Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          J4v3DXJ+uO/dTOx7dgTVZIODuDANyI3hk2ISAUU2xqI=
Subject key identifier:   A4:23:C3:3A:EA:B5:02:0C:E5:1F:AE:AD:E8:6A:53:80:48:CE:F1:EE
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1F5E176D5A790FA64A34879E6588922861A80E0D
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:52 +0000
ROA not before:           Thu 06 Mar 2025 02:36:52 +0000
ROA not after:            Thu 05 Mar 2026 02:41:52 +0000
asID:                     28368
IP address blocks:        177.200.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5e:17:6d:5a:79:0f:a6:4a:34:87:9e:65:88:92:28:61:a8:0e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:52 2025 GMT
            Not After : Mar  5 02:41:52 2026 GMT
        Subject: CN=A423C33AEAB5020CE51FAEADE86A538048CEF1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:40:4d:e4:cc:76:ba:f1:27:da:17:a1:89:
                    04:3d:03:5e:c1:c9:9a:10:f9:7c:3a:ef:95:40:6c:
                    4e:7d:20:a0:10:3c:7f:db:b0:d3:68:5c:0a:f8:19:
                    26:cf:d5:95:65:17:05:09:b8:9b:10:29:65:dc:91:
                    da:d9:0e:2b:d2:8b:05:38:88:53:6c:40:3f:fa:1c:
                    f0:d2:8f:1b:96:7e:20:a5:4b:c3:50:6a:57:0d:c3:
                    35:63:c7:fa:20:9d:9b:4b:1a:63:54:96:53:0e:39:
                    64:1f:d9:f8:96:c2:f7:9f:16:4c:61:3c:8d:e8:f2:
                    36:4d:30:74:e1:56:ef:99:45:9e:fa:d9:7e:bb:cc:
                    ee:7b:39:f5:0e:f1:8e:32:f0:75:af:2f:02:87:b2:
                    70:b8:55:11:a0:1d:aa:c7:ec:5c:46:dc:ac:8a:06:
                    be:fc:50:ed:e8:4e:57:87:dd:c2:77:fd:19:eb:e6:
                    d2:9e:5c:6e:5e:ba:cd:cc:d0:20:76:63:e1:00:41:
                    5f:e6:46:f1:c1:38:9f:49:77:bc:98:05:ca:f9:a5:
                    60:97:42:63:bc:10:3d:8d:56:5e:9a:3b:27:1d:b6:
                    93:03:bb:91:ce:ac:4e:fb:e2:1f:41:78:b4:ff:ed:
                    7b:44:64:e9:07:7c:69:11:f8:53:5e:c4:23:c8:0e:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:C3:3A:EA:B5:02:0C:E5:1F:AE:AD:E8:6A:53:80:48:CE:F1:EE
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:29:9b:e0:2c:62:3b:44:01:ea:a7:6a:8e:cd:ca:40:c7:2c:
         9e:70:db:d1:9a:c7:69:cd:d5:fe:d2:88:1a:99:5f:16:a5:dc:
         c4:b8:b9:30:3e:09:f9:d4:68:44:1d:f6:a8:d4:dd:3c:90:ea:
         5f:58:c8:2c:be:53:8e:46:af:89:39:d9:d1:25:f4:1f:04:74:
         8e:fb:a3:c6:21:4b:0c:88:b4:5a:d0:72:82:c6:43:29:d2:6a:
         24:0b:e8:73:39:13:c9:ea:d2:6c:67:42:8c:38:6b:7d:dc:48:
         74:af:bc:2f:00:42:87:1c:d5:fd:0d:e3:4b:18:96:69:68:15:
         54:d8:e5:ef:59:fe:52:78:70:a0:f3:f9:ec:e7:7e:b7:86:9b:
         55:8e:df:43:36:1d:35:bd:59:da:76:cc:bb:68:83:d0:79:e9:
         07:57:6f:f3:24:7a:d3:57:35:cb:cb:cd:01:4a:55:2a:7e:8b:
         7e:1f:d8:04:f6:3a:64:84:07:f2:79:4a:61:5b:0f:89:48:2d:
         d9:fc:85:e7:b1:30:cc:58:e6:ee:ba:89:05:d5:bd:cd:24:0e:
         31:c3:88:7b:e6:ea:1d:1c:68:fb:8d:32:5c:b8:01:bc:8b:09:
         8a:5d:23:e5:ca:6c:67:ef:67:48:f6:d2:97:10:0f:44:0d:42:
         e2:65:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net