Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          IcRCqnOcXZAHS1kTNOTFbBsSytypNP4wkLLpTGBZ2KA=
Subject key identifier:   E4:5B:AE:56:06:73:84:15:9C:30:FB:17:1B:DD:AE:81:E6:D5:F1:0B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2AAFAD199786597CB70BD05EA7CFE607E3B17A75
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:11 +0000
ROA not before:           Thu 04 Apr 2024 02:21:11 +0000
ROA not after:            Thu 03 Apr 2025 02:26:11 +0000
asID:                     28368
IP address blocks:        186.225.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:af:ad:19:97:86:59:7c:b7:0b:d0:5e:a7:cf:e6:07:e3:b1:7a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:11 2024 GMT
            Not After : Apr  3 02:26:11 2025 GMT
        Subject: CN=E45BAE56067384159C30FB171BDDAE81E6D5F10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:21:5b:aa:d9:1f:2b:e8:8b:c3:3e:c0:dc:41:
                    1f:6c:5c:13:b2:c3:ea:ea:a8:e2:32:46:2c:1f:91:
                    ce:95:41:81:1f:32:42:f7:70:13:53:fa:2d:b9:03:
                    af:a5:5d:fa:14:94:72:50:89:96:7e:19:3c:ad:39:
                    fd:f6:b8:56:d9:b5:5a:e6:a5:27:f5:e3:ae:72:c0:
                    9f:97:40:e3:83:91:83:c5:b5:0d:92:8a:6a:9c:99:
                    2f:ff:3e:4b:1c:e9:b6:15:5f:4b:e8:83:87:51:77:
                    50:6b:1d:2f:c2:2c:23:51:11:da:4d:73:41:cc:34:
                    e3:2f:f4:2c:8a:fc:4e:05:df:6e:a7:87:35:e1:e8:
                    dc:c6:a8:cb:6d:24:d9:e1:5a:65:03:b0:83:70:71:
                    a9:38:4a:c8:3f:5a:db:63:df:8e:7c:0c:2b:0d:92:
                    98:e5:40:3d:29:7b:4c:8d:91:b7:f5:63:f4:f3:02:
                    99:97:70:21:a0:5f:f6:d5:ad:fa:2e:00:7d:f4:63:
                    33:e5:06:0b:36:af:71:b8:35:16:62:0a:4b:ce:15:
                    5e:51:b1:20:1e:04:74:8f:20:3e:78:51:bf:71:ae:
                    24:36:08:91:71:c3:72:aa:46:b6:55:3f:8a:64:55:
                    77:af:af:08:e3:58:97:4c:da:03:03:4c:96:63:42:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5B:AE:56:06:73:84:15:9C:30:FB:17:1B:DD:AE:81:E6:D5:F1:0B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d9:98:bf:aa:13:6e:68:29:fa:a4:81:e5:0e:70:eb:e8:f1:
         d8:ee:e3:b6:3f:1b:fd:ca:85:7b:7b:ae:f1:0d:e2:19:b6:b3:
         ca:c2:6d:ba:cc:12:a4:87:bf:a1:65:f3:2f:04:ed:c2:a7:a3:
         db:0a:ae:74:fb:1f:5d:20:08:83:d4:49:09:3a:0d:c9:e1:4b:
         3b:0d:0c:d7:88:03:33:1f:37:91:ae:82:ba:09:64:21:ad:19:
         95:60:36:0e:c4:27:eb:25:cc:20:8c:b0:eb:53:69:66:3b:36:
         8e:6a:69:28:0c:fb:a6:28:e3:20:08:1c:5e:09:9a:73:b9:99:
         c4:16:b0:58:7b:2e:23:c6:80:cf:47:ad:de:7e:61:4e:60:52:
         15:b0:10:7b:f9:69:de:f6:0f:c8:21:29:54:b7:eb:2b:70:e3:
         a2:01:58:55:03:ed:82:11:89:44:ce:9f:12:45:6e:a3:39:e5:
         9d:ff:2b:0e:9b:27:16:18:59:e9:5e:7b:5f:84:b1:36:64:61:
         ef:51:99:e9:87:e8:69:a0:fb:a6:f9:16:77:b5:ad:19:df:ea:
         f8:d8:75:d3:73:d9:48:e6:45:f6:04:87:59:a9:b9:6c:ca:90:
         78:f6:33:77:75:d4:ae:60:9a:8a:34:ad:c1:49:75:f0:6a:82:
         f7:48:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:15 2024 by rpki-client on console-ams.rpki-client.org