Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          NxlhvoLMYoExPxeyjfo9txNexvrgqNT0Xc0Gl/iMmHw=
Subject key identifier:   22:B5:D1:32:69:76:31:D5:21:FE:CB:69:34:BC:3B:58:8D:6F:4D:DF
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3CE1F059D9EFA5C5D5F9542AB5862CA8A83255BB
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:10 +0000
ROA not before:           Thu 04 Apr 2024 02:21:10 +0000
ROA not after:            Thu 03 Apr 2025 02:26:10 +0000
asID:                     28368
IP address blocks:        189.84.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:f0:59:d9:ef:a5:c5:d5:f9:54:2a:b5:86:2c:a8:a8:32:55:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:10 2024 GMT
            Not After : Apr  3 02:26:10 2025 GMT
        Subject: CN=22B5D132697631D521FECB6934BC3B588D6F4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:16:89:f1:cd:32:70:01:20:14:02:90:6e:d4:
                    bf:b2:13:31:bc:f7:ca:eb:e4:c2:65:cf:ab:fd:bc:
                    19:fb:cd:36:db:40:0d:c3:6c:75:a4:ca:b1:c6:a3:
                    17:6f:76:1d:12:f1:b8:00:ec:52:f3:b8:37:2e:e8:
                    62:3a:e6:61:b4:0f:5d:7b:bb:f2:0f:30:d3:b0:9b:
                    75:7c:ed:46:2f:44:da:d9:34:72:e9:e0:97:d8:8a:
                    15:00:f2:f8:67:22:35:41:79:de:be:86:e2:77:73:
                    a8:79:fc:4f:68:4b:5c:53:bb:8b:ce:53:61:77:56:
                    b5:db:09:45:84:1b:e7:0a:0e:b7:55:46:b0:65:14:
                    f8:19:65:42:d8:8f:7f:89:ce:6a:99:83:5b:f8:69:
                    b8:fb:76:91:5b:ac:0a:21:92:f3:81:fa:e9:86:04:
                    11:d1:49:88:0e:77:65:c5:78:14:14:43:f6:87:20:
                    6f:3e:44:47:d8:b9:c6:c6:db:8a:a0:00:83:b5:cc:
                    d7:30:83:7d:59:eb:bd:d6:f2:01:8e:e9:ef:42:e1:
                    04:c7:fc:0f:06:e4:7a:05:f1:93:2c:aa:e8:19:ed:
                    b0:dd:f4:1d:63:0e:23:1d:13:e5:3a:50:02:7e:36:
                    ac:74:12:f6:12:ca:95:3b:80:1e:f5:cc:2b:2c:e4:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B5:D1:32:69:76:31:D5:21:FE:CB:69:34:BC:3B:58:8D:6F:4D:DF
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:db:8e:98:06:49:e7:41:86:b1:63:b1:3b:9e:59:f0:70:
         df:68:f6:e2:aa:9e:52:f1:7d:07:e7:5d:ce:0c:b7:7a:e1:76:
         bc:eb:db:6f:b3:c9:1b:ad:1a:aa:16:7d:0c:21:15:da:b5:6d:
         d9:25:b9:72:15:f4:fd:18:ad:98:0f:03:fd:d5:b7:3c:7e:12:
         cd:5a:47:49:1e:bc:a7:8c:67:68:6b:b0:d2:4d:ba:6a:89:03:
         b8:59:2d:c8:4d:78:e6:87:4a:7f:c1:51:e3:54:f0:24:5e:d1:
         54:70:19:c6:af:4f:0d:88:09:5d:96:40:28:34:ef:e7:4c:2d:
         a9:ea:cb:b9:35:23:42:52:26:0c:36:e4:a8:0b:33:86:78:2b:
         8f:e5:c4:35:2c:f4:cb:72:80:bf:d4:f1:72:6d:de:d9:39:60:
         72:38:41:a6:ab:0c:91:44:a1:ae:88:63:ab:04:a4:d7:9e:0c:
         3f:bf:30:4f:a9:c0:6d:d7:bf:ae:43:d7:a9:b3:0b:2a:14:3e:
         aa:fc:0c:9e:c0:02:53:12:f4:d9:b3:1c:cf:bb:be:07:09:e3:
         91:80:59:94:62:af:62:b9:09:0e:c8:5e:04:7d:b5:1c:3e:bc:
         ab:2d:70:4c:a8:f3:6c:85:17:e8:ed:df:2c:dd:56:20:9c:37:
         6b:9b:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:16 2024 by rpki-client on console-ams.rpki-client.org