Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          mog7kAhvP7bezuQZ44qoc4mPdqfRMhmsV0hEeroLWPs=
Subject key identifier:   42:C4:6A:AE:B7:73:6A:CA:54:24:7E:83:51:E1:FE:DD:F8:1B:57:C2
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       48FAF4E0E8D41FE7CEF5AC54C33D1D07F459C976
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        177.200.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fa:f4:e0:e8:d4:1f:e7:ce:f5:ac:54:c3:3d:1d:07:f4:59:c9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=42C46AAEB7736ACA54247E8351E1FEDDF81B57C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:99:5c:cf:1c:46:7f:d5:b6:ef:25:6f:fd:
                    40:62:0b:98:e5:17:be:e2:44:de:0d:f2:b8:b2:5a:
                    c4:19:57:e1:4a:89:66:45:05:76:39:9f:6a:1e:ac:
                    53:b7:bf:72:99:2c:c7:4d:44:9c:a1:17:74:c8:d5:
                    32:35:85:90:ca:9b:11:c4:f8:b7:d3:0c:7e:2e:23:
                    00:3d:aa:f6:ce:37:f0:34:06:b6:33:36:2e:8b:34:
                    85:01:a8:6c:d3:32:ef:b1:be:7f:b2:8a:d6:3a:02:
                    38:c5:c2:8a:88:b1:37:ef:38:08:53:d1:bc:08:a3:
                    78:ad:27:24:1e:27:05:a7:c9:27:05:be:e7:eb:98:
                    b0:c6:35:c1:44:88:c7:6b:a0:60:9f:05:ef:8c:2e:
                    84:31:9a:fe:84:cd:d9:96:e7:e2:69:58:cb:0b:75:
                    6b:9b:76:ba:09:87:8e:40:e1:3b:86:71:d5:d9:07:
                    7f:52:61:71:c8:0e:09:a1:d9:d7:51:c4:87:62:b7:
                    b5:cb:8b:17:7f:da:9f:12:50:8e:60:db:60:30:4b:
                    2a:ec:5a:29:43:62:aa:4f:b3:d1:28:f4:aa:10:9a:
                    b7:0d:da:ee:c0:3b:c7:df:2a:64:2c:36:ef:2f:23:
                    b0:2a:6e:84:94:11:3c:b2:bd:e8:9d:c6:12:01:79:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C4:6A:AE:B7:73:6A:CA:54:24:7E:83:51:E1:FE:DD:F8:1B:57:C2
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:08:c4:42:7a:95:eb:e7:cd:0d:4d:4b:86:5c:d0:3a:ec:32:
         e3:6a:5c:ae:fa:ee:b4:5a:63:de:6a:e8:26:02:04:21:95:58:
         92:3b:52:cf:ec:f6:d1:67:85:da:c3:9f:48:61:b2:45:b2:e6:
         65:96:af:38:d1:fc:86:16:99:61:13:2b:5e:74:b3:2c:2c:1d:
         e2:3f:81:20:dd:94:7e:8b:b7:16:11:4d:29:e7:2f:82:0d:22:
         5b:cf:73:39:34:e8:59:97:72:be:3c:5c:20:5f:da:19:1b:f7:
         5c:c7:1e:dd:3b:8b:e9:89:53:67:9d:87:92:95:2e:bb:e7:bc:
         39:51:4f:65:d1:c7:bc:45:2a:eb:f8:5a:51:85:7b:47:70:2f:
         45:86:91:a4:dd:1a:01:d0:40:19:07:b2:8b:a2:83:c9:5e:cd:
         2e:17:68:9e:ff:eb:fc:1e:98:4b:07:27:bf:88:be:7a:76:77:
         cf:7b:a1:a2:64:7f:ca:d3:a6:a5:9b:06:bc:bc:1f:2e:4c:56:
         5b:f0:0d:2c:44:92:ea:ef:d7:9f:16:96:72:39:24:87:e7:fd:
         b9:b6:de:9d:6a:4c:8b:34:4d:14:57:59:0c:11:e5:4f:ef:03:
         9b:f1:1d:96:aa:e3:7e:7c:ee:75:62:25:c7:d5:67:50:89:27:
         87:0f:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:20 2025 by rpki-client