Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          +xRLuPZqB50agIZEjMFIbSYoW/k0z1jbN/hfLtXF3Ag=
Subject key identifier:   7E:A3:00:B7:24:93:A8:C4:10:5D:7F:B9:1D:D2:D0:F4:14:0D:F5:38
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6EA4BA8476496402709D44BA2F0920907BB60377
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:11 +0000
ROA not before:           Thu 04 Apr 2024 02:21:11 +0000
ROA not after:            Thu 03 Apr 2025 02:26:11 +0000
asID:                     28368
IP address blocks:        186.225.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:ba:84:76:49:64:02:70:9d:44:ba:2f:09:20:90:7b:b6:03:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:11 2024 GMT
            Not After : Apr  3 02:26:11 2025 GMT
        Subject: CN=7EA300B72493A8C4105D7FB91DD2D0F4140DF538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e7:5e:f5:a9:c3:f7:b0:01:1d:7f:8f:29:2c:
                    e3:4a:b3:5f:90:ff:0f:84:dd:2a:c3:7f:ac:90:78:
                    ea:af:8f:fd:1d:0c:c6:c7:34:22:7c:87:16:16:16:
                    01:46:13:69:36:cf:22:5b:ac:c2:8a:62:86:db:4f:
                    11:b5:e0:52:20:6b:6c:de:77:87:29:fa:fa:02:65:
                    fc:f4:97:5d:ec:23:5c:7c:70:4f:89:23:c8:a3:c6:
                    8e:7b:35:6c:5b:ac:f6:08:68:d3:6d:b8:36:3a:db:
                    84:06:4a:71:54:81:1b:b9:2f:0a:20:31:cd:bd:6b:
                    4e:75:4c:06:64:17:1a:4b:5f:26:e9:fb:b6:87:23:
                    45:77:58:bd:f9:df:02:ba:0d:70:aa:e6:bb:14:dd:
                    61:1c:1b:f5:b9:e0:ea:23:ba:e0:8a:5d:8f:c6:6b:
                    55:72:99:54:8e:32:f0:16:5f:b8:34:fe:55:d0:00:
                    2a:33:9f:06:00:fa:41:db:53:e3:18:f1:b1:26:2e:
                    7c:e8:d6:59:9b:e1:07:b7:35:22:91:4b:57:57:4a:
                    af:57:b8:b7:10:ae:6c:bd:10:5b:cd:8e:50:dd:4b:
                    83:7a:be:d3:1b:6e:df:36:da:5a:47:a5:be:0c:a5:
                    34:45:ab:5b:fd:8b:30:1f:23:7b:e9:22:20:c1:fb:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:00:B7:24:93:A8:C4:10:5D:7F:B9:1D:D2:D0:F4:14:0D:F5:38
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:0b:43:b6:d0:83:c8:e6:43:44:13:a2:31:88:e2:be:c4:
         f0:92:d4:36:ab:97:ba:69:91:2a:ab:47:04:64:81:1d:a2:78:
         ad:da:89:4a:ac:23:34:d7:30:c5:f8:22:2b:c7:c1:be:f8:79:
         89:66:17:8e:ee:47:6f:bc:3c:13:0a:28:5e:26:7b:ca:ae:d6:
         33:6e:0a:58:8d:e5:58:e8:99:fe:24:8b:58:c8:3a:83:8d:92:
         36:13:ad:81:b8:7e:8d:ec:7c:3b:2a:39:6f:e8:82:cc:ec:40:
         bb:4e:fa:3b:00:5c:ae:60:7b:c2:f3:69:1b:6e:e0:0a:10:9a:
         f2:5e:15:d7:0b:b4:f1:a9:fb:e7:dc:e0:f3:4a:f2:3a:7a:47:
         b2:aa:72:ce:a6:4a:a3:24:78:b2:84:a5:7f:fa:76:92:4e:03:
         1a:0f:6d:f6:c3:57:95:6e:78:5e:72:bc:b2:54:1a:9f:ac:4d:
         e2:8b:0e:1b:a7:dc:bb:7d:d1:51:81:a7:d9:6b:81:58:6a:5f:
         12:61:db:55:df:25:dc:2c:c2:96:61:dd:10:7c:fc:6f:af:bd:
         29:15:e4:62:2f:45:d2:6a:9b:c6:87:61:dd:c2:7a:bf:49:c0:
         df:31:65:8e:5a:1a:9b:30:81:e6:29:d5:71:75:d9:ed:97:31:
         2a:2f:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org