Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32312d3231203d3e203238333638.roa
File:                     3138392e38342e3132302e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          eYTA6E1ngnN9eQo0h/hkcP05hWvXaIu6BefBBvSueug=
Subject key identifier:   42:8D:86:E0:D3:58:C7:6D:C5:63:DF:63:8B:C4:15:DD:5A:87:EC:B0
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       64FD3E38884483EB5D663A48B9831D93057F4319
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:01 +0000
ROA not before:           Thu 06 Mar 2025 02:37:01 +0000
ROA not after:            Thu 05 Mar 2026 02:42:01 +0000
asID:                     28368
IP address blocks:        189.84.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fd:3e:38:88:44:83:eb:5d:66:3a:48:b9:83:1d:93:05:7f:43:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:01 2025 GMT
            Not After : Mar  5 02:42:01 2026 GMT
        Subject: CN=428D86E0D358C76DC563DF638BC415DD5A87ECB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:2a:07:bc:9c:83:9a:08:d1:3a:ad:41:ca:
                    39:7b:68:d8:ed:4c:7c:ed:ed:12:e2:ac:26:31:b4:
                    62:4a:c3:73:f0:c9:c1:89:5b:08:b0:12:65:55:e8:
                    21:9c:70:57:2f:24:2d:63:a9:f8:e8:d4:31:39:8e:
                    a5:41:fa:e5:3f:89:51:51:18:76:0d:af:a2:23:61:
                    1f:c5:2e:cb:56:f0:7a:ce:ae:fe:cd:28:d1:da:81:
                    38:3e:43:25:d0:cd:fc:93:17:7b:d9:9c:e3:87:fa:
                    5b:39:9b:84:a4:5f:bd:a0:59:e6:37:68:28:a1:2e:
                    dd:b5:a4:1c:70:e3:62:d7:fb:fd:e6:db:ac:88:f5:
                    66:2f:c5:2f:ed:17:31:fe:b8:df:3f:ab:dc:20:54:
                    9f:5f:82:18:2e:79:c1:ef:d0:15:7e:07:fb:7a:e4:
                    16:41:6f:f6:dd:9d:68:d9:35:e8:08:b2:41:86:7a:
                    41:c0:8b:d6:89:ed:28:b4:57:60:e6:c2:56:04:50:
                    54:47:83:c1:7c:da:20:5a:36:bf:60:c4:46:29:c9:
                    45:e1:3d:34:ee:1f:be:b2:3e:f5:8a:10:81:87:3f:
                    9a:58:63:75:48:62:ee:88:2e:c7:d6:11:5b:a7:a6:
                    49:2f:d1:5e:32:77:94:81:f8:75:c4:8d:23:5d:e2:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:86:E0:D3:58:C7:6D:C5:63:DF:63:8B:C4:15:DD:5A:87:EC:B0
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:dd:4a:fc:f6:a6:54:c0:40:87:44:a1:27:4b:31:fc:59:
         e5:c0:d4:c2:ac:fd:60:88:cc:2b:3a:7e:27:75:24:12:4f:96:
         6e:bb:98:36:07:2a:d6:78:92:95:71:60:a2:70:42:80:e8:c6:
         db:6c:af:1e:63:20:c4:85:7f:03:f7:54:a9:c6:c2:e5:4e:78:
         b5:f5:e2:e4:98:f6:eb:2c:b3:20:d9:69:51:8d:74:14:9a:b4:
         be:0d:ed:dc:a3:f5:26:fb:a7:cf:cd:76:92:e0:89:5d:a1:8e:
         f2:e0:dd:70:ca:a7:9d:db:22:b4:e7:d8:ff:90:f8:21:aa:1a:
         31:8e:78:16:84:b4:d3:17:ae:ed:ad:1e:1c:d0:05:d4:3a:f9:
         c7:af:bd:22:2b:0b:09:a0:b8:d5:ba:16:b3:ae:80:00:62:46:
         0c:cc:1b:c3:27:c4:34:4c:dd:53:f9:d9:23:83:dd:b7:46:31:
         2a:89:c2:e5:19:a3:22:2d:c4:dc:7c:af:56:35:4a:d5:75:ef:
         4e:f0:55:81:6d:8b:61:ff:23:2f:d9:f0:15:b4:ff:ce:b1:aa:
         53:b7:50:33:de:31:4c:32:b5:3e:1e:a7:0f:77:97:a2:2b:bd:
         cd:ee:54:0e:0b:ee:77:9b:a1:d2:ea:97:7c:83:92:1a:51:4d:
         64:41:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:54:01 2025 by rpki-client