Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32332d3233203d3e203238333638.roa
File:                     3138392e38342e3132342e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          9D9BBIuSya6m78hxxd/195XgOpbX6cwhTVlSIVff8uQ=
Subject key identifier:   D5:6D:FF:87:70:39:EB:28:DE:CA:93:3F:0E:29:1B:C2:1A:FD:96:FB
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6F28B3F1EB51426099A4285D1BA3A4AEC82F36F9
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:54 +0000
ROA not before:           Thu 06 Mar 2025 02:36:54 +0000
ROA not after:            Thu 05 Mar 2026 02:41:54 +0000
asID:                     28368
IP address blocks:        189.84.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:28:b3:f1:eb:51:42:60:99:a4:28:5d:1b:a3:a4:ae:c8:2f:36:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:54 2025 GMT
            Not After : Mar  5 02:41:54 2026 GMT
        Subject: CN=D56DFF877039EB28DECA933F0E291BC21AFD96FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:d7:39:28:68:c4:98:1c:6f:6d:72:cf:7f:
                    44:42:82:52:e6:3f:4d:8c:ef:88:74:28:eb:26:c6:
                    f5:13:27:3c:26:57:77:fa:ab:67:04:8f:39:be:a5:
                    97:35:a8:25:d2:16:40:8e:da:ad:a1:46:61:45:97:
                    6b:09:b3:88:a2:ae:38:a2:81:72:f8:6c:26:e6:52:
                    2a:3a:8d:35:91:2c:26:d6:3f:79:cf:23:e6:06:4f:
                    61:1f:e0:f4:a0:fc:be:0c:86:8a:7b:ad:82:95:ae:
                    83:8a:04:36:22:b7:70:e0:f0:96:82:e2:3d:1f:04:
                    9f:9d:68:bf:ae:b4:09:53:cf:84:c2:dd:53:a2:74:
                    79:c4:55:a3:26:41:77:9e:08:f9:15:6f:2a:bf:5d:
                    6b:5e:40:ea:fc:ef:ed:14:74:52:22:c2:8a:33:dc:
                    6e:8e:48:bf:6e:6c:c8:08:05:bf:e2:76:c8:b8:fa:
                    21:c1:9c:f2:9a:92:7e:b7:e9:9c:e2:ee:b6:7f:e0:
                    d1:1b:41:56:df:64:7a:cf:86:60:b0:29:d5:b0:c2:
                    a4:9f:ef:50:4d:65:d5:26:73:98:1c:85:f4:4d:be:
                    9d:dc:0f:2c:37:bd:2d:be:b6:0c:4d:40:5e:9a:91:
                    81:0c:bf:dc:a6:12:50:0d:71:37:89:4a:14:b5:30:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6D:FF:87:70:39:EB:28:DE:CA:93:3F:0E:29:1B:C2:1A:FD:96:FB
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138392e38342e3132342e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:cf:cd:af:f0:e8:c3:17:b6:be:95:17:50:20:58:0a:be:
         09:2f:16:ec:d9:36:6c:38:e4:72:8a:47:ad:f2:98:54:19:e3:
         81:e3:bd:ec:56:57:b4:f9:6b:6b:2f:a1:5f:56:45:bc:ab:1d:
         91:48:7a:0c:ce:9a:58:07:16:e7:61:46:e8:00:c8:f3:7e:83:
         b4:d3:f9:31:78:a7:37:d5:f7:33:a9:bb:23:e2:a4:8a:d9:1b:
         e5:3b:1c:f0:8b:e6:0d:8d:1c:dd:c1:da:75:33:95:34:71:bd:
         cb:ba:22:8e:4d:42:c2:a6:bd:77:e1:8b:1c:9b:e0:2f:bf:7f:
         6d:41:62:1c:4d:80:45:c9:20:ca:8f:6e:76:19:0e:3f:6f:bf:
         54:6f:cf:37:4e:fa:17:ec:5c:fe:33:1e:c4:b7:a9:c7:62:a1:
         7b:15:82:f5:97:d0:82:a2:08:4f:24:30:ff:0e:ce:44:76:86:
         53:a2:11:73:04:46:f2:99:ec:31:55:d5:3a:de:67:15:17:bd:
         ce:b9:17:30:f2:c6:ef:59:f3:d4:18:70:f9:c2:d3:86:48:3a:
         38:b1:a0:22:ac:64:dc:e1:ff:58:dc:c1:15:57:58:a0:29:dd:
         1a:da:2d:cc:fd:bb:1f:a3:e7:32:45:5f:96:48:af:13:9c:85:
         f4:63:92:4a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbyiz8etRQmCZpChdG6OkrsgvNvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM2NTRaFw0yNjAzMDUwMjQxNTRaMDMxMTAvBgNV
BAMTKEQ1NkRGRjg3NzAzOUVCMjhERUNBOTMzRjBFMjkxQkMyMUFGRDk2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhdc5KGjEmBxvbXLPf0RCglLm
P02M74h0KOsmxvUTJzwmV3f6q2cEjzm+pZc1qCXSFkCO2q2hRmFFl2sJs4iirjii
gXL4bCbmUio6jTWRLCbWP3nPI+YGT2Ef4PSg/L4Mhop7rYKVroOKBDYit3Dg8JaC
4j0fBJ+daL+utAlTz4TC3VOidHnEVaMmQXeeCPkVbyq/XWteQOr87+0UdFIiwooz
3G6OSL9ubMgIBb/idsi4+iHBnPKakn636Zzi7rZ/4NEbQVbfZHrPhmCwKdWwwqSf
71BNZdUmc5gchfRNvp3cDyw3vS2+tgxNQF6akYEMv9ymElANcTeJShS1MLyDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1W3/h3A56yjeypM/Dikbwhr9lvswHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM5MmUzODM0MmUzMTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvVR8MA0GCSqGSIb3DQEBCwUAA4IBAQBXwM/Nr/Do
wxe2vpUXUCBYCr4JLxbs2TZsOORyiket8phUGeOB473sVle0+WtrL6FfVkW8qx2R
SHoMzppYBxbnYUboAMjzfoO00/kxeKc31fczqbsj4qSK2RvlOxzwi+YNjRzdwdp1
M5U0cb3LuiKOTULCpr134Yscm+Avv39tQWIcTYBFySDKj252GQ4/b79Ub883TvoX
7Fz+Mx7Et6nHYqF7FYL1l9CCoghPJDD/Ds5EdoZTohFzBEbymewxVdU63mcVF73O
uRcw8sbvWfPUGHD5wtOGSDo4saAirGTc4f9Y3MEVV1igKd0a2i3M/bsfo+cyRV+W
SK8TnIX0Y5JK
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net