Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132312e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3132312e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          xDN9SWmC+1qg8sd9xW2fF7tNi5k74DRfLM6W+Af+/vQ=
Subject key identifier:   06:99:15:59:8D:F8:9F:1A:D6:F5:AB:D3:A5:6B:36:06:92:84:A2:6B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       173DD00FF30C6CE0E89AE2A8E896F97B9A917496
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132312e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:54 +0000
ROA not before:           Thu 06 Mar 2025 02:36:54 +0000
ROA not after:            Thu 05 Mar 2026 02:41:54 +0000
asID:                     28368
IP address blocks:        189.84.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 08:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3d:d0:0f:f3:0c:6c:e0:e8:9a:e2:a8:e8:96:f9:7b:9a:91:74:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:54 2025 GMT
            Not After : Mar  5 02:41:54 2026 GMT
        Subject: CN=069915598DF89F1AD6F5ABD3A56B36069284A26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:8b:28:a6:8a:9a:af:b4:15:4b:cd:c6:75:
                    be:40:81:44:62:5a:7b:33:70:5b:62:14:2a:38:6d:
                    a8:8c:04:75:6e:4a:47:a2:a3:48:d3:c6:cb:ad:34:
                    62:53:e6:0f:01:ab:4e:d9:5c:1b:5d:e8:51:ac:bc:
                    59:54:1b:1b:35:99:69:47:78:b3:9a:2e:41:9c:fc:
                    6c:74:a8:b4:72:c2:bc:37:10:e5:b7:cf:53:24:72:
                    41:47:46:ad:22:45:f0:cd:69:3d:3c:b1:2a:b0:f9:
                    72:38:bb:08:f3:bd:9e:08:3b:69:ec:26:5e:ee:1d:
                    9b:a0:1b:c8:0b:e6:cf:62:15:58:89:cf:e3:30:6b:
                    14:d9:17:9f:b8:ff:70:00:4a:57:d8:78:c4:70:f6:
                    48:03:5a:45:85:c1:05:37:18:b4:92:ee:1f:77:0a:
                    bb:d5:aa:18:c3:7d:55:23:25:3a:aa:02:64:4e:ba:
                    e3:de:37:36:4e:c7:bb:9e:cb:0f:b4:c0:a2:73:af:
                    76:4b:6d:db:0a:dc:9f:45:94:8a:aa:5f:1e:a1:81:
                    ac:be:91:5a:fa:84:bc:08:32:c9:64:c4:99:51:6d:
                    87:5d:21:6d:dd:ec:0d:9f:4c:f5:eb:43:a7:3b:f2:
                    41:89:0c:73:a8:ae:c2:58:af:08:4a:f3:af:5d:a3:
                    d9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:99:15:59:8D:F8:9F:1A:D6:F5:AB:D3:A5:6B:36:06:92:84:A2:6B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132312e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:f7:ff:35:6e:21:16:3f:5d:3e:8d:75:e9:b4:0c:7a:db:
         51:48:59:95:eb:bd:9c:db:05:d1:8d:a6:ed:52:9b:63:b6:a4:
         7d:e4:16:7b:4f:f8:30:c9:2f:b1:bb:56:09:a6:25:8c:c0:e7:
         57:e8:02:81:0a:ce:97:de:14:e6:82:05:39:51:d0:8a:99:4e:
         7c:c4:4d:ec:49:bd:1c:b9:f0:01:cd:b3:c5:4d:ed:4a:ee:34:
         c5:6f:16:70:1a:88:d2:2d:9d:e0:cd:67:81:53:54:e4:5c:59:
         a9:ce:5e:26:03:2b:9b:e6:dd:a3:f9:06:54:ae:b7:37:72:68:
         e6:f5:73:4e:2e:06:97:60:29:16:69:e4:df:e4:66:34:81:28:
         10:8d:bf:13:33:0c:2e:57:0e:c9:f3:00:d4:1b:32:dd:c5:97:
         c2:45:d8:17:b6:1c:24:61:49:99:0b:d0:82:e3:4e:92:9a:11:
         b1:bc:4e:f2:93:6b:30:cf:04:30:64:15:b2:c3:a4:9a:34:4b:
         cd:32:fb:a6:93:b1:28:ce:ab:21:c8:8a:39:9f:44:69:f7:38:
         e6:fb:e7:aa:00:6a:5d:9a:f3:99:a4:2c:17:66:2f:e9:c8:4e:
         45:74:dd:4d:fb:dd:90:cd:48:a1:cc:3b:05:3c:8a:2a:ac:17:
         6d:39:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:05:09 2025 by rpki-client