Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132322e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3132322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          yFGYX9CNn1bpZmni61f2YzjRLRUsaowML3Gc8Dy1ark=
Subject key identifier:   42:47:90:A4:EC:49:B8:CF:FF:89:2E:80:93:3F:F8:BF:58:D4:A4:B0
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       278D14C6FFAB2090BE3C2BED267C140E2D880EED
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:14 +0000
ROA not before:           Thu 04 Apr 2024 02:21:14 +0000
ROA not after:            Thu 03 Apr 2025 02:26:14 +0000
asID:                     28368
IP address blocks:        189.84.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8d:14:c6:ff:ab:20:90:be:3c:2b:ed:26:7c:14:0e:2d:88:0e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:14 2024 GMT
            Not After : Apr  3 02:26:14 2025 GMT
        Subject: CN=424790A4EC49B8CFFF892E80933FF8BF58D4A4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:5e:88:58:37:0d:7a:cf:ed:62:e8:18:5a:
                    c3:89:71:15:9d:ef:0c:04:97:93:e9:36:d3:54:c7:
                    6f:ca:af:80:9f:ae:c4:f6:e8:99:6b:3d:0b:9e:b4:
                    4b:0d:81:e5:72:a7:a6:22:25:35:89:e1:a8:36:c7:
                    6e:fc:62:4f:4c:7c:42:73:1c:c2:8b:cf:01:8b:4b:
                    6f:d2:cf:65:f5:d3:1e:4e:dc:dc:dd:4a:48:23:dd:
                    a8:26:9b:41:45:90:46:d6:96:9f:dc:ac:af:98:dc:
                    61:0c:0a:f1:f5:e2:04:e2:47:82:ee:de:c9:5a:62:
                    7d:e7:be:8e:b0:75:77:91:35:a3:8b:6c:e3:de:6d:
                    60:4a:c6:08:c3:09:23:d2:7e:02:69:59:41:3b:81:
                    3a:a8:14:a3:4a:f4:a5:a7:09:51:1c:ea:2f:e7:51:
                    78:32:d1:10:40:bb:46:03:02:22:31:9b:df:48:86:
                    f6:a0:85:36:15:6b:a2:56:16:09:d6:a7:77:a7:34:
                    eb:99:8a:eb:3f:c9:0a:f2:0e:db:96:fe:92:41:fd:
                    2d:4e:5f:e7:3f:0b:1f:a5:e1:d0:f9:64:75:1a:20:
                    38:0f:57:57:26:e7:94:6d:f0:e9:bd:58:9a:ac:02:
                    c2:8b:1b:98:57:a1:4f:55:bd:88:5a:13:e7:0d:5e:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:90:A4:EC:49:B8:CF:FF:89:2E:80:93:3F:F8:BF:58:D4:A4:B0
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1b:03:27:c7:a9:9e:a0:1d:70:4a:99:ad:08:0e:aa:1d:60:
         bd:34:54:35:18:a4:5d:25:b4:05:00:fc:32:ee:35:c2:4b:ca:
         a1:c6:53:e3:6b:99:21:b9:62:66:4b:12:8b:01:6c:fb:c6:4c:
         d0:29:9d:b1:94:a7:40:15:01:36:ea:53:ef:8e:ef:24:43:f4:
         f9:65:14:c4:93:02:82:6a:0c:9a:26:7f:1a:ff:ca:22:da:08:
         32:5e:e4:45:ef:98:bd:36:be:1e:0f:1f:eb:30:a7:83:fc:4a:
         a8:b4:10:9d:db:cb:32:89:09:ea:6f:aa:b0:41:59:d3:5b:56:
         b5:62:95:64:81:f1:c4:c7:26:2d:82:3c:80:2e:91:aa:51:d5:
         c6:bc:5e:79:e2:d3:65:a1:b9:1e:24:61:c6:c2:ab:e8:33:4b:
         15:ee:b0:b4:a2:d0:e3:2e:8b:50:3a:41:c4:c7:6d:01:55:eb:
         e4:55:66:dc:d3:b9:fb:3e:03:c7:52:11:ef:5e:bb:73:dc:a6:
         4a:c3:aa:b0:d5:fd:6c:d0:88:39:c2:88:e3:c4:d7:1d:c2:0b:
         56:8d:1b:4a:59:42:a3:dd:5f:38:80:b5:49:27:10:37:4d:de:
         56:5a:d0:f5:81:84:5a:45:6a:80:5c:84:a4:96:b2:0b:e3:f4:
         be:77:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org