Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32312d3231203d3e203238333638.roa
File:                     3138392e38342e3131322e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          KL75jmLiXPIJxONRL5WkW9g1H5Qa6ariHrtjuGN71O4=
Subject key identifier:   82:63:32:D9:C1:C2:3E:58:EB:94:DD:B9:50:86:2A:75:7F:21:5B:C4
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0F020362C0FB54DF18BB0A2D135D89953AB993D8
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:05 +0000
ROA not before:           Thu 04 Apr 2024 02:21:05 +0000
ROA not after:            Thu 03 Apr 2025 02:26:05 +0000
asID:                     28368
IP address blocks:        189.84.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:02:03:62:c0:fb:54:df:18:bb:0a:2d:13:5d:89:95:3a:b9:93:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:05 2024 GMT
            Not After : Apr  3 02:26:05 2025 GMT
        Subject: CN=826332D9C1C23E58EB94DDB950862A757F215BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:3f:9a:48:66:bc:d7:49:64:15:9b:c8:fa:
                    13:db:26:61:23:4c:58:40:fb:c0:eb:cf:c9:d9:62:
                    c8:3c:35:fa:e2:2a:05:2a:b0:4f:1e:86:e0:14:4c:
                    13:0b:aa:35:20:0d:8f:7c:7f:3b:82:4d:5b:4c:6e:
                    39:88:73:06:25:42:72:25:a0:b2:24:e2:38:da:84:
                    ec:92:56:08:0a:c1:2f:4c:00:cc:e8:1a:f5:1a:21:
                    e2:d3:62:c8:a7:32:31:33:35:ae:8f:0e:c9:9b:09:
                    71:8e:fd:ba:c3:e9:da:df:62:24:6b:ec:fd:19:be:
                    d0:d0:22:b6:a4:03:b0:7c:5b:3c:60:09:35:d1:18:
                    1e:1f:ae:67:e3:9c:ef:e4:65:84:3f:9f:a5:41:50:
                    80:8c:fc:28:b8:e6:44:b6:66:dd:ca:97:91:73:5a:
                    ea:75:86:cf:70:28:09:c6:41:e4:89:90:af:51:07:
                    ff:66:db:9f:0b:1d:22:b1:97:4c:59:85:82:30:87:
                    d6:22:eb:1d:3a:f6:4f:17:5e:45:37:30:c0:d3:d5:
                    0b:90:dd:5b:4a:f0:5e:db:ad:b0:da:08:04:89:fc:
                    f7:47:65:87:99:a5:9e:8e:29:7d:27:d8:e3:3a:df:
                    ca:8c:17:51:06:33:88:3a:68:d9:f7:fe:63:be:ce:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:32:D9:C1:C2:3E:58:EB:94:DD:B9:50:86:2A:75:7F:21:5B:C4
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:59:cd:b1:d7:8d:ca:d4:49:64:fa:a0:58:bd:7b:0c:f8:91:
         49:81:51:22:8f:c6:49:7e:df:3d:ae:fe:62:0c:36:da:27:46:
         eb:e1:73:42:80:8d:21:a9:e0:0b:24:50:f9:d3:da:d6:b2:12:
         b3:53:3e:f7:b9:72:47:2a:45:f4:12:3f:6b:14:07:46:9b:b6:
         49:34:39:09:fe:8c:1a:6f:05:e1:94:b7:48:d8:81:c2:93:e1:
         39:ea:84:df:24:63:14:ca:72:85:a2:6f:cd:17:d8:cb:e5:aa:
         6b:67:75:84:40:5d:d0:da:36:7a:3b:6f:63:9c:10:72:a1:3f:
         b1:e3:3e:b0:34:68:89:5e:24:12:7b:46:59:5a:a4:fa:b7:22:
         03:be:98:cd:a3:07:2a:e8:27:5a:08:c5:48:25:ca:94:68:7a:
         1c:d5:8a:18:da:b7:7a:08:6e:95:11:9e:d8:4e:4e:c3:2a:29:
         3f:72:82:30:8c:31:4f:e4:3a:d0:32:e3:b5:2f:77:df:4b:1e:
         41:d9:d6:0c:bd:02:aa:1c:5a:a0:7d:da:6a:67:59:91:64:30:
         9a:f9:8d:b4:47:8d:8f:10:2a:7b:4c:26:b3:32:53:9f:0d:17:
         8b:33:28:11:39:03:c0:50:6d:92:5c:f8:24:11:0b:52:52:00:
         23:57:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org