Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e39342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          iD4T7ZJWKe/Mdp6VgO7EQTlpMhI4OPSvU5zkE/AKXfQ=
Subject key identifier:   40:50:CE:70:5D:41:A4:DC:8C:D4:3F:95:32:2F:8E:66:9F:23:AF:3A
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       75A0525291B24C00BE2CD4B6BC63A598602EAC3A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:04 +0000
ROA not before:           Thu 06 Mar 2025 02:37:04 +0000
ROA not after:            Thu 05 Mar 2026 02:42:04 +0000
asID:                     28368
IP address blocks:        177.200.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:52:52:91:b2:4c:00:be:2c:d4:b6:bc:63:a5:98:60:2e:ac:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:04 2025 GMT
            Not After : Mar  5 02:42:04 2026 GMT
        Subject: CN=4050CE705D41A4DC8CD43F95322F8E669F23AF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:50:a5:e5:2e:a3:68:ed:b3:0b:3c:87:81:
                    7a:4d:39:58:74:44:a2:ed:56:7b:33:bc:8f:37:58:
                    c9:5a:fa:4a:bb:c0:7b:0b:8d:73:9f:98:1c:d0:75:
                    ab:01:f7:5e:d8:0a:01:0a:da:66:cb:4c:ca:da:03:
                    a2:9c:f2:f1:53:36:7c:64:59:32:fa:6b:1e:79:59:
                    db:64:80:58:56:7f:0e:be:ff:dc:ab:65:68:b5:d7:
                    30:28:e4:4e:55:fe:dc:30:ec:b4:50:d0:b6:30:58:
                    05:ea:e6:aa:05:9d:57:44:68:fc:86:ef:a4:a7:e3:
                    f7:5c:ee:d2:84:46:be:d9:71:76:f1:35:6e:ce:90:
                    d8:ad:f2:ff:45:8e:19:98:9a:b1:0c:c8:94:62:20:
                    3d:cc:b6:b5:78:5b:20:bf:c1:2f:84:27:b4:54:af:
                    bf:b5:6a:be:e9:99:15:40:d4:8e:71:32:29:2d:52:
                    13:bd:8c:7e:30:f3:15:8c:f2:2c:3f:c5:8a:ce:a6:
                    50:48:11:0b:22:bf:39:65:98:b4:8a:3f:d9:15:72:
                    4b:04:28:7b:05:0f:75:49:03:9a:79:a5:e8:91:fb:
                    df:7e:e3:03:ad:10:38:e2:6c:4e:01:0d:4d:59:52:
                    e3:0a:b5:7a:19:8d:f8:77:80:a4:7e:16:3f:9f:52:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:50:CE:70:5D:41:A4:DC:8C:D4:3F:95:32:2F:8E:66:9F:23:AF:3A
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:88:c6:3b:23:2c:e7:67:ff:4b:01:6d:8a:58:64:bd:2c:
         17:96:76:e1:c7:3a:66:c3:2b:a4:ce:b0:27:e5:6e:90:10:4b:
         e5:81:17:95:2f:03:3c:bc:72:59:02:7d:f2:3f:2d:06:71:53:
         8d:ac:2f:f3:19:a0:ea:d3:75:16:d7:73:53:87:c2:2e:84:25:
         8d:b5:67:ad:67:99:5a:b5:67:21:01:da:d9:8e:8d:ff:cd:bf:
         84:e2:22:ca:eb:ea:89:72:e8:99:2e:60:a2:65:15:b8:4c:3c:
         76:6f:df:1f:1a:ae:f9:c4:e5:14:ce:37:b2:f9:46:3b:01:e3:
         6a:9a:f9:0a:1b:92:e3:db:e6:e6:12:a9:2b:76:65:cb:32:f6:
         36:ed:ae:37:48:5e:ba:83:8c:98:c6:ad:79:1a:c6:a6:55:a6:
         79:3f:92:a8:63:b1:d8:3f:2e:e4:d1:db:a0:9b:11:24:5f:f1:
         54:4e:5a:4c:5d:96:19:84:92:e4:30:f1:60:85:ad:a6:5e:25:
         2d:49:fe:7c:37:a2:72:5f:85:2c:8d:35:0a:71:20:5d:43:d9:
         26:47:1c:ba:ed:cd:99:38:25:87:90:f2:2c:bf:17:6e:cf:cf:
         e5:9c:ea:3e:86:6e:6c:28:36:a2:82:f9:e6:4f:56:1b:47:dc:
         e9:99:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:25:43 2025 by rpki-client