Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32322d3232203d3e203238333638.roa
File:                     3138392e38342e3131322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          T1yY3ZsM6MEW96Gl01EEXzBmTqdvFnOS+WDZycz0h1s=
Subject key identifier:   73:44:0D:D0:C2:D7:03:EC:94:93:F7:9D:CC:BA:5F:71:F9:8C:6E:88
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6010C97C7FB386EF9B6928BF31E852CEE3809E0D
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:06 +0000
ROA not before:           Thu 04 Apr 2024 02:21:06 +0000
ROA not after:            Thu 03 Apr 2025 02:26:06 +0000
asID:                     28368
IP address blocks:        189.84.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:10:c9:7c:7f:b3:86:ef:9b:69:28:bf:31:e8:52:ce:e3:80:9e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:06 2024 GMT
            Not After : Apr  3 02:26:06 2025 GMT
        Subject: CN=73440DD0C2D703EC9493F79DCCBA5F71F98C6E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:e2:c2:19:05:a5:82:7e:44:2e:d7:bb:6a:
                    8d:c9:bd:a1:da:43:6b:54:3a:59:84:0c:f5:62:95:
                    76:d0:44:40:e0:1b:4c:2a:78:a5:78:39:63:ff:d0:
                    d6:55:cc:f2:a8:89:42:8a:c6:15:e6:a8:01:08:cc:
                    bd:dc:4d:4c:98:df:02:20:02:cb:01:2c:4d:4a:eb:
                    c7:0e:72:44:47:dd:86:7c:e7:d5:ff:e9:ae:38:ff:
                    a5:a8:56:e0:4e:70:82:2b:dc:be:21:76:20:2b:29:
                    47:91:5d:23:65:89:8d:c6:c5:fc:d8:0f:05:bf:0f:
                    8c:e0:d7:8c:f4:79:cb:53:51:8f:11:46:32:69:7b:
                    69:9c:46:f3:ff:94:7d:42:b5:56:88:c4:31:63:bf:
                    4b:40:5e:ac:4e:2b:ee:e4:6c:b7:5d:42:9e:fe:8e:
                    fe:14:b3:c2:2a:0d:95:34:28:9c:e3:6b:be:09:68:
                    69:af:e6:e3:da:5a:f0:de:7e:d4:5e:bc:cb:4a:25:
                    dd:8f:e2:d3:f2:cf:f2:8f:d8:70:cb:1a:18:4c:4f:
                    1a:78:7f:a2:9a:ba:85:23:94:d2:e0:6c:d8:f6:f1:
                    45:ed:aa:86:83:1a:16:cb:42:63:57:cc:d6:b8:9f:
                    0a:06:d4:e5:35:8b:6e:db:a6:9c:d2:06:ed:84:2a:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:44:0D:D0:C2:D7:03:EC:94:93:F7:9D:CC:BA:5F:71:F9:8C:6E:88
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:67:fc:13:3b:a6:83:61:fc:2c:e4:11:dc:06:0b:40:b9:
         0d:37:6b:70:3a:2b:a6:4a:83:45:49:29:9d:53:c9:24:16:42:
         32:c8:b8:84:bf:21:80:4f:01:5f:92:84:1f:dd:a3:0c:0e:c0:
         f6:af:da:6a:6b:35:92:26:0d:b7:db:a0:19:cc:c1:6e:4d:c7:
         27:e2:dd:ab:54:33:d0:4c:3d:94:67:fb:e4:08:8f:6d:6c:ae:
         44:26:c0:1f:52:ec:c5:bc:a8:aa:44:75:a9:a3:3a:b3:a6:b9:
         18:d6:42:59:e7:fd:63:8d:28:64:e8:37:ae:de:93:3c:36:01:
         c5:7f:b9:fe:bc:8a:b2:da:18:3a:b1:9c:ed:e6:fa:7f:27:00:
         76:f6:6e:2e:50:a2:2b:13:ff:01:db:c7:a5:20:42:66:ca:e6:
         64:ee:94:03:cb:d2:a5:d9:ec:ed:22:27:88:82:be:93:88:05:
         12:4a:70:49:7f:c1:80:75:de:e5:97:7b:e0:c1:3a:02:7e:8d:
         68:8a:20:9a:93:c0:87:56:5e:fa:22:ec:aa:b3:39:e5:48:84:
         34:f8:38:5a:6f:da:fe:a2:04:dc:64:33:a1:54:61:19:83:07:
         d8:90:1e:df:16:b3:64:dc:d8:bd:13:ee:b7:8e:29:d4:75:c4:
         a0:ef:60:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org