Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          nRvBqKUXp7ohhtl4vEg9iuZfFa1SbcE9DVDiUNz2M7E=
Subject key identifier:   A1:67:8C:26:18:5C:CA:99:C1:0D:40:F5:69:B1:48:07:10:8D:19:A5
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       25D145797BCAA33F6CE6143B1862CD0F32D931B6
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:01 +0000
ROA not before:           Thu 06 Mar 2025 02:37:01 +0000
ROA not after:            Thu 05 Mar 2026 02:42:01 +0000
asID:                     28368
IP address blocks:        189.84.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d1:45:79:7b:ca:a3:3f:6c:e6:14:3b:18:62:cd:0f:32:d9:31:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:01 2025 GMT
            Not After : Mar  5 02:42:01 2026 GMT
        Subject: CN=A1678C26185CCA99C10D40F569B14807108D19A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:81:54:db:c2:0e:05:fc:04:c7:92:0f:8d:
                    e4:f0:1f:12:aa:7c:94:c7:16:4a:e5:93:43:16:24:
                    61:a1:aa:27:15:dd:15:07:3e:d8:cd:33:d9:6f:2e:
                    bb:b7:a9:47:ea:63:6e:a0:86:d7:4d:f1:d0:02:47:
                    b8:55:25:b7:8e:b4:53:96:fe:c7:6d:19:3a:f6:fe:
                    5a:83:6b:22:c4:a4:c9:6b:4c:04:ca:49:78:92:5f:
                    e1:9b:69:39:86:b2:9a:be:7f:77:b5:e0:81:61:4a:
                    cd:ae:7e:cb:3a:0b:57:f9:14:6e:f4:1e:f1:cb:ec:
                    53:4c:c0:f7:76:cb:dc:df:36:77:ac:1a:68:b4:4e:
                    ea:fe:84:cd:24:65:0a:bc:7d:88:7f:6c:f5:ff:8e:
                    97:eb:f9:45:79:9f:1e:01:9e:02:ab:08:85:2b:de:
                    5f:de:73:df:e5:7e:31:2c:4c:8b:d6:b2:74:01:67:
                    c5:02:34:c9:a1:4b:bc:ca:8b:10:85:11:f0:84:b4:
                    b7:4c:20:6a:d7:e2:7e:d4:86:37:b3:e1:0f:4c:ac:
                    69:25:88:e3:01:28:85:93:c9:40:46:20:b2:02:93:
                    18:ee:22:cc:e8:7a:4a:48:ac:93:9e:38:fb:6a:33:
                    51:22:00:be:4f:89:53:55:48:e8:12:03:ac:a2:fb:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:8C:26:18:5C:CA:99:C1:0D:40:F5:69:B1:48:07:10:8D:19:A5
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:fa:1a:a6:eb:86:2c:5b:a0:4a:7e:fe:e2:71:46:3f:18:
         0b:0f:36:44:3f:ce:56:30:f3:93:54:5b:46:2b:df:e5:e3:45:
         58:b8:2b:2e:c8:c1:cc:3a:fc:8a:6a:6c:be:d2:ea:e3:cf:04:
         ff:f2:19:33:9e:4b:ba:88:d3:82:fe:86:9a:72:6c:ea:72:1d:
         6f:a3:56:81:5a:9f:f8:6f:87:3d:41:22:e4:90:70:6e:58:c8:
         3a:81:51:3a:5a:f7:9e:a3:6d:62:38:37:35:ba:d5:f4:60:1e:
         f2:7f:2a:90:0e:27:d3:d4:dc:eb:b2:16:01:6e:7a:71:8d:60:
         c0:df:7e:d4:43:95:b4:49:ad:05:9a:0b:4e:39:d0:9a:e3:2f:
         26:b4:8c:1e:06:f1:af:13:a4:f2:2f:bc:1a:a8:7c:2b:01:39:
         3e:b9:f1:d9:a6:83:40:cb:2f:da:55:d0:49:d1:9b:06:c1:03:
         c1:4a:dc:34:17:65:aa:1e:cc:ba:2e:da:c2:c7:e6:0e:cc:27:
         84:a4:e9:b1:1b:67:14:ec:64:37:e1:af:1b:40:a0:47:f9:c0:
         29:8a:cc:87:86:70:56:6e:b5:5c:5a:cf:6a:d0:08:f9:5b:3a:
         f3:b2:4a:bb:6f:ed:f9:e3:53:6d:61:3d:e3:63:fa:cd:b8:a8:
         21:ce:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:22:48 2025 by rpki-client