Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa
File:                     3138392e38342e3132342e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          0YkbtPb4eQMqFNnBkmK4x28YexQsi7ph8YD7d5JnCys=
Subject key identifier:   23:40:64:89:C0:51:2D:12:FD:D3:01:E0:28:41:A2:B8:B4:BE:AA:18
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1FD509C1844DC4B8A785FA673F1834D4D6CDD648
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:12 +0000
ROA not before:           Thu 04 Apr 2024 02:21:12 +0000
ROA not after:            Thu 03 Apr 2025 02:26:12 +0000
asID:                     28368
IP address blocks:        189.84.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d5:09:c1:84:4d:c4:b8:a7:85:fa:67:3f:18:34:d4:d6:cd:d6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:12 2024 GMT
            Not After : Apr  3 02:26:12 2025 GMT
        Subject: CN=23406489C0512D12FDD301E02841A2B8B4BEAA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:c3:49:bd:d6:a4:09:a8:98:79:0e:74:40:
                    2f:f5:a9:8c:6c:03:1c:19:59:0b:a5:51:f9:e6:30:
                    7b:90:92:87:e2:62:3a:8b:82:ae:9a:c2:f2:c1:a8:
                    a3:03:b9:6a:62:fd:d8:a7:01:1c:d4:1e:f2:a3:fe:
                    b0:07:8d:40:53:46:21:0d:4a:5a:2d:a6:0d:00:43:
                    bb:05:c8:1d:7f:ca:7c:4c:29:79:4f:89:bf:5c:21:
                    a1:36:03:82:03:93:26:9c:b4:2a:60:1b:ba:1d:97:
                    a0:40:91:65:f7:ae:b9:24:36:78:41:5a:29:61:f2:
                    58:4b:f5:7e:90:f5:f0:32:e2:3f:01:07:2d:ae:fa:
                    69:41:1e:5a:60:e2:fe:d9:9a:93:f6:20:9d:59:d1:
                    33:e2:35:1a:09:6a:08:af:63:19:7d:9a:e9:9a:48:
                    66:1e:db:25:42:52:75:0e:8d:78:f8:f1:e6:72:21:
                    48:f5:39:47:73:8c:f6:17:15:3b:36:28:c9:4b:80:
                    c5:25:f3:b7:50:fa:30:75:cc:9d:e2:b8:f3:0b:a6:
                    0a:85:57:4d:d1:3b:0b:9e:ff:3c:45:6c:53:59:3b:
                    e6:cb:b5:8d:18:4e:63:00:f6:01:30:63:70:ae:4f:
                    35:ff:35:ff:da:ad:79:ea:00:77:90:7a:82:42:d9:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:64:89:C0:51:2D:12:FD:D3:01:E0:28:41:A2:B8:B4:BE:AA:18
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:49:29:c2:49:e0:d4:83:db:05:d6:e3:4d:f0:dd:3d:aa:
         3c:b3:45:ae:7b:e1:e5:35:38:2f:20:dc:96:c6:cb:89:0d:f3:
         8c:39:6f:71:03:e5:82:85:66:3a:2c:1d:b0:50:22:c5:bc:ea:
         68:e1:16:f5:1a:e7:4c:0e:d8:10:b6:de:f7:63:ef:7c:c9:9b:
         cb:5e:e0:0b:40:8d:60:25:3a:0d:3b:1a:5b:9f:3f:a1:6f:9c:
         a7:eb:a9:a5:95:4b:05:89:f4:1b:dc:d9:32:90:cb:3c:58:24:
         53:0e:85:5d:cf:f1:e5:5f:c5:2f:fd:7b:eb:c2:9b:7c:07:ba:
         46:be:8c:0e:db:87:ce:98:93:7c:10:5b:a3:ed:06:b9:b5:cb:
         85:54:2f:87:b0:98:eb:69:33:8b:4e:f9:56:be:2e:aa:c4:d9:
         cf:e6:70:14:8d:02:01:92:4a:e3:58:d1:a2:7b:4f:33:f8:d5:
         ed:f1:d1:96:46:b0:a9:11:ee:a8:b7:00:37:bd:60:bc:b8:2c:
         bc:95:cf:34:85:80:55:d3:c4:19:a5:2b:1f:c3:04:62:07:fc:
         b6:99:41:b9:2a:27:f1:59:22:c0:b9:17:e0:0b:00:9a:06:33:
         aa:b8:f2:44:62:f0:49:5d:04:ab:7b:dc:b8:51:c1:e9:1e:9b:
         46:4e:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org