Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3131362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          q37S88cRdWR+tHyksNKcy4VPbFxMrB8dnHds8UcFd1Y=
Subject key identifier:   7E:D7:96:83:84:B3:AC:76:75:9E:6C:1C:CD:2C:23:22:C3:5D:5D:02
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       515A5F248227FA8E7C9EB5749D0EEAA77132AA5F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:03 +0000
ROA not before:           Thu 06 Mar 2025 02:37:03 +0000
ROA not after:            Thu 05 Mar 2026 02:42:03 +0000
asID:                     28368
IP address blocks:        189.84.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:5f:24:82:27:fa:8e:7c:9e:b5:74:9d:0e:ea:a7:71:32:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:03 2025 GMT
            Not After : Mar  5 02:42:03 2026 GMT
        Subject: CN=7ED7968384B3AC76759E6C1CCD2C2322C35D5D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:52:ad:37:06:98:4b:63:a2:9f:e4:41:5c:
                    84:9d:c7:8c:0f:06:d4:87:e7:61:11:51:b9:7f:97:
                    a8:f4:08:e4:b6:2e:dd:91:e5:a2:fa:a2:3e:42:d2:
                    f7:ac:78:b3:03:b4:73:d3:96:fc:ee:64:c2:15:b4:
                    24:84:28:8d:e2:b0:5a:53:16:31:31:62:2e:25:4d:
                    5e:66:80:f4:6d:38:50:33:70:b4:ba:22:2c:ae:5e:
                    2d:26:8c:41:8d:da:8f:7b:02:c6:ed:3e:d5:1e:15:
                    30:6c:d8:99:66:06:ec:43:d2:38:ee:7c:8b:2d:24:
                    1a:db:9b:ff:ce:f7:c6:fb:53:27:4f:67:20:06:a9:
                    51:d4:73:76:41:52:25:08:9c:a2:70:ff:4c:06:7c:
                    8b:38:b7:60:67:ba:59:0f:58:a7:14:3c:61:0b:42:
                    8b:5d:35:a0:ca:ad:10:bc:1e:72:76:0a:a0:a6:ba:
                    08:32:50:b2:43:de:ca:90:fc:1e:47:e1:34:44:45:
                    42:2b:08:54:63:63:24:5e:b7:98:ef:2f:f0:d1:62:
                    10:7c:60:01:42:78:54:23:76:86:22:aa:48:27:59:
                    d9:8c:eb:58:d3:ba:c3:24:0d:ce:bd:38:2b:9b:77:
                    86:ae:7f:2a:de:42:26:cc:61:3b:2c:b0:a3:37:d1:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:96:83:84:B3:AC:76:75:9E:6C:1C:CD:2C:23:22:C3:5D:5D:02
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3131362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:4e:fa:34:1d:d7:e3:47:c4:12:1a:42:94:1f:ae:cf:bb:5b:
         3a:b4:4c:fe:99:11:09:52:24:67:35:b0:56:dd:51:1d:fa:e5:
         45:8d:e4:a4:13:0a:73:a4:05:c0:94:61:2d:c2:fa:db:a1:7d:
         04:be:90:40:81:7a:ab:e9:db:84:ca:e5:1a:dc:86:bb:16:fb:
         71:ff:fb:8d:31:97:68:8e:df:a7:1d:9c:e6:24:1c:69:04:9e:
         06:c8:b4:e5:9d:e3:5d:9e:d8:8f:0d:f2:98:f6:2f:2c:6c:b5:
         9e:94:bd:ae:4d:ed:d6:cf:a3:6e:68:6f:21:34:84:6e:55:4a:
         82:8c:02:ab:03:67:b6:14:11:ca:e3:56:f8:15:0a:47:24:5f:
         30:24:a8:8a:c7:74:bf:4a:39:03:fe:3e:3e:13:d3:55:c6:84:
         17:2c:2f:24:51:93:4e:8e:e1:16:4c:cb:ac:d4:6a:f9:91:de:
         26:b7:1f:55:76:a8:af:6b:b9:32:43:21:88:2e:18:e2:79:5e:
         9f:e5:93:88:bc:a8:22:67:8b:2e:b2:74:6a:72:1c:93:05:9d:
         7b:68:85:90:7f:83:f8:70:62:5c:95:9f:b9:72:cc:e8:51:41:
         ec:1f:cc:c4:f6:90:bc:a9:43:08:f2:09:a6:c4:77:32:10:bb:
         78:6c:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net