Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa
File:                     3137372e3230302e39322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          AkYmf2WZ91rY5Zz1ez1V277sTeewc5bufIedNgeX7CI=
Subject key identifier:   51:8C:8A:A5:DE:83:F3:EA:AD:08:DA:D5:C5:24:10:79:7A:6C:0E:35
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       268FCC00C2E0B4A0797D2C8CE90B8E4F383807BC
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:08 +0000
ROA not before:           Thu 04 Apr 2024 02:21:08 +0000
ROA not after:            Thu 03 Apr 2025 02:26:08 +0000
asID:                     28368
IP address blocks:        177.200.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8f:cc:00:c2:e0:b4:a0:79:7d:2c:8c:e9:0b:8e:4f:38:38:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:08 2024 GMT
            Not After : Apr  3 02:26:08 2025 GMT
        Subject: CN=518C8AA5DE83F3EAAD08DAD5C52410797A6C0E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:95:a7:fb:06:ba:f9:7b:fd:88:4a:f7:14:
                    87:81:5d:ce:3e:7d:ba:6b:71:3e:64:15:01:e5:fb:
                    73:78:ac:09:27:fc:a0:c1:09:21:14:2b:87:9d:41:
                    19:3c:e2:d9:1e:33:e4:0e:a8:69:f6:19:d8:af:41:
                    e3:d7:94:1f:59:92:53:03:87:c5:e2:57:13:39:3f:
                    db:05:23:a0:12:75:bf:81:54:b0:9a:0e:db:a4:ae:
                    37:dd:73:86:ce:b7:d0:45:4e:36:ff:65:05:0c:b5:
                    d9:07:e0:f1:31:4b:86:b5:0c:e9:8f:4a:19:11:82:
                    c9:54:e8:37:a2:49:fa:58:a5:39:70:9e:42:5f:c4:
                    88:25:c9:1f:ec:b7:ad:8d:e1:38:eb:45:73:e5:f2:
                    59:97:77:1c:5c:e3:4b:03:9a:3c:bb:70:25:74:e5:
                    16:39:01:e8:f1:b3:a8:3e:d3:fe:1c:e7:18:7c:46:
                    28:34:fa:73:93:9f:56:ef:fa:a9:15:6e:1a:55:2f:
                    74:97:6a:80:4f:05:14:ba:7b:67:9b:e4:34:69:ef:
                    e5:44:65:88:36:a6:38:d5:ab:2b:18:39:6f:26:4e:
                    8f:83:ed:9e:82:38:ab:50:f6:11:31:27:eb:c1:ce:
                    8a:1d:d4:7d:47:d6:77:5a:a0:4b:8a:71:60:db:10:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8C:8A:A5:DE:83:F3:EA:AD:08:DA:D5:C5:24:10:79:7A:6C:0E:35
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:db:19:9a:43:0f:f3:ac:17:c6:71:4f:77:d9:39:44:fd:
         e6:d7:c3:9b:d3:96:cb:9d:af:57:7c:58:cc:95:3d:54:a4:6f:
         d1:92:e0:69:e9:c9:c0:42:d1:96:d3:35:23:70:dd:01:88:d1:
         3a:4a:59:21:4d:9a:1d:e5:3d:63:4a:92:6e:44:38:1d:98:c0:
         97:2a:2a:f7:86:59:32:0b:10:96:62:f8:76:6d:ef:70:08:7d:
         9e:95:39:96:99:05:6f:e6:42:62:56:96:b6:08:fd:ca:39:85:
         0d:05:48:b7:97:70:e7:e3:98:9b:86:9f:a0:fa:38:de:9d:a7:
         fc:9e:d5:b7:3c:07:50:0a:f4:b3:5b:9b:2d:5e:e9:9c:29:d8:
         b1:b5:37:24:a8:72:cc:f3:ce:56:0f:e9:7b:b7:4f:82:3d:2d:
         5b:3b:ed:1a:b9:ff:46:b6:f2:a1:ee:d2:75:06:85:f9:47:2f:
         09:d1:b0:ff:0a:14:44:c6:5b:98:4e:ec:5d:07:cb:38:d8:73:
         ab:75:7c:92:84:19:b3:ab:9f:40:43:bd:bc:e9:ee:09:d7:fa:
         06:37:2b:53:3f:6f:27:23:9a:45:09:4f:8d:7f:c7:bc:38:db:
         09:1b:0a:92:22:16:3d:27:0b:32:e2:55:11:1f:8c:a3:a2:59:
         ca:5a:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org