Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3132302e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          93nslZ4wv2Nvu7Mbex2GFDqgE1a3ne/9RICKIUCrGwQ=
Subject key identifier:   A4:E5:17:80:70:23:22:53:6D:ED:93:95:DE:BF:04:D5:D6:F9:77:39
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6D5B634A9BDE7A8F563D024BF186F33FA9A72414
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:09 +0000
ROA not before:           Thu 04 Apr 2024 02:21:09 +0000
ROA not after:            Thu 03 Apr 2025 02:26:09 +0000
asID:                     28368
IP address blocks:        189.84.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5b:63:4a:9b:de:7a:8f:56:3d:02:4b:f1:86:f3:3f:a9:a7:24:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:09 2024 GMT
            Not After : Apr  3 02:26:09 2025 GMT
        Subject: CN=A4E51780702322536DED9395DEBF04D5D6F97739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:0b:b4:d3:b1:42:25:21:aa:a9:4d:15:cb:
                    62:f9:55:c4:8e:ad:f4:fe:12:a4:fb:25:59:c1:e9:
                    16:02:c0:c7:d0:fb:8d:10:d8:59:c4:94:33:61:31:
                    44:5c:92:4e:d1:9a:0a:93:6f:a7:1c:32:33:ed:ec:
                    02:55:62:20:49:60:aa:bd:e1:09:a6:ef:45:99:16:
                    55:5d:d8:d6:a0:a6:d8:20:10:49:eb:8f:7b:d4:9d:
                    c6:2d:bb:e8:97:b6:1d:75:99:a4:85:13:37:88:e2:
                    88:d4:75:3f:63:e4:ee:fd:21:23:ee:d3:ef:be:f0:
                    6e:75:82:31:04:70:05:41:57:0b:9d:66:e8:d8:37:
                    5c:c8:0c:9f:a0:c9:0d:43:b5:c3:5e:31:6e:c4:50:
                    25:c5:54:3f:c9:d2:cf:ec:1c:9d:43:ca:63:43:c2:
                    b8:47:11:2e:18:f8:b0:e3:81:4d:e5:ca:6e:17:dd:
                    22:8f:6c:eb:8c:00:28:43:fa:35:00:c1:c7:f1:0d:
                    ce:ab:7a:c8:fd:5a:6c:dd:38:c4:d5:da:d0:b0:7b:
                    38:2c:26:6c:a4:a5:36:42:a1:11:55:b1:59:99:7d:
                    15:4a:49:50:39:cd:52:c4:00:6e:21:fe:8b:dd:2d:
                    3e:d3:f2:57:84:63:7c:55:a9:f6:1b:77:a2:ed:9e:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E5:17:80:70:23:22:53:6D:ED:93:95:DE:BF:04:D5:D6:F9:77:39
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:61:59:20:e6:bd:c4:e0:40:e0:21:0a:65:09:4e:dd:e6:62:
         82:d2:11:cf:42:05:01:cf:56:95:d6:b4:7c:d1:33:9b:6e:21:
         68:fb:79:ae:69:cf:e4:66:4d:72:71:47:2a:be:15:ad:66:d4:
         69:9f:40:49:01:3b:27:e5:a1:ef:ea:a7:22:8f:5a:b8:71:18:
         03:bb:84:4d:c4:f5:da:f6:19:2b:51:0d:45:a4:64:a4:32:c0:
         17:4c:3f:49:15:59:e2:fa:7f:48:a4:f4:50:0b:aa:51:24:7e:
         9d:1a:0a:bf:b7:7e:d6:ed:00:6b:47:77:69:92:73:42:90:e3:
         23:5d:a9:cb:74:d4:de:13:f3:87:2f:01:c5:1c:ac:4a:d3:ca:
         ef:19:73:63:58:ca:72:fd:e0:1d:b1:7c:70:a3:c1:c8:bd:31:
         a4:cd:97:5b:a8:9d:08:50:17:76:e0:94:9f:e8:d3:63:eb:eb:
         d2:7e:7b:15:5c:32:ad:8f:77:40:ce:dd:57:2f:a3:38:4c:6f:
         b9:f3:34:b9:3a:14:45:01:e6:7e:36:13:94:82:6e:a3:9f:af:
         47:40:ae:79:e1:f9:44:bb:52:bf:18:d5:91:94:e3:43:a4:c7:
         63:e2:a6:38:6d:37:78:1c:b6:a7:d2:23:99:ee:0a:5c:0d:2b:
         e0:fb:72:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:16 2024 by rpki-client on console-ams.rpki-client.org