Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3132302e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          toTiT2evrgkmyIgfyMbt3A+APK01b32lyhAbbYXwygY=
Subject key identifier:   94:26:0D:F8:D0:00:B4:D0:4A:8B:1D:02:B9:34:AE:FB:46:01:D5:6A
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0D07B692E735FD660AE100C30917CEBD64651A0B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        189.84.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:07:b6:92:e7:35:fd:66:0a:e1:00:c3:09:17:ce:bd:64:65:1a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=94260DF8D000B4D04A8B1D02B934AEFB4601D56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:f1:d2:ab:a8:cf:0b:e3:8d:ea:9f:b2:03:
                    77:71:c3:6f:86:db:2b:a9:3c:41:aa:e8:7d:26:9a:
                    f9:5e:a8:fd:c3:ef:3e:21:e1:e1:60:a2:81:eb:d0:
                    39:e1:57:4d:0f:00:9c:bf:9f:04:96:88:dc:84:a5:
                    3f:5b:5e:4b:b8:cf:17:fe:a1:ed:ea:4c:d6:5f:fb:
                    04:69:6a:6d:af:c9:94:7e:05:29:44:fc:8d:3d:ac:
                    48:c7:ec:5b:ac:7c:c6:99:8e:63:f3:17:b1:8b:af:
                    59:d9:bd:a8:3b:46:df:88:b5:40:10:9e:3d:e5:69:
                    42:c4:3a:c0:45:51:0d:dc:d2:fe:1c:31:43:36:74:
                    a8:13:b8:4e:8a:68:24:de:86:77:ad:96:c8:e7:41:
                    73:24:27:b4:0a:b2:4e:74:35:f0:ac:cc:29:22:2e:
                    f1:80:58:5c:74:3c:88:4d:03:67:2a:ae:de:05:77:
                    8e:41:b8:c4:37:9f:38:d4:d7:98:15:84:c0:56:a0:
                    22:37:9d:2a:f2:43:47:15:fc:fe:8a:55:d2:83:7b:
                    b8:b0:f0:56:40:75:0e:64:33:3e:4e:db:e6:9a:8a:
                    3c:ad:6c:e4:ce:7c:65:8b:03:2a:4e:d2:49:64:3c:
                    5d:e4:38:32:8a:03:bb:7e:24:f8:40:b1:55:92:3e:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:26:0D:F8:D0:00:B4:D0:4A:8B:1D:02:B9:34:AE:FB:46:01:D5:6A
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:24:5a:4e:73:c9:b2:b9:a4:33:a8:7a:03:c2:52:4f:fd:45:
         7e:fd:7c:0b:34:66:18:09:30:48:0b:61:a2:43:f6:14:49:88:
         24:7c:5a:fe:5c:18:7d:01:19:d0:cf:1d:42:80:53:1f:11:43:
         bb:60:47:84:60:a1:73:eb:7a:fb:26:3d:b8:27:37:8b:22:c7:
         d6:5a:ef:f2:64:81:ab:a8:f9:80:29:c8:87:83:dd:bc:d3:91:
         fe:30:3d:4f:8c:67:88:c9:06:14:a2:89:75:48:20:5b:8f:94:
         89:70:72:f5:74:ef:7a:bf:9c:38:59:0c:e7:03:e7:aa:fa:80:
         c9:06:ea:13:eb:83:0d:9e:3a:5c:01:41:49:72:f5:fb:49:67:
         cd:1f:55:c6:eb:df:50:0c:02:c6:9b:f3:4c:56:eb:b7:46:d1:
         79:ad:39:3f:f6:3e:f8:8a:81:b9:42:27:a7:b8:1e:6a:ff:44:
         e7:e8:1f:88:0e:0e:b5:4a:32:0c:68:74:f3:ab:2a:8d:e4:d4:
         79:55:64:88:3a:1f:1b:f9:38:f8:13:44:0c:70:e5:b0:c4:73:
         bb:bd:ee:d2:fc:16:7d:bc:59:f5:cd:55:2f:01:72:5c:ce:5c:
         b1:70:e2:34:d2:3a:d5:81:76:4c:8f:2c:19:7f:f7:65:79:23:
         a2:37:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:23:10 2025 by rpki-client