Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          uNGjrCDE3wcgIN4kfR/guptFubeiK+47SJK5jFWU0hs=
Subject key identifier:   55:E6:76:9A:4C:C0:72:68:1C:07:11:07:BB:42:D7:5C:77:DA:34:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       22675C3E2436EB14FB1FBBD8A1ABBC1CCBFD0EDF
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:51 +0000
ROA not before:           Thu 06 Mar 2025 02:36:51 +0000
ROA not after:            Thu 05 Mar 2026 02:41:51 +0000
asID:                     28368
IP address blocks:        189.84.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:5c:3e:24:36:eb:14:fb:1f:bb:d8:a1:ab:bc:1c:cb:fd:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:51 2025 GMT
            Not After : Mar  5 02:41:51 2026 GMT
        Subject: CN=55E6769A4CC072681C071107BB42D75C77DA3418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:a3:5b:7e:a1:e6:92:7e:81:ef:73:a6:b4:
                    48:d3:fc:da:79:be:a4:86:de:9a:18:b2:03:f6:50:
                    4b:d3:d8:17:8d:ee:12:1d:47:34:62:c2:06:87:ab:
                    33:47:5b:f9:66:f9:dc:a7:5f:2f:5a:a4:c9:30:3f:
                    8c:6b:c5:33:81:cf:17:cf:6b:ef:39:f9:8a:d3:bb:
                    ce:a9:50:4e:84:b7:b7:98:42:1f:d2:f1:bf:fb:a4:
                    71:fa:25:2f:21:36:75:5c:76:89:44:79:99:ba:55:
                    30:a2:35:3f:92:62:d6:aa:3f:4a:ed:6c:5a:79:bf:
                    e3:df:2d:5f:e4:e0:a2:36:da:64:d0:fe:f5:61:8e:
                    95:45:50:67:c9:4f:db:d8:ef:40:e3:60:59:af:3c:
                    0c:28:0f:a8:94:76:ae:dc:e2:2a:3a:2e:3a:ae:aa:
                    e6:81:cc:e6:a7:43:5b:1c:ef:63:b9:85:f3:bc:33:
                    25:77:d3:b0:9b:39:21:a9:1c:83:62:31:1b:d0:87:
                    07:76:39:a4:15:00:f5:44:1b:c6:4d:be:91:a7:98:
                    a9:fc:f8:00:b0:00:0f:4b:2a:8a:41:6d:02:2c:1c:
                    57:ed:23:e4:26:58:fa:49:e1:cc:0a:84:25:b3:83:
                    9c:52:2e:72:af:94:90:3e:94:84:de:79:2a:4b:e5:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:76:9A:4C:C0:72:68:1C:07:11:07:BB:42:D7:5C:77:DA:34:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:93:11:df:37:bc:ad:0b:24:95:9c:1d:86:6a:3d:47:eb:
         d6:e0:1b:60:c1:c5:77:02:63:33:de:a3:7e:17:fd:df:1c:8d:
         90:89:0b:bf:8b:5b:41:73:eb:2b:58:c2:39:1c:57:6f:af:64:
         32:b9:58:74:26:2e:e1:ff:91:60:87:9e:89:97:d7:84:32:fc:
         fa:0f:5f:69:d4:16:d6:75:43:e1:ad:eb:5a:12:2c:e4:12:73:
         d7:26:0d:91:28:73:f3:2e:a1:3f:6f:9b:22:00:93:8a:dc:af:
         52:57:40:d3:0b:06:0c:5a:35:ea:46:fb:28:d4:4a:4c:7f:34:
         33:f0:32:fe:98:c4:5b:65:85:22:b8:73:2e:79:8b:b4:0d:b2:
         93:41:4c:43:18:cd:78:55:95:cb:70:bd:79:88:22:a4:ab:ac:
         72:1d:71:e4:f7:43:35:ba:54:3d:61:79:29:d5:b6:de:7e:eb:
         d6:74:15:d7:42:9e:12:57:e4:84:40:49:ec:99:f3:2b:98:61:
         fa:44:68:61:72:c9:f5:bc:39:f0:fd:a6:e2:ee:ad:f6:75:6c:
         d1:28:5b:e6:d9:ce:df:8a:63:18:0a:db:49:55:fe:b9:28:b8:
         4d:5f:6b:c0:90:d7:87:07:a4:d3:c1:69:21:62:42:ef:49:07:
         5f:86:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:02:16 2025 by rpki-client