Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39302e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e39302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          Hk+Jriw4jAoxCffZ0o4aNfjWt0sXxuqXAist3dd5YCo=
Subject key identifier:   CF:6A:F2:17:83:85:14:D8:60:53:71:B4:8A:BD:2C:D3:10:55:A1:06
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2F3D4E89A83127112D214403CC9E04680ACE3E44
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:51 +0000
ROA not before:           Thu 06 Mar 2025 02:36:51 +0000
ROA not after:            Thu 05 Mar 2026 02:41:51 +0000
asID:                     28368
IP address blocks:        177.200.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:4e:89:a8:31:27:11:2d:21:44:03:cc:9e:04:68:0a:ce:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:51 2025 GMT
            Not After : Mar  5 02:41:51 2026 GMT
        Subject: CN=CF6AF217838514D8605371B48ABD2CD31055A106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:6e:85:99:52:1e:0c:0f:39:f4:2d:f1:67:
                    a3:21:e3:43:17:b4:96:a4:56:17:d2:0b:9d:cb:08:
                    55:77:bd:ea:e9:ca:7e:65:98:d6:29:47:ac:13:c7:
                    b4:ff:21:a8:f8:5a:30:82:3a:8e:20:f5:74:1b:17:
                    a0:da:ca:c2:ae:60:c3:74:fd:43:f0:b6:d1:4a:34:
                    91:52:0a:cb:12:8d:ef:ba:f1:18:31:89:6e:69:c8:
                    d2:a8:60:0a:5b:03:aa:31:68:7f:08:2c:b6:28:3c:
                    99:f2:d5:ce:45:eb:c1:af:78:03:54:c3:e5:c1:c3:
                    6a:6c:2c:90:8c:be:de:31:1d:32:2e:1e:b7:1e:db:
                    5b:ea:fe:9b:71:bc:65:ae:fd:2b:88:33:d7:62:9d:
                    89:2a:71:05:0a:3b:a2:24:ca:cb:d5:22:9a:8f:3f:
                    ca:1e:81:fb:e6:1e:54:78:e0:5e:4c:26:fd:8c:28:
                    da:43:26:d1:67:a7:98:ce:b4:2c:a8:8c:3c:71:2f:
                    f1:2c:e7:cc:de:01:e6:a5:2c:50:6a:9b:15:cc:f4:
                    e2:08:ac:d1:e0:28:8a:50:2f:37:7e:eb:72:b2:fa:
                    34:e1:d8:69:c0:77:9f:98:3f:92:9f:82:9a:07:7c:
                    d3:5d:a7:f3:6e:f9:9d:eb:90:11:7a:df:d1:bc:9e:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:F2:17:83:85:14:D8:60:53:71:B4:8A:BD:2C:D3:10:55:A1:06
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:37:11:ae:b5:59:4d:d4:f7:96:9a:9b:c7:30:06:9e:93:68:
         d9:ea:4e:ab:96:3c:3b:53:d1:93:38:6f:af:cf:61:67:fa:c2:
         05:cd:7f:6c:cf:79:68:57:f6:0d:4d:6f:bd:1f:32:60:8a:34:
         01:9c:8e:e4:b1:4c:28:5f:e9:11:49:f8:be:46:e2:4d:de:8f:
         42:87:bc:fd:1a:12:ef:5a:70:02:5a:fa:ba:d0:5e:19:c0:ba:
         ce:9a:9a:01:fa:5b:62:a1:93:60:e1:c4:67:07:1c:13:29:bb:
         81:b7:d1:c9:49:dc:0f:d1:c2:bd:5b:ef:7c:0f:41:db:1d:38:
         d8:3b:40:d5:14:30:cb:0c:5f:78:a9:9f:6f:22:70:e5:ab:79:
         70:f3:a2:e7:72:db:97:5f:8a:c7:9e:d9:bf:5d:e8:30:69:88:
         38:26:69:c5:e7:bc:69:05:b7:99:fa:a7:66:0d:23:e1:c3:e2:
         cf:e4:ce:0b:54:ba:33:d5:cf:b6:7f:57:41:20:64:49:9a:a5:
         7b:f8:38:90:b0:57:b0:c8:f9:31:14:7e:b6:72:2b:cd:a6:0e:
         f2:5a:fb:75:27:72:8b:bb:c6:5e:48:bf:18:ed:67:61:bd:45:
         cd:db:d8:b2:05:b7:7d:5c:cc:09:3c:f6:6d:14:01:1c:30:fe:
         b8:74:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:05:47 2025 by rpki-client