Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3131322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          Jq673w196+/w2cL5ZchH+55q5+0bKnRlJu9hbfRQokE=
Subject key identifier:   D1:49:CA:22:3A:13:4C:D4:37:4B:3D:71:AD:57:49:FF:3B:C7:3D:84
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       17AEF048468FD62B93E62D7B84328329905EFCEC
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:03 +0000
ROA not before:           Thu 06 Mar 2025 02:37:03 +0000
ROA not after:            Thu 05 Mar 2026 02:42:03 +0000
asID:                     28368
IP address blocks:        189.84.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ae:f0:48:46:8f:d6:2b:93:e6:2d:7b:84:32:83:29:90:5e:fc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:03 2025 GMT
            Not After : Mar  5 02:42:03 2026 GMT
        Subject: CN=D149CA223A134CD4374B3D71AD5749FF3BC73D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:57:58:57:11:8d:31:35:69:1f:bd:53:e2:
                    2e:82:e8:c7:bb:24:c8:c4:79:cd:77:d8:8c:92:b6:
                    4e:e8:20:cc:93:22:fe:35:6e:80:98:0f:a9:43:9e:
                    93:1c:db:98:ce:c1:8a:2b:f6:b2:14:3a:40:2e:51:
                    ef:b9:14:50:8c:55:aa:63:65:dd:17:59:05:48:a3:
                    2c:ed:1a:52:22:57:41:26:5c:8f:dc:f4:ce:df:79:
                    ce:b9:fb:27:5d:65:aa:89:7f:6f:10:49:7a:da:13:
                    e9:2b:98:29:d3:57:29:d8:16:1c:fc:66:16:5f:ab:
                    67:6b:df:48:94:27:38:d4:41:6e:63:b4:fe:5f:55:
                    f2:cc:d8:07:d1:7d:36:e2:1d:fe:45:8e:e2:46:3c:
                    18:48:ab:bf:ef:76:ee:d6:08:c3:86:90:68:12:f1:
                    eb:19:f9:ab:72:f1:cf:8c:aa:18:c0:a2:ea:cc:53:
                    9d:94:14:7e:77:fd:f2:cd:0f:94:c6:57:2a:81:51:
                    b5:ae:6c:2a:d4:7c:2c:04:56:7d:32:78:14:11:57:
                    03:c6:c2:f8:c8:46:6e:04:be:4f:27:fb:95:b1:f5:
                    f0:c3:e9:58:62:d8:c1:62:d5:ca:7d:cc:4c:a7:5f:
                    e6:e0:e2:ac:8e:74:fb:cd:d5:04:cb:54:d2:9f:76:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:49:CA:22:3A:13:4C:D4:37:4B:3D:71:AD:57:49:FF:3B:C7:3D:84
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:08:da:79:4b:6a:28:76:d8:8b:34:06:dd:a2:71:df:9d:fb:
         fc:31:32:dd:34:cb:f0:a2:41:af:24:33:7d:83:f1:80:33:81:
         9f:8d:ad:d2:9b:d5:60:6f:05:ae:04:4c:eb:ae:39:4e:df:0a:
         8e:06:c0:f4:5a:5d:01:55:36:60:c8:4b:fe:27:fd:7f:e0:1f:
         be:9b:3a:21:d6:f1:ef:54:04:68:6e:88:fe:ab:bc:a1:bf:47:
         b8:24:75:2f:e9:e6:a6:d4:a2:77:50:6a:fb:5f:4f:93:d7:e8:
         66:85:3b:8e:ee:36:94:b1:66:a6:70:c4:53:80:f6:c8:ad:b2:
         a5:ae:e8:9e:a0:25:0e:fc:09:5e:f0:e6:6c:64:60:97:cf:52:
         94:1c:01:e3:7c:17:cf:aa:98:62:71:e8:f4:21:3a:3f:31:c2:
         73:76:4a:ca:45:52:af:3f:3a:73:c6:89:65:d0:ce:de:b0:96:
         e7:71:c6:21:25:b3:c5:e7:4e:99:74:08:1d:d4:a8:2c:95:d5:
         c0:99:78:ad:58:ac:2d:f2:e1:6f:2f:ce:b4:1e:7b:aa:00:cd:
         cf:3a:23:41:eb:e6:44:a4:b3:f2:5b:34:4d:d3:15:ab:5f:73:
         b1:ed:b2:9d:36:10:26:98:96:f9:76:3c:86:cd:53:c0:84:6f:
         25:cc:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:52:23 2025 by rpki-client