Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          9YrwsxzGLBnvURa/ZJcpDBqm+e1+89Pe/uMGWpjQc90=
Subject key identifier:   DD:A6:A9:FA:CD:B2:5A:2C:B3:8E:35:94:84:FD:13:A2:41:B5:BD:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       486DC92D059C980F9CC0145361CB4590F27E432A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:12 +0000
ROA not before:           Thu 04 Apr 2024 02:21:12 +0000
ROA not after:            Thu 03 Apr 2025 02:26:12 +0000
asID:                     28368
IP address blocks:        189.84.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:c9:2d:05:9c:98:0f:9c:c0:14:53:61:cb:45:90:f2:7e:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:12 2024 GMT
            Not After : Apr  3 02:26:12 2025 GMT
        Subject: CN=DDA6A9FACDB25A2CB38E359484FD13A241B5BD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:9e:d7:78:28:e9:57:2b:05:c3:52:d0:5e:
                    4d:43:4c:d5:ce:39:70:2b:58:fe:9b:eb:83:c0:1d:
                    f2:9e:5d:c3:bb:69:a6:1b:16:c9:36:ac:ef:ca:57:
                    4f:f9:0b:e4:f7:52:08:cd:a7:23:89:b7:c5:1a:3e:
                    d7:ec:a7:8a:dc:bf:4a:9c:50:db:a3:24:78:c9:5f:
                    2a:6f:29:c1:41:c0:92:e8:5b:83:f5:2e:03:00:0e:
                    6a:42:22:05:4b:c7:a1:27:b1:33:34:9d:da:3e:30:
                    2c:75:89:cc:24:21:b9:52:50:d7:66:28:05:c4:ed:
                    70:5c:eb:ab:bf:a8:ed:2d:9c:ea:35:3a:ff:2a:db:
                    1d:1e:39:f5:6b:ea:09:76:00:82:e3:e9:87:09:06:
                    b4:6f:1c:da:33:4e:ff:b8:63:ad:97:8c:5f:5a:50:
                    19:26:cc:b1:44:03:67:f1:1f:bc:16:a6:30:05:04:
                    d3:4d:97:f0:48:e9:69:34:b3:69:55:22:cc:97:a1:
                    5f:c3:ec:0f:7d:10:5d:44:19:d9:d1:51:59:87:14:
                    e6:0e:cb:ee:f0:b1:ff:c9:b1:38:59:06:a5:65:ef:
                    4f:fa:7b:9c:16:bc:6e:9e:7b:f3:52:52:8f:c6:ff:
                    3c:c9:bf:37:b8:fe:8b:c3:ef:d9:16:c7:13:d8:4c:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A6:A9:FA:CD:B2:5A:2C:B3:8E:35:94:84:FD:13:A2:41:B5:BD:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:79:44:3d:14:9c:63:1f:25:7a:2e:f8:3a:86:fb:db:7d:
         22:73:aa:91:93:33:c2:1e:f8:bd:5a:dd:0a:b4:86:57:55:37:
         40:78:f4:ff:1f:38:ef:59:4d:88:54:7e:90:1b:92:1e:32:be:
         53:6e:a7:1c:12:36:6a:f6:7a:b6:7d:5f:5b:6e:18:aa:a8:3b:
         48:fc:ee:4a:6f:83:57:3f:ce:c9:7f:ea:df:60:dd:af:70:30:
         71:59:9d:67:92:a0:e3:58:33:e8:bb:98:12:b1:e3:92:49:0f:
         6b:90:79:cc:4e:61:d4:d1:30:16:82:66:05:8e:2c:03:0d:1c:
         30:2c:7b:b4:43:04:fa:fb:48:3b:4b:91:48:91:d5:05:cc:eb:
         36:78:7a:05:ba:96:3a:01:bd:c3:8f:94:18:ff:83:46:dd:aa:
         fe:36:6d:4a:09:57:3c:d9:be:d3:01:a4:ef:ab:ab:82:ee:1b:
         8d:a8:75:8c:6c:12:e0:1e:4d:07:24:24:b7:cb:07:a9:ef:6f:
         42:58:8c:48:d4:46:32:6c:eb:ab:91:18:e3:18:96:55:76:29:
         17:2b:77:6f:6a:e8:0b:9f:ef:40:74:72:46:fa:9b:3b:35:60:
         4b:ab:a1:56:03:dd:f9:4d:98:9c:88:65:44:1d:02:ce:9d:c7:
         36:cf:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org