Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33342e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          yxEzmNwx2vBh2ilAwitM8ey6zgiVIW/beaeMjEcJ1+E=
Subject key identifier:   19:33:0C:73:4E:A6:E8:C7:EE:58:9C:D1:45:04:74:E0:E7:31:F2:1B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       70C848DD06CDC75C36C88E4FC9447A8EB6C71368
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:17 +0000
ROA not before:           Thu 04 Apr 2024 02:21:17 +0000
ROA not after:            Thu 03 Apr 2025 02:26:17 +0000
asID:                     28368
IP address blocks:        186.225.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c8:48:dd:06:cd:c7:5c:36:c8:8e:4f:c9:44:7a:8e:b6:c7:13:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:17 2024 GMT
            Not After : Apr  3 02:26:17 2025 GMT
        Subject: CN=19330C734EA6E8C7EE589CD1450474E0E731F21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:49:c5:b1:55:7b:c1:f2:b1:02:dc:54:77:
                    87:c7:a4:83:0c:e7:65:a8:cf:27:a0:e7:52:d6:73:
                    bb:7a:f7:87:53:65:77:d0:bc:99:2c:4f:f0:98:64:
                    4b:05:49:66:d7:a5:8d:90:fd:3e:74:37:f6:89:a0:
                    50:a9:1f:bf:7e:2d:25:db:52:53:5c:74:96:dc:be:
                    42:52:23:d6:55:f5:cf:37:1a:c1:5c:52:51:a3:6a:
                    8d:80:a3:e7:9b:e4:60:c3:03:f5:fb:10:80:9d:f3:
                    12:de:dd:3d:c4:5a:48:a9:74:d5:da:4d:58:c1:48:
                    df:d6:3a:c5:6d:be:4b:65:19:ff:aa:bf:4b:82:fd:
                    a0:fd:5b:8b:f2:97:71:07:78:74:0a:54:60:2c:9a:
                    45:a7:24:9e:0a:d1:b9:6f:f0:19:26:c6:c5:1c:5a:
                    c4:0a:e1:54:78:09:71:f8:79:e3:61:93:11:ee:fc:
                    1f:11:32:2a:c3:fd:f6:36:b0:2b:56:c7:40:75:5d:
                    1e:f5:1d:7a:10:fd:4d:60:a9:30:e2:57:5b:f0:39:
                    ff:11:a4:af:bb:85:0d:fd:31:a0:b1:e5:9d:96:7b:
                    7d:91:c5:33:2d:46:e4:68:1b:11:a5:ac:fd:1a:18:
                    fd:fc:39:4b:11:75:8d:41:1e:e3:71:9b:b6:d2:c4:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:0C:73:4E:A6:E8:C7:EE:58:9C:D1:45:04:74:E0:E7:31:F2:1B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33342e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:62:ff:3f:79:4c:6f:6c:2a:dd:bd:2b:51:c7:21:d5:8c:f0:
         04:3e:c7:99:39:cc:99:72:6c:cd:b8:aa:94:62:6b:00:01:6a:
         69:9e:d2:83:78:0e:4f:9f:20:86:48:97:71:96:78:74:96:51:
         fa:10:fc:bf:79:4a:59:06:79:c3:7c:0e:52:f3:19:bb:bd:f1:
         26:5f:79:c8:e6:6d:33:91:f8:03:75:c0:1a:0d:ba:55:1f:e2:
         ad:f6:d4:34:ac:24:8b:fa:f1:19:30:dc:c8:0a:a9:de:9b:7e:
         4a:49:d5:02:2e:34:69:47:22:96:34:48:9a:42:fb:e1:a7:d9:
         09:89:24:b3:d9:53:d8:b2:1b:8c:d7:3a:3d:3b:6b:3e:46:ae:
         06:ab:74:2a:b1:7a:4e:ee:38:7e:cc:e1:de:53:06:2b:3c:1f:
         7c:e4:a5:8a:31:3d:45:28:f8:b7:e1:51:72:a6:57:b7:ea:60:
         15:1a:fd:94:f8:93:5d:4a:a2:3c:e4:51:13:73:53:0e:3d:b7:
         01:21:a3:b0:2a:1f:b5:9f:c9:ce:ba:8d:bb:17:6f:a1:08:ef:
         b0:89:c1:c3:39:2d:bb:ee:dd:1e:62:07:31:8d:46:65:08:cd:
         3f:fc:a8:3b:b2:ff:85:ce:fd:93:ce:a2:1a:d9:ac:45:01:7d:
         1a:13:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org