Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33342e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          fQ9y+0JNhHmZd8hhEDipQNkirsyRLQX7WxPFDe4mSi8=
Subject key identifier:   3A:7D:70:D6:E2:6C:D4:4D:DF:BF:91:7D:E9:A9:83:56:B6:CA:E3:B3
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2763CBC11EB62D83B1E134E39EF22D300778BA2F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:57 +0000
ROA not before:           Thu 06 Mar 2025 02:36:57 +0000
ROA not after:            Thu 05 Mar 2026 02:41:57 +0000
asID:                     28368
IP address blocks:        186.225.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:63:cb:c1:1e:b6:2d:83:b1:e1:34:e3:9e:f2:2d:30:07:78:ba:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:57 2025 GMT
            Not After : Mar  5 02:41:57 2026 GMT
        Subject: CN=3A7D70D6E26CD44DDFBF917DE9A98356B6CAE3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:ed:5c:8e:35:15:49:bc:c7:50:b3:1c:0a:
                    9c:cc:98:bd:ff:09:f2:f3:ac:15:d2:96:3f:18:d4:
                    64:18:05:9c:a1:3c:76:17:df:f9:79:5a:4d:87:4e:
                    da:36:d0:c2:9e:7b:95:39:db:aa:4e:14:c7:5d:34:
                    0f:b3:99:49:d0:53:48:b5:3a:e2:c7:fd:96:f7:76:
                    fe:1a:c4:35:6b:3a:46:54:eb:0d:9d:ec:cf:2d:a1:
                    78:83:8e:c1:01:8b:11:d2:c2:22:c5:40:4f:25:fc:
                    56:80:c7:43:a1:c1:10:90:ad:0e:92:46:38:a8:c6:
                    aa:49:49:ce:4c:df:f1:74:2a:4c:ed:4b:f1:ef:46:
                    6e:b9:f6:63:75:14:c1:fe:e3:b2:32:0e:8a:9c:c6:
                    46:67:ef:53:13:b4:ec:20:79:56:4e:38:76:51:51:
                    18:4f:30:f1:8c:c9:91:c4:2e:83:cd:22:dd:53:22:
                    ac:d8:25:13:0c:5a:cf:6e:46:51:c8:a3:9d:d4:54:
                    4c:d1:76:13:c8:7d:38:34:02:fd:f5:d1:ec:b5:d9:
                    c8:bb:86:ab:7b:13:da:7f:cd:a3:3c:47:72:18:76:
                    a6:f2:81:9f:a3:ce:d2:22:e3:cb:ab:c4:6d:ab:0c:
                    19:c6:76:26:d3:e5:11:dc:7c:36:a9:13:09:a9:a8:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7D:70:D6:E2:6C:D4:4D:DF:BF:91:7D:E9:A9:83:56:B6:CA:E3:B3
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e9:1f:5f:f6:b3:17:53:46:c3:00:4c:36:bb:b2:62:88:2e:
         6f:d7:54:bb:56:22:ce:d7:9c:ed:bd:e9:8a:12:17:7c:79:62:
         29:f9:b8:1e:ad:4c:20:b7:b3:5d:49:9a:33:25:9a:77:4c:37:
         d3:77:d0:53:5e:59:b8:03:5e:74:90:47:43:94:d7:e0:6b:4f:
         13:1b:20:6b:32:68:d3:91:e4:7d:7e:fb:98:4b:3d:fc:b2:f4:
         39:85:74:9b:c2:a2:3e:c6:28:18:b8:13:ed:84:cd:05:37:44:
         50:da:ca:fa:fc:c5:26:df:06:01:17:ab:9c:45:84:6e:70:96:
         de:79:93:f9:8b:40:7d:15:a8:7c:4f:33:0d:ae:64:d1:9c:fa:
         d1:86:1d:db:2e:e0:d9:1b:1b:07:a5:94:75:36:22:bd:4d:ac:
         69:6c:a7:46:f8:84:d4:49:df:50:77:0c:b2:89:f3:78:97:a4:
         09:24:6a:11:1c:f9:d6:5a:f5:9e:b0:d2:34:3e:e9:59:56:a9:
         58:52:df:58:ac:d2:96:ef:aa:ec:16:e4:b1:7c:37:15:fe:52:
         c2:23:96:23:06:5b:3b:af:a3:ca:94:c4:b4:87:c4:34:ad:39:
         e1:d3:8f:85:8e:cf:d4:48:e6:21:07:89:12:ee:54:e6:fe:30:
         44:e9:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:04:21 2025 by rpki-client