Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132332e302f32342d3234203d3e203238333638.roa
File:                     3138392e38342e3132332e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          gGIoK0i+x0J/B0zg7xj4545b8prp4xG5xmFPhotq3/A=
Subject key identifier:   00:1E:C0:F3:ED:F7:FB:AC:D4:1A:46:8F:7B:CE:24:1C:E4:F3:75:D7
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7082010A4EA317494C6B2F2A932AAA2F0B546D54
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132332e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:51 +0000
ROA not before:           Thu 06 Mar 2025 02:36:51 +0000
ROA not after:            Thu 05 Mar 2026 02:41:51 +0000
asID:                     28368
IP address blocks:        189.84.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:82:01:0a:4e:a3:17:49:4c:6b:2f:2a:93:2a:aa:2f:0b:54:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:51 2025 GMT
            Not After : Mar  5 02:41:51 2026 GMT
        Subject: CN=001EC0F3EDF7FBACD41A468F7BCE241CE4F375D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:e8:c9:9a:1e:68:79:67:39:fd:5a:1b:08:
                    c7:ce:54:99:72:f6:65:cd:fb:31:fd:5a:3a:cc:6c:
                    7d:fa:6f:5d:4d:07:07:9a:af:1d:3c:8a:19:6e:0d:
                    b5:56:e2:db:ff:26:88:25:88:6b:4c:35:73:4d:e6:
                    f8:43:11:64:0b:5d:93:58:e8:9a:3b:fc:f7:9d:3a:
                    44:b9:18:fb:33:2d:2c:23:93:a6:5d:66:5f:66:54:
                    3b:9a:bd:ec:9c:b2:7c:77:b0:ae:5d:cf:e4:e7:eb:
                    f8:29:cc:59:b0:dd:1c:3b:f1:7a:63:d3:57:56:bf:
                    be:93:a9:74:7c:35:81:04:8b:42:e1:e7:f5:06:3e:
                    cb:b7:c8:a6:b7:26:60:e5:50:58:bf:84:87:a8:25:
                    e6:75:11:ca:58:3a:d8:bf:47:75:14:9a:00:70:4e:
                    7d:e8:d6:9c:87:24:03:8b:1d:00:9c:99:3c:ba:f5:
                    b4:89:c2:c1:7c:ca:44:1e:f5:15:0c:b7:99:03:d3:
                    da:41:3d:98:c5:27:41:5f:75:ee:38:fc:a5:91:8d:
                    9b:ff:a6:3e:2f:6e:56:00:3f:6c:8c:71:ef:42:bc:
                    e8:75:d9:fb:a3:ef:5b:ce:58:b1:12:d3:0a:07:c5:
                    3f:a7:88:c5:dc:94:2c:52:e2:7e:db:4c:9a:77:f5:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1E:C0:F3:ED:F7:FB:AC:D4:1A:46:8F:7B:CE:24:1C:E4:F3:75:D7
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132332e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:10:71:60:db:a8:e9:36:42:2c:df:1a:3b:7c:ef:34:fa:de:
         09:03:98:de:99:4a:ba:fe:10:d2:a0:fa:7b:71:b5:b9:45:51:
         05:79:97:09:cc:7b:25:8d:d8:a9:fa:b7:87:7b:64:71:e3:55:
         d1:1b:db:5b:71:51:21:84:8b:1d:58:c0:75:1d:d4:aa:86:8c:
         3a:d8:cc:08:b6:50:a3:0d:33:3f:68:a1:60:00:68:e2:ea:33:
         d4:d2:6f:c6:f6:76:0e:7c:1e:ce:2d:84:dc:4f:f0:2f:26:c7:
         6e:2e:3f:e7:d8:22:5a:16:00:cc:16:b0:e2:d6:eb:bc:6a:12:
         29:e6:32:44:02:ac:39:12:d6:33:67:62:fa:d8:69:20:f1:3a:
         69:bc:14:4c:d0:0f:cf:a7:30:98:f8:35:32:22:9d:f5:a8:89:
         94:bc:40:01:93:7c:e3:cf:0f:32:d4:b9:5a:cf:cf:49:0b:b5:
         ef:6f:49:0b:72:ef:46:66:a6:87:03:73:5b:c4:d8:81:af:db:
         1b:c1:7f:e1:b4:32:73:0f:d8:d6:f6:1d:f7:12:e1:1a:ff:7f:
         89:d9:6b:be:d6:db:e9:70:de:a2:df:af:e1:0c:86:2a:2f:7d:
         84:25:6d:81:dc:94:2f:94:ea:46:1b:90:bf:56:cd:4c:bd:54:
         f5:dd:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:10:10 2025 by rpki-client