Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32322d3232203d3e203238333638.roa
File:                     3138392e38342e3131362e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          O1AyW8SZZb4grT9idpZI/vNYTh1dUvXu11HCedhe4Kk=
Subject key identifier:   13:34:6E:89:CB:20:91:55:97:92:1B:6D:2C:C0:EF:89:23:8A:D4:26
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       114C26FC76BCF95E3E793BC66FF2DB2898BF61F7
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:58 +0000
ROA not before:           Thu 06 Mar 2025 02:36:58 +0000
ROA not after:            Thu 05 Mar 2026 02:41:58 +0000
asID:                     28368
IP address blocks:        189.84.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:26:fc:76:bc:f9:5e:3e:79:3b:c6:6f:f2:db:28:98:bf:61:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:58 2025 GMT
            Not After : Mar  5 02:41:58 2026 GMT
        Subject: CN=13346E89CB20915597921B6D2CC0EF89238AD426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:b3:61:51:06:c2:e3:92:87:83:ab:a5:52:
                    5f:13:b0:37:71:74:21:8f:90:eb:88:ce:79:a1:b8:
                    ac:99:41:2b:79:1b:e9:43:4f:b1:4c:e2:de:52:76:
                    49:56:22:48:1f:82:54:16:27:bf:4c:cc:8f:3e:b7:
                    e5:df:e5:47:0d:bf:3d:e8:b2:5a:81:2c:b1:3e:b2:
                    42:72:73:1f:5a:bb:fd:1d:c9:a0:8e:3a:aa:01:ba:
                    e8:4e:3a:4b:af:19:85:0b:24:7b:81:aa:3a:bb:e6:
                    cf:fa:91:e9:6d:ca:ec:51:a9:95:c4:d1:09:f5:a2:
                    26:1b:d4:fd:40:84:16:57:7b:1b:8c:e7:4a:98:d1:
                    34:ff:69:98:84:ac:53:bb:b5:a6:8f:c6:d4:d9:dc:
                    58:c9:c1:e6:db:88:a9:31:66:8f:0b:7c:86:64:70:
                    4e:fc:00:aa:57:af:d0:4c:fa:cd:ab:ad:6c:61:33:
                    2c:9a:49:53:c6:54:5e:6b:e1:55:f1:22:c7:64:56:
                    4a:b9:8d:c5:24:9e:5a:98:84:74:c3:5b:d7:0b:e3:
                    80:23:f6:48:9f:a4:6c:16:25:a9:ef:16:63:94:3b:
                    94:b1:6d:56:4b:20:d5:e2:8f:07:9e:22:1e:28:6e:
                    72:81:67:6e:df:c8:ca:2f:2d:1e:ba:3d:89:1e:41:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:6E:89:CB:20:91:55:97:92:1B:6D:2C:C0:EF:89:23:8A:D4:26
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:60:2f:8d:83:e0:10:cf:af:7a:4c:e8:6e:c3:6d:9f:74:
         25:82:74:e3:e2:b0:79:75:ef:11:e7:94:bc:c9:57:40:41:e2:
         ad:4c:17:55:34:60:81:60:89:e8:1a:8d:2d:39:21:de:ab:29:
         a4:5c:d9:00:19:0e:83:d5:99:57:f0:21:7e:4e:19:84:e4:cf:
         de:3b:e6:06:29:53:e0:d1:d9:53:05:f3:17:66:b4:05:c1:d0:
         0b:17:63:ab:1b:0f:c7:60:52:04:07:a5:cd:5b:29:27:61:21:
         05:70:db:fd:57:36:9d:ea:32:59:90:9d:ab:8c:10:3c:ff:05:
         14:25:fe:0f:53:2c:7d:0b:55:f5:4d:6c:6d:df:27:3f:f5:1d:
         d6:91:65:ac:00:5b:a7:2a:95:96:78:12:ea:5d:97:c5:6e:1b:
         d0:87:87:f7:6e:8a:2b:9e:95:a9:c1:f3:ae:b0:61:ff:5a:9a:
         ab:78:35:09:b6:e4:4f:10:18:ce:f7:32:a5:c6:65:58:bb:53:
         21:54:e6:d1:f2:bd:d1:bf:ff:b8:7d:23:a3:70:63:e2:a8:28:
         58:a3:2e:b6:b1:8b:61:9c:49:a1:49:43:b4:66:2c:1c:f1:32:
         f5:d3:a0:07:27:5b:25:34:fd:53:a0:0c:8b:db:5c:ce:09:86:
         d4:f7:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:16:14 2025 by rpki-client