Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          FQmXFl33P5st/FrruymFg9tcb4SHXPjn+RN7uVeSRDk=
Subject key identifier:   FD:CE:BD:5E:6F:46:FD:F5:25:85:92:C3:A1:0E:54:25:C8:F4:6D:0E
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3FC177D1FBBBF3513131A110A74F114BC9168CE2
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:05 +0000
ROA not before:           Thu 06 Mar 2025 02:37:05 +0000
ROA not after:            Thu 05 Mar 2026 02:42:05 +0000
asID:                     28368
IP address blocks:        177.200.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c1:77:d1:fb:bb:f3:51:31:31:a1:10:a7:4f:11:4b:c9:16:8c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:05 2025 GMT
            Not After : Mar  5 02:42:05 2026 GMT
        Subject: CN=FDCEBD5E6F46FDF5258592C3A10E5425C8F46D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:86:b8:dd:89:6a:14:e2:7c:a4:6f:e5:49:
                    99:a0:e0:c2:8b:a6:37:32:ee:99:58:65:41:80:86:
                    09:17:b9:96:27:f9:fd:46:7a:61:06:2f:69:09:75:
                    41:0b:d9:f5:e8:f5:9e:4c:f2:e9:db:25:27:06:04:
                    42:f3:2f:e2:db:dc:80:b5:ec:9e:ab:8f:c2:e1:f0:
                    a4:14:9a:51:e3:cf:f7:c1:b5:4c:62:2e:b4:05:f9:
                    28:e3:53:a0:0a:0f:7b:c1:d2:f0:cf:57:67:ab:38:
                    b7:b7:d3:7d:27:de:74:7d:35:14:5d:41:9d:44:27:
                    4e:dc:ab:2d:a6:8a:c6:94:90:d8:51:1a:3b:4c:d3:
                    ab:7b:35:68:b1:4d:75:4f:fb:6c:49:25:b9:99:68:
                    23:5a:6e:cf:46:53:d8:3f:dc:6a:a7:e7:bf:fa:cd:
                    af:1b:e7:11:3d:4a:1f:41:37:e5:24:ab:d5:f6:62:
                    2e:bc:49:36:05:a2:9e:6c:b6:ac:18:71:b0:de:38:
                    27:10:d0:a0:a0:f3:f0:12:ce:63:ef:11:3a:03:a3:
                    9d:de:d0:d4:32:5b:ef:05:51:96:1d:86:85:ad:4b:
                    20:7f:be:bb:3f:4a:f5:fb:95:88:ad:63:a4:2f:74:
                    56:8a:00:c7:95:e7:97:a9:d9:41:12:5b:61:cb:45:
                    60:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:BD:5E:6F:46:FD:F5:25:85:92:C3:A1:0E:54:25:C8:F4:6D:0E
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:dc:8f:4d:59:b4:b8:c4:16:c6:63:ba:2e:bd:0f:99:f9:54:
         48:bd:31:53:2e:89:73:e5:db:c2:f3:e9:5e:69:f6:bd:5b:b2:
         0f:f3:ec:b1:35:35:24:96:ae:98:a7:27:f7:24:1a:4a:ed:a5:
         47:c2:86:5e:92:bf:89:df:83:03:09:ee:0e:e1:66:91:04:ee:
         20:7c:85:93:d9:00:a6:cb:66:74:6c:f3:46:8f:11:35:77:30:
         16:45:d2:bc:e5:86:71:e1:03:e2:b1:b0:27:49:92:8b:77:8f:
         61:5b:a9:71:fb:9c:96:82:dd:8e:99:47:25:f1:de:d4:ce:95:
         65:f6:bf:93:c4:4f:cb:b2:b5:45:77:63:13:f9:49:b5:4b:0b:
         6a:ad:06:d8:c3:e9:0b:70:a6:42:40:81:c1:36:67:e9:07:bc:
         67:20:21:f5:38:15:4b:66:1e:4b:65:31:eb:b8:f9:8b:2b:d6:
         96:70:dc:16:64:0a:76:3e:0b:b0:9a:e9:f1:27:37:61:e1:fb:
         02:05:e9:37:ea:ff:4c:ea:50:aa:a6:28:47:3b:b2:e9:5e:e1:
         ea:87:e7:ef:56:8d:14:a3:6f:92:e9:3a:a2:ea:b2:29:ea:35:
         54:4c:c1:8f:c7:db:42:80:e6:34:ce:11:a9:07:1a:ee:5d:51:
         09:a3:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:57 2025 by rpki-client