Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa
File:                     3138392e38342e3132342e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          iJlAU9xmhMucEDPeEXij2X/87oGdgfHfByY5f3Mvz3o=
Subject key identifier:   B1:DD:67:1B:9F:EE:11:A5:47:87:1D:E0:E4:7A:6A:B4:3D:03:31:9F
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       74424E6A010C12A4AA53BCF5CA54836F06067E9B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:58 +0000
ROA not before:           Thu 06 Mar 2025 02:36:58 +0000
ROA not after:            Thu 05 Mar 2026 02:41:58 +0000
asID:                     28368
IP address blocks:        189.84.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:4e:6a:01:0c:12:a4:aa:53:bc:f5:ca:54:83:6f:06:06:7e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:58 2025 GMT
            Not After : Mar  5 02:41:58 2026 GMT
        Subject: CN=B1DD671B9FEE11A547871DE0E47A6AB43D03319F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:35:50:cb:4d:c4:42:55:74:b7:89:a5:37:53:
                    24:42:84:ef:f3:7c:6d:f5:2f:5a:8b:e8:76:9f:63:
                    d2:96:77:c3:b6:de:65:1c:f5:2f:0c:cc:a1:6f:65:
                    7b:d3:de:50:ff:30:b3:12:0d:2e:e0:37:80:e9:95:
                    0c:4f:0c:e4:a9:80:17:3e:a3:af:2e:0b:16:a5:f3:
                    6f:4a:6d:11:83:66:64:3b:36:67:ab:ac:0b:19:91:
                    b9:9e:76:39:7b:cb:b7:fd:81:45:22:f8:45:fa:55:
                    0d:bd:02:f5:51:cd:14:27:6a:e0:d3:51:58:9b:90:
                    89:c6:6d:72:ab:81:00:b1:b3:bb:f9:c6:2e:44:3d:
                    0f:96:eb:69:49:2f:a7:82:64:5c:6e:02:97:30:c4:
                    70:8e:58:50:00:92:e2:d1:54:7e:4c:6c:5b:c5:ca:
                    a9:ca:ab:0b:d6:14:5a:ba:90:5a:39:2f:37:36:71:
                    ea:c3:30:53:b6:f2:c5:19:74:cc:30:e2:97:2c:eb:
                    b0:de:91:ae:fe:7f:81:8e:1e:6e:a3:6a:cd:d4:e6:
                    84:aa:a1:76:22:8b:5c:7a:ff:52:33:63:2a:43:b3:
                    c0:e3:9f:6d:a2:c9:79:19:32:3f:cf:ce:f2:cf:1f:
                    65:29:65:93:c9:c7:13:1d:b6:6d:2f:2f:20:c8:5d:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:67:1B:9F:EE:11:A5:47:87:1D:E0:E4:7A:6A:B4:3D:03:31:9F
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:51:60:d4:51:f0:c5:60:57:7d:0c:bb:19:2e:98:fb:f2:
         c5:04:1a:7a:ed:04:82:97:18:20:8d:17:30:05:48:03:c3:9c:
         21:ba:42:87:c4:fa:c3:e5:22:1c:34:52:5c:f8:53:b1:df:45:
         7a:c1:ff:58:ed:00:6b:7e:f3:d8:81:61:dd:aa:2b:eb:65:dc:
         5e:10:63:77:f8:58:56:7d:9d:e5:fe:af:45:d8:c4:17:e8:41:
         41:c5:65:63:53:a1:dd:89:e7:f6:3c:e7:c2:33:f7:07:8c:45:
         49:10:78:17:e1:4a:41:e0:61:bf:bf:55:2f:53:7d:2a:dd:f9:
         1c:01:19:18:7e:28:73:3d:1a:92:f2:4b:2e:27:ed:71:0d:51:
         ae:4d:33:aa:c1:7b:72:8a:61:09:77:af:11:5c:8d:6c:bb:4c:
         1d:4e:25:33:0a:c3:a5:d1:a2:8d:d8:31:ea:ac:cd:e8:79:28:
         c5:8b:b1:19:3c:ce:6a:0a:b2:61:13:94:46:bd:60:12:10:34:
         2c:37:d9:fe:b4:36:73:2a:87:b5:76:f8:a6:a0:da:1c:9e:0e:
         fd:78:f8:9a:fd:16:ce:55:e2:d6:8f:2c:31:ac:6b:22:61:84:
         23:54:84:77:12:05:52:40:6f:82:5c:ba:9d:9f:4e:11:6d:4a:
         cc:2f:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:03 2025 by rpki-client on console.sobornost.net