Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa
File:                     3137372e3230302e39322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          gYVe4UMkVCbavhh/E/GLKZoyh8o8dL7P/rZhdaUiBuo=
Subject key identifier:   15:9D:11:B6:B8:C4:0F:49:D8:D7:32:F8:B2:69:10:5D:65:A2:E5:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       411B47FF0D6ACC1B7E6D36994D1483AE3E492C3F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        177.200.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:47:ff:0d:6a:cc:1b:7e:6d:36:99:4d:14:83:ae:3e:49:2c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=159D11B6B8C40F49D8D732F8B269105D65A2E518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:24:78:5e:0f:8e:ac:44:1b:1f:83:0c:29:
                    65:b7:b6:ce:9f:cd:e7:6d:b2:e6:0e:8d:c0:44:7b:
                    b2:df:0a:96:c7:00:25:4c:1f:37:b8:ab:43:fc:86:
                    19:fb:b6:7a:df:ea:63:74:b8:e9:9a:9d:c7:5b:69:
                    eb:b6:80:79:b1:84:5f:ba:bc:54:62:a8:6b:dd:7e:
                    a2:47:bd:f8:b4:9b:c8:b3:6e:a5:64:52:2d:60:5a:
                    f9:9b:b7:df:ff:81:c1:96:21:e2:05:59:62:8a:45:
                    65:9d:24:55:f3:ce:b0:bb:eb:08:e3:e9:15:89:d3:
                    dc:85:14:d5:31:7b:5f:c5:e7:05:c9:3c:2a:eb:2f:
                    25:3f:2c:bb:4b:0d:5e:99:1d:c4:31:b4:b6:69:55:
                    68:0a:cd:00:14:da:f8:cf:1e:91:0f:fd:9f:70:53:
                    dc:07:c1:29:f3:3a:d5:f7:41:69:c5:d4:cb:90:86:
                    e2:b5:ee:85:fa:08:fe:0a:42:36:0d:77:95:b5:5d:
                    f0:5e:ce:12:50:8e:14:eb:e1:64:08:1c:50:99:ff:
                    0b:20:f5:35:97:85:7b:b4:d3:8d:9e:e1:8b:57:84:
                    70:06:c3:ec:33:f1:df:f0:36:d2:30:89:19:3b:0d:
                    f2:05:41:be:c7:c0:8e:d2:ca:cc:a5:6a:5c:f9:bf:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9D:11:B6:B8:C4:0F:49:D8:D7:32:F8:B2:69:10:5D:65:A2:E5:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:06:3d:5d:01:0c:78:6d:8e:fc:ae:7e:3b:95:9f:ed:7f:6b:
         fc:e3:c7:ce:12:ae:b8:63:cc:7a:c2:db:a2:fe:0c:25:80:37:
         b5:17:00:b1:f7:d0:21:11:36:0a:41:c8:f3:10:72:cc:3d:6d:
         63:d4:85:2b:1f:58:fa:bc:49:5b:99:0a:be:04:97:0a:10:0b:
         01:82:c9:47:72:e1:f4:e6:7a:43:a5:b6:5b:2a:03:18:9a:12:
         34:7a:90:08:43:bf:4f:18:9f:a9:3d:0f:c2:54:bb:51:3d:20:
         e7:a0:60:bb:b9:e4:69:c8:fb:fc:31:83:72:a2:b1:39:08:da:
         4b:89:1a:38:ed:c1:46:eb:d6:ff:e3:2e:b3:cd:04:1c:35:31:
         27:ff:ea:85:b4:b5:e1:22:05:7e:b0:4a:97:24:f5:42:09:dc:
         98:e6:6e:c7:b0:ba:9f:ff:ee:ce:fe:90:20:01:cf:b7:2b:01:
         83:a6:c7:bd:da:97:d8:66:a4:eb:18:50:f2:f9:43:93:73:c8:
         f5:e7:98:04:bb:20:22:1d:c9:b8:71:9a:27:37:42:70:64:7d:
         58:15:80:ff:7d:5f:6d:14:ba:c3:af:6b:a4:ba:f6:36:5e:e6:
         71:a1:36:3a:13:18:1f:32:7b:5c:bb:33:b6:6e:66:e5:64:92:
         32:35:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:06 2025 by rpki-client