Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          IPahAsxmD6RlGaAw6njnN3ZXbVc84e0cGf5vfK27/nM=
Subject key identifier:   EA:57:6F:D4:F3:B7:62:6A:03:F0:73:26:21:AB:CE:8B:22:A8:39:45
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       471DDE73DE60C2005A5A51B3745BF56AF2C269A9
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:10 +0000
ROA not before:           Thu 04 Apr 2024 02:21:10 +0000
ROA not after:            Thu 03 Apr 2025 02:26:10 +0000
asID:                     28368
IP address blocks:        177.200.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:de:73:de:60:c2:00:5a:5a:51:b3:74:5b:f5:6a:f2:c2:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:10 2024 GMT
            Not After : Apr  3 02:26:10 2025 GMT
        Subject: CN=EA576FD4F3B7626A03F0732621ABCE8B22A83945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:b0:b2:15:4c:a5:9d:d9:23:ec:0f:14:ac:
                    94:3b:3e:47:36:b2:44:66:78:e5:06:b7:c7:9d:7d:
                    2e:89:6f:fa:55:18:6b:b3:6a:fd:f9:41:dc:ae:cc:
                    6f:ac:9b:f3:db:ac:60:4e:13:14:5e:05:12:0b:6f:
                    ea:10:6e:bf:09:3e:ea:54:06:e9:d2:a0:62:9e:55:
                    ec:4a:39:08:42:2c:81:03:be:ed:4f:29:a2:ff:12:
                    e0:73:9f:39:85:66:5e:ee:01:08:72:13:af:3a:dd:
                    1d:af:b0:61:1d:6c:ea:c4:30:73:71:fb:06:e3:ef:
                    31:d5:4d:a5:bd:ab:11:62:20:3a:9e:c7:3a:c0:91:
                    5a:3d:26:64:28:a3:10:30:0e:25:28:0d:21:50:79:
                    89:c0:5d:3b:20:26:31:7f:11:08:ad:2d:22:9a:3a:
                    e8:df:4e:14:62:b5:a3:e9:1d:71:78:02:f6:b1:3e:
                    80:ff:96:ba:d1:6a:36:b3:e1:7e:e1:42:5f:21:01:
                    8b:40:21:22:59:46:c7:d3:52:50:c3:95:de:c5:d4:
                    13:46:15:77:92:11:98:56:3f:c5:c3:64:c2:b6:4f:
                    42:04:89:ee:78:28:0a:62:ba:e0:2c:19:72:83:b2:
                    5a:42:7a:9c:3d:df:2f:86:96:da:55:80:7e:02:36:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:57:6F:D4:F3:B7:62:6A:03:F0:73:26:21:AB:CE:8B:22:A8:39:45
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:a9:64:70:cc:59:e1:11:8d:9c:f0:04:d3:b8:e4:7c:16:
         f6:2a:09:35:3e:78:57:23:38:88:bd:b1:86:d2:2e:17:bc:90:
         0c:1b:bd:45:6e:b7:dd:21:39:7d:bc:a0:e9:d7:83:8b:14:bc:
         2a:f8:49:60:f2:0f:91:3e:b4:a0:fb:02:2a:10:e1:00:b0:ee:
         d8:67:34:3c:33:53:6b:8b:9d:eb:84:7b:65:a0:2f:b2:c6:36:
         4e:04:c2:5c:51:f7:9b:2e:46:07:3e:59:7d:c5:90:a5:90:ce:
         15:02:83:f7:b6:20:4f:df:55:c2:6b:73:b5:63:82:41:76:4d:
         1a:e8:9e:1c:41:f0:47:35:89:ba:56:a6:2d:2a:a0:66:6e:35:
         dd:e3:e4:2a:4e:6f:d7:72:26:85:89:67:ca:a6:3a:9c:ca:70:
         90:74:b1:21:8b:c6:3f:b3:79:94:3c:70:21:09:d8:d3:75:d3:
         de:fa:a6:b8:02:39:44:97:53:09:0a:48:9e:f1:0d:52:d0:e7:
         23:17:ec:f6:76:ae:80:eb:e7:9d:0e:bf:df:68:a5:36:49:a1:
         ec:cb:72:de:74:fb:5e:12:b0:9e:90:d8:0a:ab:c6:d4:96:d0:
         de:ca:1a:67:49:75:06:43:7e:ce:aa:dd:82:f2:4b:ed:b7:c2:
         b3:40:cf:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURx3ec95gwgBaWlGzdFv1avLCaakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMTBaFw0yNTA0MDMwMjI2MTBaMDMxMTAvBgNV
BAMTKEVBNTc2RkQ0RjNCNzYyNkEwM0YwNzMyNjIxQUJDRThCMjJBODM5NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeibCyFUylndkj7A8UrJQ7Pkc2
skRmeOUGt8edfS6Jb/pVGGuzav35QdyuzG+sm/PbrGBOExReBRILb+oQbr8JPupU
BunSoGKeVexKOQhCLIEDvu1PKaL/EuBznzmFZl7uAQhyE6863R2vsGEdbOrEMHNx
+wbj7zHVTaW9qxFiIDqexzrAkVo9JmQooxAwDiUoDSFQeYnAXTsgJjF/EQitLSKa
OujfThRitaPpHXF4AvaxPoD/lrrRajaz4X7hQl8hAYtAISJZRsfTUlDDld7F1BNG
FXeSEZhWP8XDZMK2T0IEie54KApiuuAsGXKDslpCepw93y+GltpVgH4CNgijAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6ldv1PO3YmoD8HMmIavOiyKoOUUwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzNzM3MmUzMjMwMzAyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBschWMA0GCSqGSIb3DQEBCwUAA4IBAQBmeqlkcMxZ
4RGNnPAE07jkfBb2Kgk1PnhXIziIvbGG0i4XvJAMG71FbrfdITl9vKDp14OLFLwq
+Elg8g+RPrSg+wIqEOEAsO7YZzQ8M1Nri53rhHtloC+yxjZOBMJcUfebLkYHPll9
xZClkM4VAoP3tiBP31XCa3O1Y4JBdk0a6J4cQfBHNYm6VqYtKqBmbjXd4+QqTm/X
ciaFiWfKpjqcynCQdLEhi8Y/s3mUPHAhCdjTddPe+qa4AjlEl1MJCkie8Q1S0Ocj
F+z2dq6A6+edDr/faKU2SaHsy3LedPteErCekNgKq8bUltDeyhpnSXUGQ37Oqt2C
8kvtt8KzQM8R
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org