28:ac:9a:e1:ef:c0:2b:
                    9e:19:01:43:24:d8:8b:fc:f8:c8:02:d5:3d:a0:c6:
                    f7:e1:86:7e:f4:91:f3:69:65:9b:ad:f0:eb:33:ff:
                    d1:51:77:e9:14:74:11:71:fa:f4:0f:f4:d2:6a:11:
                    58:94:4a:e6:07:77:44:dc:f2:e9:85:79:80:ae:f2:
                    d6:32:58:a9:fb:b9:04:bc:75:29:f2:fc:af:7d:95:
                    1d:9b:83:e4:7c:78:78:91:ca:ec:01:48:d6:0b:2e:
                    44:43:e1:b7:b0:0e:0c:9d:85:94:97:c4:c7:0e:0c:
                    96:71:35:08:d8:71:3c:bd:a1:57:3b:c3:4b:a0:de:
                    d6:be:1d:1b:d5:74:3a:fe:c0:f5:4e:f7:ce:68:a5:
                    a2:f0:44:f3:65:34:a9:7a:43:67:4b:10:53:77:b5:
                    da:c1:58:3f:7f:af:7a:68:8b:b1:e8:7e:eb:02:a7:
                    2a:26:9f:4b:0f:22:34:ca:b1:92:4f:cd:83:32:9e:
                    26:7c:bc:79:ac:f4:f9:85:e7:76:19:f2:90:83:6e:
                    74:fe:a9:c8:85:e6:1f:be:bd:d1:7d:75:8b:1c:18:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:E1:9D:6D:5A:DB:CF:EA:09:52:31:8C:92:76:EF:6E:80:80:42
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:a0:09:86:5e:10:c1:9e:33:d7:f3:13:9f:1a:d1:39:64:
         92:69:ab:c0:fa:c8:36:7f:2b:1b:90:9b:6b:88:96:c7:2c:95:
         6a:37:ca:08:7f:df:19:ed:70:b7:55:48:16:6d:1d:df:c9:06:
         2b:98:53:4b:8b:6e:53:5f:65:5e:5f:32:3e:21:c5:ea:a1:07:
         ca:3b:05:4c:93:e7:eb:e4:a2:b1:37:0d:31:65:3d:5a:04:fd:
         b4:42:ef:f0:5f:24:d3:16:4d:6b:f3:dd:3b:20:bc:b7:89:b6:
         d8:2a:8b:bf:37:83:ee:f4:cc:f0:2b:4a:ee:fd:27:b6:85:39:
         2e:e6:80:e4:39:1d:11:e1:c9:f6:4e:11:db:74:d6:7e:75:60:
         b7:62:4a:83:39:93:db:be:ed:af:f3:8d:15:9c:06:00:0c:15:
         15:ae:d6:a1:d7:20:aa:fa:1d:1a:76:f2:67:c2:fe:f3:af:9d:
         56:fd:9f:58:aa:8d:f4:e9:a2:bc:1a:b2:e1:9b:0d:3f:7d:e4:
         fd:40:8b:46:81:85:dd:95:75:23:33:64:86:9d:2c:98:70:9f:
         a7:7f:34:7c:0a:6e:30:5d:9c:04:a3:32:3f:e0:d7:84:e5:fe:
         b9:67:08:db:05:e8:07:67:2c:d1:2d:55:59:97:04:95:b0:3c:
         d9:1e:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org