Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e39322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          SC2KIxAIyz9lIBIXnhBaeDfLBTrw4Ay57nR9Vxf8Miw=
Subject key identifier:   42:D1:68:66:CC:6A:D9:A9:08:16:A5:E6:36:28:D4:01:51:04:A4:16
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       313A5635F0BA553B5024BE5F982E509174A3C514
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:18 +0000
ROA not before:           Thu 04 Apr 2024 02:21:18 +0000
ROA not after:            Thu 03 Apr 2025 02:26:18 +0000
asID:                     28368
IP address blocks:        177.200.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3a:56:35:f0:ba:55:3b:50:24:be:5f:98:2e:50:91:74:a3:c5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:18 2024 GMT
            Not After : Apr  3 02:26:18 2025 GMT
        Subject: CN=42D16866CC6AD9A90816A5E63628D4015104A416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:ca:e7:21:44:86:b2:d9:e4:a2:24:07:3c:
                    9f:f1:9d:45:1e:88:61:c7:5a:5e:c0:f7:ee:b9:62:
                    14:fd:fc:9b:49:27:a5:79:7c:3c:c4:21:0b:db:0f:
                    41:1c:c7:9c:71:34:aa:04:27:3e:28:7d:7d:ee:05:
                    35:75:7f:61:c1:a9:a6:e3:12:5a:de:ef:1e:cc:35:
                    96:58:3a:7d:59:71:8b:f0:22:29:a4:dd:e9:b7:1e:
                    d4:8a:bd:71:55:bf:b4:d7:90:a1:70:a9:3d:18:3b:
                    fc:a1:3b:ee:e0:02:0c:b2:e3:ea:5e:ad:8b:a7:bc:
                    53:5e:21:d3:44:8a:6c:3f:b6:1d:6e:bf:f5:03:4b:
                    a9:6f:d3:3b:04:82:4c:58:f1:f2:af:a8:ae:3f:ea:
                    9e:0c:a2:2c:15:ed:73:17:35:15:a7:22:45:8f:ba:
                    4a:28:e4:97:a8:d4:79:79:56:37:fc:08:94:cd:a1:
                    bd:b0:d3:c8:88:67:93:03:df:be:34:a1:06:cb:2d:
                    10:a4:72:7e:55:51:aa:4d:8c:19:80:8f:d9:40:02:
                    59:73:87:93:e7:28:fa:fb:ab:52:93:ae:5e:70:3f:
                    74:0f:81:eb:85:4b:8c:4f:6d:ec:7f:af:f1:78:c9:
                    35:dd:fd:14:48:fd:cd:64:3d:8c:71:31:c3:2a:5c:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D1:68:66:CC:6A:D9:A9:08:16:A5:E6:36:28:D4:01:51:04:A4:16
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:6a:f0:a9:58:5e:56:53:0f:28:4f:78:74:4b:b2:eb:2e:
         96:52:d4:97:98:28:10:7b:51:37:63:ed:83:00:8a:60:29:15:
         2a:dc:5e:d7:c8:5c:1b:7d:a5:b0:86:0e:f5:b2:b3:8e:38:80:
         82:61:21:50:d4:5a:2a:d9:62:7d:8e:ea:19:f6:94:6f:d6:79:
         42:30:ef:f5:43:43:5e:93:20:9e:3d:ce:37:43:bc:81:de:ee:
         99:7b:72:5c:dd:21:65:16:b2:5c:19:40:57:e9:d3:b2:b0:f0:
         98:16:d2:e7:b5:0c:65:7d:07:22:86:d3:12:a3:a4:42:d9:53:
         0b:fc:f3:f7:39:5c:39:5b:da:7e:b5:49:c2:20:46:31:ac:51:
         6a:9c:45:67:23:5d:99:dc:0a:86:ed:cc:52:46:4f:0f:67:98:
         1b:06:ec:47:e5:1b:6f:a0:7f:db:b9:82:a4:1b:e3:55:5f:50:
         8a:14:1f:28:5e:5d:26:0e:f6:49:4f:fb:b3:24:6a:ec:1a:45:
         d8:97:f7:9d:af:e2:a3:2d:86:2a:05:1c:c1:be:ff:1d:f7:30:
         fa:4d:fa:d8:36:ba:68:7b:66:2f:fa:d6:5e:d8:66:47:16:0c:
         6a:61:0a:7d:36:81:6f:2a:7d:0f:0f:3a:10:7c:d0:83:dd:3b:
         0d:67:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org