Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          6lgNHQj3FQhsBOn22FQHHpd2wVTDpBw40r2vkXoZeGY=
Subject key identifier:   99:0B:66:87:A2:F9:D1:0E:FE:E0:9C:DB:8A:34:FA:D1:04:4B:93:A5
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1D4F39B0984FDDD11D920B0B30DB977979F02452
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:17 +0000
ROA not before:           Thu 04 Apr 2024 02:21:17 +0000
ROA not after:            Thu 03 Apr 2025 02:26:17 +0000
asID:                     28368
IP address blocks:        177.200.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4f:39:b0:98:4f:dd:d1:1d:92:0b:0b:30:db:97:79:79:f0:24:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:17 2024 GMT
            Not After : Apr  3 02:26:17 2025 GMT
        Subject: CN=990B6687A2F9D10EFEE09CDB8A34FAD1044B93A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:14:38:92:90:39:57:4f:ae:f9:c1:b1:96:
                    fe:5d:b3:7e:3b:61:bb:f7:33:3f:89:58:58:a8:bc:
                    de:32:f7:d2:b3:f5:3e:c2:c6:32:bf:01:be:16:17:
                    14:01:63:8e:c4:f5:74:bd:12:99:a7:ef:e0:b1:25:
                    7c:8d:d8:64:5f:42:72:5d:30:10:db:16:eb:68:4e:
                    29:ae:ef:f9:6f:f2:ee:1e:d2:2c:f1:95:05:98:78:
                    c0:9c:aa:c0:dd:98:73:6b:93:97:ab:38:79:01:89:
                    a7:ce:e6:d5:8b:ac:82:e0:97:ab:f2:70:69:48:c0:
                    4d:dc:b1:a5:8f:e0:7e:21:27:23:96:94:c3:65:10:
                    a9:f0:6f:58:55:0d:be:a2:28:cb:97:00:db:1a:ef:
                    8f:07:59:fa:70:4b:16:f2:6e:6f:9e:80:f9:25:45:
                    35:17:e2:9a:6b:f0:a2:a8:fa:b3:91:97:60:13:c9:
                    42:97:bc:af:a1:c4:e7:d0:83:8b:04:65:7e:3b:45:
                    85:8e:fc:85:d6:96:17:3f:2b:4b:76:bb:d5:9d:67:
                    9d:9f:dd:57:8d:58:a8:a3:05:65:db:17:4a:00:37:
                    51:6e:f9:e8:44:2a:8a:3c:44:ae:29:13:1f:66:fc:
                    a7:1b:80:50:e9:60:c9:6a:59:3f:46:b2:09:74:94:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:66:87:A2:F9:D1:0E:FE:E0:9C:DB:8A:34:FA:D1:04:4B:93:A5
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:b3:12:db:c4:22:fe:7d:0a:ce:ed:37:13:5f:6f:64:5c:
         0f:30:b1:73:e4:a1:c9:00:e5:dc:27:28:56:c8:95:20:6e:17:
         50:2a:ba:9f:7f:5a:9f:a8:2c:c2:35:26:39:86:1f:4f:3e:5d:
         60:ae:6b:ab:8b:ff:5f:5b:87:be:a5:f9:46:b2:b6:dc:9e:3e:
         47:14:96:72:4d:8b:d8:c5:22:97:00:89:be:5a:8c:8f:99:12:
         c8:31:7a:46:aa:54:4e:78:d7:fb:ab:0b:bb:d4:0f:6b:52:91:
         ce:0e:b3:b1:aa:e8:49:fd:ba:72:80:3b:f2:bc:14:9a:27:f7:
         c7:e5:5d:83:be:bf:54:87:9f:16:95:52:2e:f9:c0:44:e0:d6:
         f4:80:e3:87:43:44:6f:18:ca:5c:38:44:a4:c3:68:2e:91:e1:
         37:b7:80:b0:2b:38:c3:74:20:16:da:6c:d8:be:40:a5:ae:3f:
         b0:e8:f0:0d:97:24:c2:86:57:5a:09:3a:37:df:52:26:9b:c1:
         23:ec:53:d7:26:67:97:e1:c2:11:01:56:86:f7:c1:78:6b:a4:
         0c:f1:ab:68:42:f8:09:ce:97:db:a9:97:3d:85:f0:11:f9:93:
         97:c7:db:57:ea:a8:da:24:7a:90:02:b7:2c:7e:c3:b5:3e:d7:
         2a:17:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org