Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132362e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3132362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          bMXlhs7idKplJdeh7vAFZbTwKJdWEEqjXuje48DEIs8=
Subject key identifier:   EF:7F:9B:DC:BE:55:D4:13:4B:3B:59:77:EA:7E:12:F5:28:72:8A:BB
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1964E58CD25DB74FE34A94E8686D2F75DE72CA98
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:14 +0000
ROA not before:           Thu 04 Apr 2024 02:21:14 +0000
ROA not after:            Thu 03 Apr 2025 02:26:14 +0000
asID:                     28368
IP address blocks:        189.84.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:64:e5:8c:d2:5d:b7:4f:e3:4a:94:e8:68:6d:2f:75:de:72:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:14 2024 GMT
            Not After : Apr  3 02:26:14 2025 GMT
        Subject: CN=EF7F9BDCBE55D4134B3B5977EA7E12F528728ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:18:41:2d:9f:48:7e:e8:95:52:ad:5d:d7:e1:
                    f8:47:93:af:cf:a2:9a:d9:d2:6c:e0:36:cb:e0:b3:
                    ba:6e:e3:f0:ee:1d:b7:a2:5b:49:72:cc:fd:a6:bd:
                    36:98:6a:9b:d4:8c:d0:d8:77:e5:ec:30:07:60:36:
                    c1:aa:a8:32:1b:81:f9:2d:f6:a7:e7:54:0e:e4:c9:
                    d4:2d:91:87:e8:75:80:34:72:50:b6:f4:ed:e6:9d:
                    49:bd:63:c1:79:57:ae:c2:80:43:a4:08:a1:cd:28:
                    52:57:bd:28:b4:28:86:48:0a:7d:7f:cb:bc:90:11:
                    85:c0:1f:db:93:66:41:ee:1c:36:ed:6d:cc:6a:fb:
                    ff:0a:fc:e8:f2:ef:3b:27:ea:92:fd:88:28:14:8b:
                    64:08:77:3d:e2:77:e5:e2:1b:02:ff:c7:79:cd:ee:
                    58:c5:9e:73:b7:20:40:2a:67:d8:a0:05:8f:45:99:
                    78:68:36:3d:e7:be:a3:da:7b:d6:47:10:3e:b8:47:
                    93:38:38:75:56:91:cc:d1:8c:4e:d5:88:fd:b8:6c:
                    63:fc:ed:21:77:10:e8:49:95:f3:2a:ad:cc:a3:3b:
                    46:cf:bb:49:4d:9b:74:89:0f:f8:b2:ff:36:9b:cb:
                    98:75:ec:bc:91:d7:01:e7:a1:35:92:9d:fe:e0:5e:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:9B:DC:BE:55:D4:13:4B:3B:59:77:EA:7E:12:F5:28:72:8A:BB
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:24:5b:71:c7:2b:56:3d:8f:53:a8:d1:f1:80:fa:b3:8f:
         e4:25:62:c4:ff:63:c1:ef:cc:95:02:88:77:cf:1c:b2:d2:b4:
         c5:2c:f0:76:f0:bd:76:20:d1:0d:78:db:f5:13:eb:f0:bf:5f:
         ca:5d:8c:82:dd:19:1a:0d:1e:a0:c6:0e:c0:22:90:7e:48:4d:
         42:58:07:c6:f6:80:b0:b8:bf:c2:5e:ec:9e:2e:49:3e:9d:77:
         e9:b0:d5:81:33:b2:62:af:56:f9:8b:a1:c0:4d:7e:12:a6:82:
         8f:f4:d9:a8:0f:d0:f5:5b:73:31:10:89:ea:7e:3a:ae:6f:46:
         d9:77:af:f5:1e:79:a5:73:ac:8f:09:9f:22:bb:68:ec:94:05:
         52:a6:67:75:c7:2e:16:75:b7:0f:f8:4d:18:ed:32:71:20:90:
         48:e8:f8:31:1d:0c:dd:69:2e:47:a7:d2:a2:17:cf:07:ea:f1:
         07:07:42:56:7f:ef:78:84:a1:f3:a3:c9:26:b1:f3:99:92:4c:
         42:ad:a9:8f:1a:d0:e8:3f:d8:a5:b1:fb:82:56:52:b8:43:d0:
         5b:53:fc:3e:79:b2:5b:f3:e4:66:4e:49:16:c2:77:01:04:65:
         99:90:5a:c5:35:41:de:74:d7:fd:da:4b:52:dc:e3:c3:42:26:
         19:ad:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org