Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          W0ywfLYHTjYyGB7+3Uojz/IDFXit1ADY0RFLowMHIHQ=
Subject key identifier:   55:F3:BD:46:5F:93:A0:8F:94:A8:85:51:71:71:86:FA:A3:FC:98:24
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       379164002435CC37E11EAA435E3AC9EA2F72DE0B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:01 +0000
ROA not before:           Thu 06 Mar 2025 02:37:01 +0000
ROA not after:            Thu 05 Mar 2026 02:42:01 +0000
asID:                     28368
IP address blocks:        189.84.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:91:64:00:24:35:cc:37:e1:1e:aa:43:5e:3a:c9:ea:2f:72:de:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:01 2025 GMT
            Not After : Mar  5 02:42:01 2026 GMT
        Subject: CN=55F3BD465F93A08F94A88551717186FAA3FC9824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:a7:06:2e:a1:6b:af:d6:50:4f:c4:55:9d:
                    80:9d:f6:23:2d:9b:65:9c:46:4a:2e:4a:a6:60:eb:
                    9e:e1:30:73:fe:65:92:64:bb:a8:9d:4b:e5:bf:60:
                    fc:cd:9f:da:c1:67:bb:c8:72:6c:81:b9:d5:69:a6:
                    1b:bd:52:d2:a0:17:6f:1d:40:13:af:07:30:6e:11:
                    e1:84:51:c7:35:04:c9:6f:eb:93:95:46:2d:96:ad:
                    1a:13:d3:9f:2d:53:af:e3:a4:e9:9b:71:17:86:d7:
                    3c:1c:16:a6:f3:12:62:4c:25:70:73:28:53:13:f5:
                    af:ba:92:c6:3c:36:9a:4c:72:7d:da:87:c1:44:06:
                    48:e3:49:33:84:15:7a:85:51:a9:ae:f2:7a:61:c7:
                    4b:a1:82:54:5f:64:5d:69:49:80:ad:44:72:48:33:
                    a2:8e:81:c7:9e:6c:d7:88:43:8c:75:6d:17:2c:91:
                    45:b5:d8:89:da:ca:67:86:7b:ef:54:9d:77:8f:36:
                    87:a4:00:72:02:7b:61:b4:61:ed:a0:1e:b4:8b:94:
                    ab:4c:ce:c1:74:3c:02:25:6d:55:fa:ef:67:14:56:
                    b2:80:0d:9d:c9:74:40:72:ce:27:0d:c7:78:a6:14:
                    e0:42:c2:ff:5d:e7:71:e5:8e:07:3f:b3:99:08:ec:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:BD:46:5F:93:A0:8F:94:A8:85:51:71:71:86:FA:A3:FC:98:24
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:19:9a:9d:8d:fc:c7:41:c7:73:a0:02:56:94:db:5f:bb:
         77:e1:2a:ae:29:cd:8e:e0:dc:7a:f9:1a:b4:3c:b9:b1:bb:df:
         88:6c:bc:33:af:1b:c7:91:cd:46:c3:ce:aa:21:68:06:47:88:
         53:5c:7c:6c:08:a5:b2:b1:8f:b4:77:96:50:bd:1c:97:28:ac:
         f6:99:2e:e3:50:11:f7:9c:1b:bf:7c:34:e2:46:d3:7a:62:82:
         e0:51:f8:68:78:59:60:3f:29:95:76:c2:38:e0:c0:bd:a1:3b:
         37:19:51:b1:ef:43:31:20:8c:5c:6e:6a:de:a8:8a:86:65:f2:
         0f:66:cb:10:15:fa:17:a1:2e:77:7a:72:09:b8:3a:7a:01:ff:
         2c:3e:68:76:b8:62:ff:de:0d:6e:d4:d6:7a:b9:dd:ac:f6:a2:
         50:43:31:1c:8a:3d:53:ea:f7:8b:b9:d6:20:4b:c3:e9:31:57:
         c8:40:99:e0:40:55:84:a3:98:8e:9a:fc:95:d0:75:a4:f9:e6:
         bb:2d:10:09:22:4c:ab:7c:a4:42:2a:45:2a:b0:54:38:1e:76:
         e0:45:15:c4:24:2f:67:11:10:5e:99:7e:83:d9:90:e9:a8:f3:
         2b:c8:47:53:97:bb:c9:55:8c:fc:d5:4f:6e:7d:97:df:84:c2:
         5a:2c:16:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:37:02 2025 by rpki-client