Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32302d3230203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32302d3230203d3e203238333638.roa (raw, json)
Hash identifier:          va1rJNh2VzSrM5cnaiGM3BURVOPecdNucdAHPEtRTRo=
Subject key identifier:   E5:4D:A2:3D:32:76:5F:6A:65:54:16:CC:EA:4D:3C:8C:8E:6E:24:E1
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2532A420E3CF97216F1196693C25925D7486EFE0
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32302d3230203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        186.225.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 02:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:32:a4:20:e3:cf:97:21:6f:11:96:69:3c:25:92:5d:74:86:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=E54DA23D32765F6A655416CCEA4D3C8C8E6E24E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:45:a0:7d:87:57:00:38:90:02:7c:ac:da:
                    0f:b1:1e:90:fb:ca:14:0e:64:a5:cb:a0:7f:70:1e:
                    7d:76:74:db:56:12:ef:36:89:9c:40:03:fa:5d:a3:
                    e7:0f:8a:19:0b:fc:46:cf:96:38:24:1a:c0:cf:6a:
                    48:7b:0c:b6:c8:23:95:ba:86:0e:36:84:d3:25:54:
                    0a:25:f3:d3:e0:4f:04:5f:fc:87:0b:92:24:e7:90:
                    64:75:16:44:82:0b:d5:0b:d2:95:ff:4c:6f:56:7d:
                    96:f8:27:7c:e1:c0:b0:35:cd:97:66:01:d4:3a:18:
                    3f:4a:36:5f:cd:ba:3c:c7:00:e9:ce:5a:e7:8c:ce:
                    7c:93:0c:39:d5:63:07:13:c7:8c:9f:34:e0:12:b8:
                    2b:03:83:c4:d9:64:7a:c7:18:59:98:a4:24:8e:f3:
                    3e:e6:58:57:7c:03:31:0c:6d:cb:17:77:f7:ef:59:
                    13:95:20:ba:be:08:80:8a:59:6d:0a:82:61:3b:f6:
                    87:32:13:5f:b2:0e:6b:0b:ad:f4:da:f8:3a:66:6e:
                    d6:ff:e8:8a:e5:f0:ee:55:10:3b:43:1d:2f:31:6b:
                    21:26:c0:e1:68:d4:d2:67:bc:9a:ec:f5:6b:99:12:
                    7c:64:cf:47:15:4a:5c:8c:bb:af:1f:3d:cb:3f:e9:
                    31:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:A2:3D:32:76:5F:6A:65:54:16:CC:EA:4D:3C:8C:8E:6E:24:E1
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32302d3230203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:72:7c:fa:fe:4e:9d:7d:59:67:70:c8:37:65:be:e9:7a:d5:
         45:9b:81:6e:36:fb:a3:81:7a:a8:2c:2c:90:0b:1e:f0:59:b1:
         a2:e9:f6:a5:d1:0b:df:a7:82:7d:38:77:fd:55:5c:66:d8:28:
         90:08:b6:63:2f:dc:36:01:be:a3:67:35:88:61:6e:a6:0b:5a:
         cd:b8:11:66:8f:3c:b2:a7:c7:47:81:31:11:c5:a6:9e:81:5e:
         62:35:3e:e4:6c:0a:79:f8:d7:20:f1:57:5b:cd:da:46:d0:b8:
         f2:7c:76:9b:6d:48:4d:c9:b0:ce:b1:a0:cb:b9:b1:ca:0e:23:
         b1:22:01:a5:b6:4a:3f:c4:72:41:0f:78:16:a4:2a:c3:83:10:
         a7:d6:df:58:c1:ae:89:57:6c:e8:81:5e:23:f8:17:75:2e:88:
         4a:f4:4f:f7:68:56:ab:e6:bb:95:92:14:71:eb:a3:df:b2:84:
         e4:2c:33:48:0c:4d:f9:5f:cb:99:ca:2b:a1:5b:71:75:ab:27:
         a5:ad:83:2d:e2:4c:6e:df:25:98:dc:22:f5:3d:86:1a:24:99:
         58:c2:9c:64:a8:d8:a1:6d:08:58:99:9c:85:60:63:7a:3e:bd:
         ea:ca:fa:22:f6:84:ff:32:f7:9c:49:0d:a9:51:2b:49:bc:9b:
         25:02:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:48:59 2025 by rpki-client