Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          V6SqHyUgMw/LVQdEsUR++6io0i/ipuTd+XNtQVYcIOE=
Subject key identifier:   A2:78:BE:8C:69:40:48:C0:D6:B6:47:8A:51:80:98:53:3E:2C:2C:C4
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2BD08D02C6E3862812ED9E1DEA80CF9363D182D0
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:17 +0000
ROA not before:           Thu 04 Apr 2024 02:21:17 +0000
ROA not after:            Thu 03 Apr 2025 02:26:17 +0000
asID:                     28368
IP address blocks:        189.84.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:8d:02:c6:e3:86:28:12:ed:9e:1d:ea:80:cf:93:63:d1:82:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:17 2024 GMT
            Not After : Apr  3 02:26:17 2025 GMT
        Subject: CN=A278BE8C694048C0D6B6478A518098533E2C2CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:0e:16:af:b1:0a:93:fb:3a:c1:8a:5b:66:
                    54:10:10:69:39:d6:1e:92:4f:9f:c0:b7:ff:e2:45:
                    59:39:c4:41:c6:d3:a3:24:5d:d5:3c:b5:d3:36:2a:
                    65:0b:2f:e7:c5:56:a7:68:66:d5:3f:63:39:c7:28:
                    e2:f6:be:d0:86:2b:b0:68:19:05:e2:72:3a:6f:74:
                    aa:ea:f6:ca:20:cd:55:f3:5b:01:21:e2:fd:45:2b:
                    de:50:c7:33:38:49:22:db:87:11:e3:17:61:c7:0d:
                    2b:42:5b:6a:31:c4:a2:37:b4:21:df:81:f5:d4:fb:
                    36:a6:0d:e3:4c:d9:37:12:22:fc:af:c5:89:1b:45:
                    5a:bc:27:0d:52:56:5a:eb:bd:b4:63:ae:95:cb:23:
                    ed:93:16:30:df:76:4b:0d:ad:bd:5a:47:3a:1e:a0:
                    41:e6:be:a1:da:b7:31:29:c3:14:c9:a6:0a:bc:82:
                    5c:fb:c7:52:c7:e7:37:08:0c:3b:03:a4:3e:17:90:
                    d0:87:3f:f1:a1:da:54:ea:6d:b6:a2:14:b0:a4:fb:
                    5e:99:5e:f4:82:01:c3:d5:34:7c:0a:68:76:ab:16:
                    c1:32:41:6e:bd:01:a8:4e:60:f3:2b:03:ed:28:87:
                    f3:c0:21:7d:c2:16:66:8a:36:94:81:37:cf:f1:74:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:BE:8C:69:40:48:C0:D6:B6:47:8A:51:80:98:53:3E:2C:2C:C4
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:74:92:cb:b8:25:8b:02:b3:aa:8f:ca:0e:33:b8:8e:02:fe:
         2b:9c:57:ea:65:7f:51:0d:2c:9f:11:75:f0:04:26:21:eb:ce:
         80:9f:bd:30:09:ff:5b:0e:e0:e7:4c:96:61:1c:12:75:48:d8:
         70:c5:27:6a:e2:0d:f7:4e:6d:53:ce:c1:0c:6c:1b:24:38:41:
         f5:bd:a7:6e:50:f7:e3:46:09:a7:0f:c3:c9:8b:a6:7a:b6:3a:
         ab:b4:b3:ca:cb:7d:19:d4:3b:1a:4c:3a:b1:b6:52:3f:ef:f1:
         c1:09:90:8e:90:b0:8e:a7:0d:29:22:65:87:6a:0f:fe:0a:a3:
         f7:63:cd:2f:9d:d3:d0:1e:6d:c5:35:b1:27:b7:f8:3c:32:5f:
         82:7d:68:3b:d8:21:c1:3b:73:f8:92:17:1d:52:ed:e0:f1:55:
         9a:5b:95:b6:79:da:42:02:9b:0a:19:eb:33:c9:36:25:ff:aa:
         fb:79:a8:9a:54:b1:00:80:a2:e2:ee:f9:a3:c5:54:9e:b2:ad:
         0b:c6:12:3d:e5:26:7e:8b:0b:b2:8c:93:62:e3:7d:9b:a2:b5:
         67:77:31:82:4c:a1:97:ff:34:46:a8:14:f4:9f:d8:93:24:a1:
         83:de:2c:56:ad:05:6f:b1:06:5d:d8:5a:16:bf:cc:cc:3d:8e:
         08:3e:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org