Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32322d3232203d3e203238333638.roa
File:                     3137372e3230302e38382e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          2Y54Ad0LUqKGLRDo0mw4QQlHZDYvYEHStNsaQo3j5K8=
Subject key identifier:   A6:9A:FE:0B:F2:78:EB:67:DF:CB:5C:D5:08:E6:0F:F0:51:D4:5C:4D
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       035EA2772F5626DEEDF8A3CEB998EEA90F1AEB7C
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:55 +0000
ROA not before:           Thu 06 Mar 2025 02:36:55 +0000
ROA not after:            Thu 05 Mar 2026 02:41:55 +0000
asID:                     28368
IP address blocks:        177.200.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:a2:77:2f:56:26:de:ed:f8:a3:ce:b9:98:ee:a9:0f:1a:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:55 2025 GMT
            Not After : Mar  5 02:41:55 2026 GMT
        Subject: CN=A69AFE0BF278EB67DFCB5CD508E60FF051D45C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:34:11:17:f1:a8:c6:04:cb:a9:3e:17:70:
                    b7:6a:18:db:f2:48:0b:d5:23:75:7f:6f:db:ab:15:
                    16:5e:66:84:3e:0d:1a:c5:db:e8:2b:11:1b:39:b8:
                    11:9d:8e:c8:a2:28:66:f6:f0:fe:3f:34:6a:bd:5b:
                    bb:ea:8a:c6:1d:ef:0f:5b:b9:7a:22:ad:db:ab:8b:
                    fe:c3:13:af:bc:2e:40:11:a6:0f:98:a2:0d:54:3a:
                    3f:a5:78:47:46:74:f3:15:10:13:d2:79:79:3f:8a:
                    4e:d0:aa:2c:e5:54:57:4d:1d:1f:e2:09:8c:2a:58:
                    d4:a3:eb:5d:db:22:5b:31:21:1f:19:d7:22:1d:23:
                    d8:dd:9d:d6:40:37:32:8d:53:88:d6:2c:2e:25:25:
                    54:e5:27:49:7b:9d:27:af:3b:27:86:f2:97:5d:e6:
                    0e:7c:7f:0e:97:61:59:7f:52:2d:32:14:13:1b:69:
                    33:7f:19:d3:c6:9e:25:c5:14:f3:46:78:8f:c3:54:
                    97:52:d7:40:0f:78:91:b1:08:2a:ed:87:7f:cf:06:
                    e4:bb:b7:1b:c2:76:0a:3d:08:e8:4f:a7:81:70:f3:
                    6f:e4:c5:3a:b5:27:93:2a:ab:3f:6c:6b:3a:09:52:
                    0e:51:15:5a:25:28:f4:91:d8:2d:bf:12:82:8a:43:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:FE:0B:F2:78:EB:67:DF:CB:5C:D5:08:E6:0F:F0:51:D4:5C:4D
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:2a:f9:cb:ca:af:67:02:25:9d:24:bd:04:88:29:72:ee:
         2f:7a:1c:e4:61:b4:38:94:95:d3:69:89:b8:3f:1a:bb:44:05:
         00:b1:d8:db:d6:d2:ed:04:6b:65:16:34:82:4e:96:4c:2a:2e:
         2e:18:90:ad:24:3e:09:4c:c4:ac:e4:f1:21:b6:aa:f7:54:d0:
         15:98:7c:77:43:5c:34:66:8e:80:d4:03:db:8a:4d:d6:eb:6e:
         16:78:2c:77:c8:40:4a:d4:a6:a4:d3:bb:c3:c2:97:2e:f8:78:
         e9:cb:79:25:63:06:98:64:13:22:30:f7:8b:ce:99:d0:5c:6b:
         f2:e8:00:d7:a6:66:53:dd:39:14:12:dd:27:de:14:55:9a:18:
         e3:6f:65:0a:18:63:3c:fa:09:e6:5f:bc:f4:c6:e1:cc:2d:60:
         8e:be:0e:6b:42:63:e7:d7:8d:c9:44:16:49:9c:73:85:df:f6:
         af:45:03:35:5e:26:45:c5:a8:1d:58:c7:f5:d2:b1:da:fe:d6:
         8a:c2:d0:64:a4:5e:c9:92:58:f3:b5:01:b8:51:29:71:92:9c:
         f8:99:e8:bc:88:eb:a7:00:ea:f1:f9:fb:83:c3:b9:aa:df:9e:
         bd:ea:10:41:c8:6d:da:9e:a9:9b:ba:bc:e6:cb:99:8d:9c:a9:
         c6:29:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:04:38 2025 by rpki-client