Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3132302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          1rrC28RZ84qAYzqaVcpv4BO8awlJTsqyFQSX6ADx04Q=
Subject key identifier:   76:E7:12:7A:D3:59:2F:6F:6A:1C:59:DF:B4:A0:3B:B5:0B:67:49:0D
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3165CED879E7FE8FB60E654279523185E0BB30CE
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        189.84.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:ce:d8:79:e7:fe:8f:b6:0e:65:42:79:52:31:85:e0:bb:30:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=76E7127AD3592F6F6A1C59DFB4A03BB50B67490D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:95:7d:04:c5:c5:3a:35:0a:68:0f:72:cf:
                    e9:32:d4:4e:e8:af:39:0e:b4:34:a2:63:64:59:25:
                    99:5b:b5:92:0e:f7:e4:90:b0:87:1a:82:ec:3b:d9:
                    ad:2d:6e:60:6f:d4:a5:ca:03:66:bb:4a:1e:96:77:
                    70:22:12:b5:fc:28:0a:c3:00:9d:89:be:b2:71:8c:
                    e7:4c:0b:20:8f:76:42:61:e7:c9:d1:a0:8f:59:81:
                    9f:d9:a5:55:fe:1d:b9:f5:fc:67:35:68:f3:43:e8:
                    4c:37:48:b6:3d:f0:7a:73:31:4d:c9:c4:c2:ec:48:
                    ab:ac:e1:ba:24:fb:7e:b7:01:28:82:8c:38:74:1b:
                    6e:37:b8:2f:58:ad:2e:3e:e6:3d:83:5e:fb:c6:9d:
                    e1:14:ff:65:6a:72:c5:6e:98:c2:58:e1:45:a0:ad:
                    6d:5a:be:07:a3:ef:4e:ab:18:8a:b5:15:28:f9:12:
                    1c:82:81:e8:19:32:3b:94:b7:80:86:d3:b1:dc:a7:
                    8f:fa:d9:31:af:e0:02:69:16:26:ae:6b:a0:ca:9c:
                    72:8b:53:7e:63:60:ef:df:1d:2c:25:6d:b0:c8:d7:
                    23:cb:b5:de:ac:fa:21:6e:8d:7c:5b:a3:b4:9c:02:
                    4f:ff:d7:5a:6f:b8:47:1e:e7:57:28:42:bc:41:73:
                    17:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:12:7A:D3:59:2F:6F:6A:1C:59:DF:B4:A0:3B:B5:0B:67:49:0D
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:a3:a1:af:77:89:ca:83:51:60:8b:7a:5d:92:85:fa:8f:
         6d:55:73:04:d4:12:41:8a:a8:d6:76:4c:58:25:b8:d6:6e:70:
         a2:bf:fa:16:d3:00:e4:01:49:b0:57:bc:44:4d:0a:8d:50:8d:
         99:bd:05:1e:02:34:23:3a:91:a2:dc:cc:03:a3:8f:5e:c5:59:
         0f:f6:b7:7a:3c:6a:20:84:32:51:98:a1:d9:da:21:e4:b9:21:
         2a:48:29:34:fd:d6:bc:5d:0e:f9:a8:03:0a:37:f0:da:cf:9e:
         75:c8:ee:24:fd:69:fc:8c:52:42:91:f3:d1:96:8c:f3:40:ae:
         99:fa:28:14:fa:33:db:cd:04:6e:78:a3:8e:9e:9c:42:15:f2:
         b3:09:c3:00:c3:2e:19:0f:8f:cf:b5:0e:56:cc:f9:2c:83:dc:
         20:e4:8c:62:89:ed:4c:fa:58:85:1b:e7:e0:93:7c:cd:a0:fb:
         e4:e9:3d:18:52:18:ed:a8:1a:7a:b6:d4:c3:3f:21:de:5b:08:
         aa:ab:2f:a3:47:be:1a:4f:70:06:6a:2f:29:55:fb:83:6a:d1:
         8b:2f:45:35:2a:07:59:56:07:b1:c7:79:b0:ee:c6:4b:00:b4:
         58:59:93:c6:ce:d8:5f:42:e1:62:42:31:db:82:23:00:a2:c8:
         4d:0f:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net