Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3131322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          MwokW07S/PmqGsY07k3+SUynigD/NYIij0YZJd90fsY=
Subject key identifier:   03:3D:13:40:E0:6F:4E:59:B2:35:30:D9:33:62:76:E4:04:F7:54:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       54D76B9F5FA6210DF68C1083EAAC9B7472334BBC
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        189.84.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d7:6b:9f:5f:a6:21:0d:f6:8c:10:83:ea:ac:9b:74:72:33:4b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=033D1340E06F4E59B23530D9336276E404F75418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:cf:d5:76:be:74:8b:b5:3f:d6:02:59:04:
                    65:33:84:01:5d:a0:7f:9b:33:92:1c:a2:3d:f4:59:
                    89:54:6a:9e:bd:31:f6:ad:fb:84:87:9a:92:28:c3:
                    04:69:e3:58:59:34:23:7c:78:78:82:1a:aa:37:4a:
                    d4:15:e8:31:f6:2b:b9:bd:c1:a0:2f:1c:4b:a1:b4:
                    18:98:cd:33:b5:50:0b:c0:dd:6c:6d:53:a0:1a:8b:
                    5d:ce:9a:5b:88:d3:a1:fb:36:41:99:cf:58:07:3a:
                    20:47:b2:49:34:2c:b6:5e:80:d9:e2:f7:f4:fe:52:
                    98:50:37:ee:7a:25:a6:61:d7:a7:c5:b7:45:62:a5:
                    de:df:32:8a:dd:9b:97:15:b3:ae:fd:33:4d:a4:72:
                    1d:f8:1f:6a:46:66:3b:60:9e:10:e6:ca:bc:6e:72:
                    a0:f4:61:7e:be:aa:71:b4:50:9d:f0:92:5a:3f:ad:
                    7a:0b:19:24:9a:ce:74:e7:ae:9f:08:ee:21:d7:e9:
                    47:fe:24:09:96:8b:dc:d3:f9:32:bf:4a:c8:d8:82:
                    bc:00:d2:cf:5d:72:31:93:1f:37:cf:0b:53:e6:40:
                    65:29:e1:f3:b6:ae:36:d8:6d:5a:e4:9f:fb:23:9b:
                    5d:af:86:e8:80:6c:1b:31:2c:ab:9d:b8:15:cf:0e:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:13:40:E0:6F:4E:59:B2:35:30:D9:33:62:76:E4:04:F7:54:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3c:ed:b2:dc:a8:0b:f7:bb:ad:8c:27:54:78:4c:78:a9:2c:
         86:32:bb:55:dc:9b:49:5a:97:00:d2:75:df:24:34:bd:ca:de:
         0a:b6:39:0b:6a:68:27:5b:fe:97:38:fc:2e:39:59:88:b7:2b:
         11:d9:90:31:96:52:d1:af:1e:65:14:55:bf:55:2b:32:85:46:
         43:b6:51:8f:eb:62:3c:14:08:9d:68:7e:43:36:dd:58:49:ef:
         fc:f0:51:cd:65:d8:b6:0e:ab:3a:cd:32:1e:c7:8f:2e:7d:62:
         75:8c:cb:b0:40:a3:9a:45:af:f3:4d:5c:12:bc:29:f5:db:d1:
         5e:35:51:55:8d:53:a9:40:f5:6e:ed:54:c1:fb:a9:54:b3:88:
         75:12:00:1e:59:c7:c4:eb:d7:88:9d:b4:66:cc:2e:99:7d:24:
         eb:05:4e:e9:3b:7e:29:86:10:1d:d0:d7:6f:2b:c2:7b:34:69:
         2c:28:55:5d:5a:66:8b:ab:7d:52:bf:5d:05:42:08:75:c6:30:
         95:c8:3d:f5:a6:a5:0f:cd:dd:b1:f3:7c:4b:5f:c4:1f:1f:b8:
         aa:3b:b5:b6:2b:fa:f1:fb:04:68:19:cf:a7:83:52:77:96:e6:
         36:7f:fd:e5:4c:22:34:47:12:87:4f:32:cc:ce:05:9a:69:78:
         7e:53:52:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org