Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          LGQCCUt/k2qKH/cus7q+JQUAlOQ+RFI/42xfypCfeXk=
Subject key identifier:   FF:E6:8A:A5:1F:FF:94:F0:06:B1:46:9F:EA:E8:73:17:60:96:0D:65
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1001FFC13771127C01B2FF4C769C3EF79CE56414
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:ff:c1:37:71:12:7c:01:b2:ff:4c:76:9c:3e:f7:9c:e5:64:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=FFE68AA51FFF94F006B1469FEAE8731760960D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:56:c7:a7:84:87:ce:18:6a:56:5d:2c:9a:54:
                    1b:f6:cb:66:b9:8e:44:d3:28:1c:38:91:6c:79:42:
                    79:ba:d9:d1:f6:3d:78:e8:dc:b7:ea:f1:9a:8c:a3:
                    50:65:d9:7d:36:71:17:01:ea:66:23:83:7b:dd:44:
                    27:bc:93:d5:09:9f:6e:47:88:40:c0:59:6f:68:63:
                    75:39:7e:37:74:dd:5f:54:59:0b:80:61:78:51:a7:
                    21:d9:fa:cb:2f:99:44:33:f2:44:09:d9:41:79:41:
                    fc:82:73:a0:1d:31:3e:36:3b:3a:ab:16:36:95:e2:
                    72:79:f8:db:d4:74:bb:09:27:31:50:ce:74:53:c8:
                    56:9b:52:d7:04:45:e7:6a:48:cb:fd:4f:15:21:22:
                    18:1b:78:fe:93:47:90:f5:24:69:61:23:f1:53:e4:
                    1c:6b:c9:8e:6d:9c:84:4a:bd:5b:1f:ea:c5:75:1f:
                    cb:d8:b4:ac:fb:d5:4d:83:0e:c7:4f:62:a0:f1:51:
                    68:1b:40:3e:31:9b:3e:d9:8e:81:c7:19:0a:a9:7e:
                    d4:fc:78:89:f3:b2:08:44:6a:0c:f8:50:03:40:58:
                    3d:07:62:19:dc:e7:ca:fd:07:9f:cc:20:3a:73:26:
                    e8:cd:e2:98:21:23:5b:42:7a:c5:d4:23:32:c9:88:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:8A:A5:1F:FF:94:F0:06:B1:46:9F:EA:E8:73:17:60:96:0D:65
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:98:68:46:ba:b2:be:af:6f:bd:01:6c:ae:8d:60:fd:d7:
         e8:c6:48:a2:56:59:2e:d2:ea:09:c7:44:1e:40:1e:bc:0b:86:
         fc:c1:4e:50:c3:c9:1e:a0:a1:19:c2:d1:cb:d1:cd:10:d3:0e:
         33:5a:04:4f:a8:da:dc:70:18:f3:6c:32:50:9d:91:79:3e:7b:
         c1:7f:e5:a6:38:43:17:48:b1:f7:9d:84:68:37:96:e7:59:df:
         0b:05:38:9b:04:d8:60:ab:aa:94:25:c8:29:22:90:55:e6:0b:
         f0:ab:4f:6e:4d:d7:cd:c5:76:5d:57:3c:61:08:34:52:65:ce:
         da:5a:3c:a9:9c:16:74:88:d6:a9:35:55:fa:c1:a3:9f:3f:77:
         4c:69:6e:c0:e6:c7:11:1a:65:53:33:e6:ea:ff:cd:bb:74:a2:
         83:af:bd:dc:e1:af:cb:ff:91:11:45:1c:10:c4:0c:24:23:e2:
         6e:7c:31:3d:6a:9e:af:c1:e8:15:77:12:38:6f:91:20:b2:91:
         f0:34:ca:0f:72:8c:36:8d:b4:d2:cb:a7:51:06:35:1f:d1:95:
         d8:23:68:f5:08:7f:2a:9a:d4:4c:a7:30:ef:ed:60:38:7f:30:
         f8:12:a0:43:92:c4:8d:b0:b3:19:04:9f:e5:d0:eb:a6:06:71:
         e2:dc:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:52:14 2025 by rpki-client