Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3131332e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          w/PGSY+FrXpPMnM/D9q8vzdEV48ItthrFD1ZCLifvz8=
Subject key identifier:   D4:0B:C2:FB:CD:D8:6B:75:0A:B7:07:50:76:82:50:26:31:D1:9E:E6
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       535BE538EA97154528682835AA36522711885173
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:14 +0000
ROA not before:           Thu 04 Apr 2024 02:21:14 +0000
ROA not after:            Thu 03 Apr 2025 02:26:14 +0000
asID:                     28368
IP address blocks:        189.84.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5b:e5:38:ea:97:15:45:28:68:28:35:aa:36:52:27:11:88:51:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:14 2024 GMT
            Not After : Apr  3 02:26:14 2025 GMT
        Subject: CN=D40BC2FBCDD86B750AB707507682502631D19EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:fa:3f:19:64:b5:a5:ba:35:c7:63:7e:ba:
                    06:70:f8:39:3a:15:31:03:a9:9b:16:72:5c:cd:e4:
                    37:8c:b3:da:85:1a:e4:38:59:50:84:84:7c:f4:04:
                    67:70:9b:4c:9f:b7:ee:c8:d7:6a:13:5c:05:83:87:
                    84:e6:61:0c:14:c1:19:55:19:29:32:26:43:c6:e7:
                    f2:57:26:d3:be:26:17:37:e3:53:57:52:d9:50:e8:
                    22:9f:e6:4e:09:b1:24:6c:b7:a7:8d:2b:a6:87:d6:
                    97:bd:1a:d5:de:d7:be:2b:2e:17:5d:21:b7:fa:11:
                    02:0a:2a:35:5c:03:03:d7:98:63:6b:56:a4:f5:15:
                    f5:ca:4b:40:57:08:d3:d8:08:83:a2:f6:00:1f:a1:
                    25:87:69:db:75:46:7a:48:b8:e6:38:25:c7:d4:f4:
                    03:7a:ef:38:a5:12:6c:64:3e:c1:ae:45:54:75:e2:
                    cf:da:27:bd:4f:f6:4a:11:e6:97:d5:3f:3b:7d:e2:
                    5e:e9:f3:62:34:fe:49:0a:39:86:42:b5:e0:d4:43:
                    e3:61:b2:14:2e:70:91:25:bc:3f:06:ce:ec:d3:4e:
                    34:ad:0e:ce:36:1e:de:96:e9:35:c5:e6:0e:63:f4:
                    9d:f6:ca:aa:80:6f:18:bc:09:25:f5:3e:07:43:93:
                    a3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:C2:FB:CD:D8:6B:75:0A:B7:07:50:76:82:50:26:31:D1:9E:E6
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131332e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:97:78:3b:58:55:33:fe:9e:8c:68:3d:c7:68:f4:2f:2f:54:
         38:bc:ca:ef:a7:7e:6b:e1:a2:21:7a:0e:a8:a8:ad:78:36:dd:
         f6:36:26:c9:1f:4d:d7:37:ac:e1:69:3b:83:3a:0a:cd:bb:df:
         0a:4a:4c:d7:f4:54:51:a1:d9:d7:9e:65:93:32:2e:8a:6b:52:
         87:2d:28:a1:ce:95:d5:9f:1d:ba:4b:88:44:21:93:16:36:1b:
         f8:ad:bd:a2:64:ca:31:13:38:33:3e:ee:2c:8b:e0:f8:b8:65:
         b5:94:f7:a3:ee:11:35:83:37:42:28:ae:64:d2:ef:4d:76:b1:
         75:5a:3a:bf:07:34:38:9f:50:19:f4:b2:f7:84:4f:6c:7f:6b:
         de:cf:58:0b:20:cb:9b:e2:72:5a:97:e1:c0:b2:ce:b2:f1:f5:
         06:25:f8:16:f8:71:ce:9e:38:71:81:c7:3f:21:d6:ed:f5:6f:
         d0:63:2f:3d:9e:3b:01:d9:0f:eb:ce:75:29:80:7f:42:de:a8:
         9c:56:ba:41:4e:f0:1c:c8:db:52:5e:ed:2d:a9:1c:43:53:e4:
         9b:02:2d:78:b6:8d:f9:54:60:8c:99:18:65:33:48:ba:08:ce:
         5c:00:3c:bc:11:c9:82:a8:6d:ec:56:91:81:51:0e:95:29:b4:
         bb:8e:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org