Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa
File:                     3137372e3230302e38352e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          xBLvGmPagGDPXGJbvsl62Nhti/zzC68E/dTJZhWqxMQ=
Subject key identifier:   E5:B4:D8:DE:E8:DA:02:29:D6:23:DD:7E:AE:DA:28:0F:98:E9:0B:85
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0710BA172692F266859927E00F8FF608BFDC1DF9
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:52 +0000
ROA not before:           Thu 06 Mar 2025 02:36:52 +0000
ROA not after:            Thu 05 Mar 2026 02:41:52 +0000
asID:                     28368
IP address blocks:        177.200.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:10:ba:17:26:92:f2:66:85:99:27:e0:0f:8f:f6:08:bf:dc:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:52 2025 GMT
            Not After : Mar  5 02:41:52 2026 GMT
        Subject: CN=E5B4D8DEE8DA0229D623DD7EAEDA280F98E90B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:52:66:d3:8e:11:3e:be:9c:6c:e8:5f:29:
                    76:4d:de:f0:28:c4:90:75:f9:ac:0e:dc:57:f4:b0:
                    0d:94:6c:4e:5d:a5:e8:ab:10:b2:57:57:1f:75:fb:
                    70:53:f7:93:34:e0:3b:7d:e3:15:6d:9b:8b:55:84:
                    55:c3:8d:55:2e:3a:34:23:cb:26:45:e0:75:a3:e8:
                    a2:2c:72:cc:0c:dc:f3:24:a7:48:fe:f1:b3:a1:9d:
                    86:d3:eb:6c:0a:a1:65:a5:b2:95:07:8c:a5:f4:2c:
                    77:7a:a1:e6:c5:38:d8:78:82:c3:d4:c4:83:5c:35:
                    82:63:a5:34:7f:c8:4d:82:39:a3:db:b1:2e:9d:da:
                    fb:70:89:79:bd:f5:94:11:11:dc:35:81:8b:0e:29:
                    43:64:30:59:33:1d:3a:5d:b0:02:34:36:55:48:a3:
                    0f:b4:2c:91:60:a1:cf:54:6a:64:28:13:cd:10:ac:
                    84:79:c8:82:ea:42:2b:39:64:86:7c:cf:29:2e:2e:
                    d2:6a:c7:17:f9:7d:8b:c7:f0:82:84:4c:82:3d:0c:
                    52:30:63:72:de:11:16:a6:b8:76:06:ae:3d:fb:06:
                    10:7b:7b:e1:4b:94:77:b7:57:32:66:2b:e0:b3:4e:
                    23:89:1b:31:cd:83:f6:e4:d8:0f:6c:20:62:f1:e5:
                    cc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B4:D8:DE:E8:DA:02:29:D6:23:DD:7E:AE:DA:28:0F:98:E9:0B:85
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38352e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:7c:38:ca:4e:cb:7e:c8:45:8d:a0:13:cd:bc:a0:94:3e:
         48:c3:dd:c5:60:32:7b:31:a1:2a:0b:ad:a4:ce:e1:f7:a9:1b:
         fd:00:f7:72:9a:cf:aa:36:f9:69:b2:b8:1b:84:33:61:c7:50:
         d0:bb:ca:4c:b6:74:58:21:f0:21:0d:f6:31:b5:87:3d:2d:a4:
         f4:1e:a7:54:f6:49:8e:91:f0:0a:0c:cf:83:f6:3c:58:e4:f5:
         00:59:2e:c3:d6:12:94:eb:5f:e0:76:57:e4:77:1c:72:d2:67:
         f5:1f:a5:06:ed:24:4a:e5:c8:d2:97:57:7f:25:98:81:16:d4:
         3d:fc:9b:a8:19:80:e0:ae:ef:c2:2a:a5:12:44:94:b1:02:76:
         57:f2:4c:37:56:42:54:3a:4c:0a:11:e3:d8:17:4c:bd:8e:3d:
         5b:af:66:c6:06:a0:bf:73:00:70:fc:cd:5b:21:3c:38:e5:d4:
         37:1d:b9:12:6b:a4:0e:4a:1e:f5:bd:4e:79:99:09:dc:9f:7a:
         f0:96:91:7f:65:9d:c2:5d:b5:6f:24:24:cb:7d:a1:64:11:56:
         c5:2a:aa:9f:57:60:3b:4e:1e:d6:28:70:95:08:bf:24:b2:bf:
         ff:02:08:df:65:6a:ce:bd:5b:69:8e:27:b7:fd:13:af:26:cd:
         00:06:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net