Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          Sk7Klur4dLnUvH9xx+rCbkXo0iQTFK5pKZwLoQ8sy3Q=
Subject key identifier:   F9:77:84:4E:67:13:2F:EB:70:44:4E:7E:95:C1:D1:D5:AC:B2:B5:39
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       48C329B2C82D2C173634AC7AD45F8AF898251037
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:13 +0000
ROA not before:           Thu 04 Apr 2024 02:21:13 +0000
ROA not after:            Thu 03 Apr 2025 02:26:13 +0000
asID:                     28368
IP address blocks:        186.225.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:29:b2:c8:2d:2c:17:36:34:ac:7a:d4:5f:8a:f8:98:25:10:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:13 2024 GMT
            Not After : Apr  3 02:26:13 2025 GMT
        Subject: CN=F977844E67132FEB70444E7E95C1D1D5ACB2B539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:78:93:3d:23:b0:cb:b5:44:e8:fe:be:84:e8:
                    08:88:7d:d9:b9:3d:a4:6b:49:1a:7f:85:f2:76:ca:
                    14:37:cb:a2:1b:1b:9d:4b:32:d6:98:f8:b1:5d:d1:
                    f6:f7:d5:c5:07:3d:ad:32:9c:dc:a7:94:3e:28:f0:
                    57:ec:e1:71:7c:7a:d8:9c:e7:ec:ff:50:15:10:bb:
                    ec:be:cb:66:3f:43:b9:16:41:93:c5:56:a2:bb:e1:
                    34:68:b7:26:6c:d1:3f:bd:7e:6a:0a:99:15:f6:79:
                    ed:27:2d:a4:5f:05:60:c8:78:01:eb:d3:65:b8:c4:
                    9a:27:d2:37:b2:22:7f:e1:76:d3:28:39:f5:90:81:
                    b0:73:44:1b:8b:eb:68:65:eb:3c:65:f1:be:f9:b8:
                    89:ee:f5:66:0c:5f:17:82:0b:ac:0f:06:8f:86:48:
                    7d:28:4e:f8:13:cb:8c:21:f5:20:ac:2a:75:91:b7:
                    84:2a:ee:99:a9:e9:e0:99:4d:a0:ac:3e:4c:7c:3c:
                    a8:3f:b5:f8:a4:22:ab:f6:2f:b2:ce:ad:1b:7c:e8:
                    be:0b:27:e1:85:7c:28:36:2c:21:09:84:65:a0:d5:
                    5d:44:1e:5c:7a:86:ea:62:5f:98:6e:96:01:9a:82:
                    49:af:29:a3:90:d7:a4:4d:e6:93:04:ef:b4:70:b0:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:84:4E:67:13:2F:EB:70:44:4E:7E:95:C1:D1:D5:AC:B2:B5:39
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:a2:98:cf:77:56:fe:ac:85:5f:c5:97:52:0d:ff:3e:46:
         af:56:c9:c5:81:b3:c6:ae:45:94:9b:e3:3d:a6:34:13:a8:f8:
         3c:97:cf:21:e8:30:d7:57:86:41:a6:f2:4c:40:d7:1e:c6:d3:
         f9:a2:b4:64:fb:77:86:64:cd:58:90:0c:a1:0d:82:60:51:91:
         a8:89:1b:62:ee:56:75:55:30:67:8c:fd:b3:35:45:03:5e:eb:
         6f:8c:43:7c:d3:47:bf:93:03:81:67:bc:95:77:33:04:9e:6f:
         ee:cb:bf:8f:93:5e:ae:44:10:38:2a:37:a3:ad:61:c6:58:25:
         5a:76:e6:1b:10:f5:f9:e4:34:c6:69:51:08:d0:23:15:27:12:
         2a:87:13:17:b7:3e:83:55:90:fe:25:4c:32:12:6d:2d:e3:54:
         0a:de:fc:df:b8:e9:b1:19:d6:59:5d:93:88:d3:bb:10:e3:30:
         4f:ed:c7:90:c8:0e:3c:c0:f5:da:6f:59:ed:6c:16:16:ca:2d:
         d0:0d:d0:fd:d8:ee:e4:89:3d:28:e2:d5:c7:e8:73:5a:45:35:
         37:e1:74:72:97:fe:7c:7d:5e:72:22:8e:4a:49:3d:6c:c7:fd:
         94:cf:44:3f:63:84:71:fc:c8:c5:f2:30:2f:f2:ef:58:b6:0b:
         f6:6f:b9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org