Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          shLc/RDk9UU7iZswadTvk2qfZTY5eKPoeEKxcJA3FHI=
Subject key identifier:   18:B5:A2:D2:B7:2D:D3:F8:9A:5B:75:96:77:66:B6:75:D9:BA:93:6C
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5B25E26B99F829FC92393F90C7B2D1BD5150055F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:25:e2:6b:99:f8:29:fc:92:39:3f:90:c7:b2:d1:bd:51:50:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=18B5A2D2B72DD3F89A5B75967766B675D9BA936C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8a:7b:55:4b:1a:0f:7f:93:ce:51:ef:9b:c2:
                    f3:b7:6a:9a:19:27:6e:c6:c1:f1:a4:60:91:d1:0c:
                    5f:87:c7:1b:46:c1:bb:86:d5:f1:ad:b4:ab:e0:a8:
                    8d:37:41:4c:f4:ba:80:43:b5:44:89:fe:cf:0c:11:
                    96:3b:d4:d8:c8:11:61:36:6f:09:76:8c:2a:81:75:
                    fa:1f:8b:b2:01:8e:15:7f:d6:56:e8:cb:bb:b6:17:
                    0a:f7:46:56:9e:d3:49:43:f2:4f:b4:63:19:c5:70:
                    5a:a8:51:f5:ce:28:c3:63:63:03:87:da:97:35:3c:
                    80:35:d2:18:44:9e:a8:59:d6:1c:1d:a1:30:3d:14:
                    da:3f:a2:99:e7:fe:e7:d1:f8:f8:c1:62:da:ed:a5:
                    a3:08:df:12:71:ef:12:df:72:f3:b5:e4:cf:4f:2f:
                    c1:b2:85:de:24:e7:e0:fd:37:ba:71:1b:b5:2c:7d:
                    fe:75:f8:e9:26:09:51:fc:89:cd:c4:e6:7d:b9:4a:
                    76:c6:21:fd:e1:9e:a1:73:33:e8:c9:80:03:e7:10:
                    23:ac:12:c5:2a:04:33:ba:05:cf:b8:d0:10:54:cf:
                    7d:f7:8b:11:ea:1b:0d:49:d5:d1:b7:b9:a8:dd:6b:
                    c8:9e:ef:bd:0c:9e:dd:43:64:6f:78:ba:2f:b7:7a:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:A2:D2:B7:2D:D3:F8:9A:5B:75:96:77:66:B6:75:D9:BA:93:6C
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:a9:b1:8c:2e:2d:fd:a7:45:48:15:58:d2:9f:92:71:bc:
         2d:2a:1f:04:03:a1:39:82:c4:be:07:05:7d:04:eb:29:9c:73:
         72:33:39:c0:5f:34:fa:d1:1e:82:d3:65:64:ae:cb:98:30:cb:
         7f:65:05:9c:89:74:c9:81:84:22:92:fa:69:c8:a9:34:e1:0b:
         42:8b:91:34:7b:90:98:ef:7d:e7:77:95:49:c7:2e:23:23:5e:
         5b:fc:e1:2d:fe:f9:32:bc:70:e0:2e:62:4c:7a:53:1a:98:5c:
         c0:2b:87:2c:9e:9b:02:12:36:47:1c:b1:12:57:d5:29:45:31:
         b0:d5:e5:2e:c4:6a:3e:00:86:ee:8f:7f:fc:88:40:d4:51:b3:
         b8:2f:e1:1b:82:3b:72:c4:6b:4f:63:da:de:b0:62:39:00:0a:
         cc:f4:51:4b:d5:fa:31:9e:99:3b:1b:97:af:15:51:19:79:89:
         a5:31:9f:2b:1e:18:fb:0d:92:ab:ed:04:53:e6:1f:aa:e4:2e:
         14:47:1c:e1:db:35:d1:8f:b6:f2:7b:7e:f5:c0:ff:b8:58:58:
         fa:76:80:96:97:8f:dc:28:2f:c2:81:c5:40:9c:69:f4:3a:4d:
         5b:d6:ff:88:aa:da:75:68:c2:f6:ad:b0:0a:81:3d:3a:31:70:
         a1:93:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:10:05 2025 by rpki-client