Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e39342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          TBlfqZfzPgQ609/4+20sQcv+w29zc3FjQl7veHorEpk=
Subject key identifier:   8A:53:7B:FE:53:98:85:A4:8B:F5:CE:00:9D:72:0C:3E:33:19:33:C0
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       060FF02705E1C322AE29D8AFA0F5DE3BA9A1DCD3
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:18 +0000
ROA not before:           Thu 04 Apr 2024 02:21:18 +0000
ROA not after:            Thu 03 Apr 2025 02:26:18 +0000
asID:                     28368
IP address blocks:        177.200.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0f:f0:27:05:e1:c3:22:ae:29:d8:af:a0:f5:de:3b:a9:a1:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:18 2024 GMT
            Not After : Apr  3 02:26:18 2025 GMT
        Subject: CN=8A537BFE539885A48BF5CE009D720C3E331933C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:34:88:5c:e7:94:9d:d6:90:f1:b0:6c:2a:1b:
                    d3:3c:19:dd:b9:50:8b:78:5d:b0:fe:19:51:a8:54:
                    59:38:c3:3d:fa:d2:1f:24:e3:f1:35:05:e1:72:5d:
                    17:1f:7f:e3:f7:60:c2:1c:e9:9e:95:0b:0a:a3:29:
                    e9:d6:47:37:e0:ee:d1:20:d7:fe:b5:55:44:7d:b9:
                    00:76:8e:fa:4c:ea:67:82:df:40:d9:51:98:ed:00:
                    36:71:9c:b8:57:03:d1:4c:06:1c:ac:3f:f1:d8:35:
                    99:ff:a8:0a:e5:a5:3b:dd:b5:fa:74:e0:8b:a2:4d:
                    f4:d7:cd:0a:fd:95:43:8a:30:be:7a:f1:b9:fc:9b:
                    e2:3d:99:b5:3c:46:82:48:bb:ab:eb:d9:a7:e5:8e:
                    ab:8e:b6:98:fd:76:b2:21:c2:39:e7:f5:89:12:2e:
                    f4:ef:a2:ba:28:4e:f7:c3:9d:17:22:3d:71:9d:b0:
                    6e:c4:5c:dc:83:e7:fb:d6:73:50:40:6a:bb:97:a6:
                    07:73:a5:30:a7:f8:c1:cd:de:97:77:9f:a8:c7:84:
                    41:51:24:86:cf:3e:30:0b:fb:7c:a3:06:bb:5a:b5:
                    f8:3d:26:c8:f2:b5:1e:5a:59:7e:78:bc:ae:7c:be:
                    58:61:ee:c3:c6:a3:58:35:74:eb:05:3f:fa:1d:4a:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:7B:FE:53:98:85:A4:8B:F5:CE:00:9D:72:0C:3E:33:19:33:C0
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e39342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:c6:20:1d:1b:23:cf:60:4d:54:ee:13:6e:c2:f5:7b:58:9a:
         96:fb:18:07:0c:0b:15:64:63:7a:b0:87:54:6a:d0:cb:74:cd:
         b6:f0:09:88:d9:ae:9b:f4:c5:3e:74:9f:7d:1d:2a:07:b6:fc:
         fd:0d:01:d0:50:d0:a6:ba:22:16:11:d5:2a:b4:1b:9b:5d:ee:
         4b:39:ab:1a:39:a1:23:e1:7f:6f:73:8f:59:9c:a4:cc:f5:95:
         0e:c6:d5:7e:26:8a:2c:36:39:38:d3:8f:cb:2f:fa:69:01:3b:
         a3:43:d2:6e:ad:23:14:8b:d9:1e:95:ad:f9:1b:20:e8:46:95:
         19:77:02:8e:0b:10:03:c9:de:27:48:58:e8:34:1c:10:df:cb:
         b0:34:8d:f3:e6:c6:70:60:7a:98:24:24:e2:98:02:60:9c:00:
         0c:e0:74:17:0d:84:51:be:2e:52:18:a6:fa:3b:0b:6b:fd:c2:
         8a:69:a5:87:3e:f2:0b:9c:4c:c6:a7:ce:1f:ed:ef:90:14:72:
         c0:8f:ec:d0:e7:c3:bc:e4:d6:c5:07:5a:19:a6:84:29:8c:d8:
         f0:a3:85:d5:7d:7a:fb:19:b4:7a:bd:7f:08:f4:54:58:28:3d:
         e8:1f:82:40:93:ab:90:8a:1b:fe:56:65:79:f6:63:df:cb:93:
         61:ef:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org