Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33352e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          59diGRSE8bN+ljqui1MA1vh5yJhlmCMBrQJBpL1ipVc=
Subject key identifier:   A3:E2:11:7D:54:11:84:27:E4:DB:C8:9B:AE:D8:98:4A:10:5C:3E:73
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6987B3DE4C2C3F2A0C2B84DC968E82A6872A0884
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:57 +0000
ROA not before:           Thu 06 Mar 2025 02:36:57 +0000
ROA not after:            Thu 05 Mar 2026 02:41:57 +0000
asID:                     28368
IP address blocks:        186.225.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:b3:de:4c:2c:3f:2a:0c:2b:84:dc:96:8e:82:a6:87:2a:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:57 2025 GMT
            Not After : Mar  5 02:41:57 2026 GMT
        Subject: CN=A3E2117D54118427E4DBC89BAED8984A105C3E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:d3:e4:5e:20:08:a6:e2:12:13:09:d5:17:
                    9b:6f:0f:d5:96:bb:9a:6e:35:7e:8a:b7:a4:57:34:
                    d5:78:2f:30:14:2d:a1:19:13:7b:6d:02:22:8f:27:
                    2d:4a:4b:16:35:41:28:9b:49:db:43:4d:49:8f:0a:
                    03:40:b7:ce:ce:68:d5:f2:14:5b:04:e6:17:db:cb:
                    f3:02:c2:b7:11:fd:db:db:e6:8d:77:1f:4a:06:23:
                    3b:76:de:b2:c8:8f:c8:9e:f6:3a:e2:9f:60:e6:0e:
                    d8:19:90:6f:9d:b2:35:eb:7e:74:27:40:7d:06:62:
                    82:d7:bb:c1:4f:26:96:d7:f9:9c:e5:65:a9:ba:38:
                    78:3e:3e:28:f1:0f:c9:3e:e5:7d:d2:b4:17:c2:90:
                    27:7f:41:14:a4:ce:67:7c:ab:37:f6:a1:68:30:ec:
                    80:e7:0f:63:f7:46:4a:96:53:65:35:38:e3:75:c6:
                    d1:c1:66:14:d8:95:ef:8e:31:ba:0a:e3:c8:2f:22:
                    1c:2a:c7:99:fb:ed:58:2a:fc:34:ce:ce:f6:a1:63:
                    e1:d4:46:21:4f:4d:27:f1:88:79:f9:0f:16:c3:1f:
                    8d:9a:60:31:0d:95:97:68:da:15:64:18:29:d0:f1:
                    79:b2:22:84:f9:e0:f4:91:9e:96:41:a4:e7:f8:88:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:11:7D:54:11:84:27:E4:DB:C8:9B:AE:D8:98:4A:10:5C:3E:73
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:7d:cd:2f:e7:1b:03:8d:3c:de:53:9d:63:bd:ef:be:56:56:
         18:5c:ed:b0:26:80:29:62:58:d5:b3:42:c5:9b:27:15:77:80:
         00:7b:46:84:a8:02:89:27:1e:6b:c1:58:88:1a:87:2e:40:1e:
         26:05:97:27:89:06:48:47:b4:38:85:60:2f:fe:92:f6:6b:9e:
         e5:67:14:0a:0e:f3:5c:6a:47:d0:bd:20:a7:b1:a1:0d:4f:47:
         87:35:71:cc:f1:db:3a:67:91:07:b3:9e:38:f8:11:a5:a4:b4:
         9b:66:13:64:bb:67:88:e7:68:57:fb:80:dc:7b:7a:af:b2:ca:
         55:f3:45:53:2a:76:0c:df:7c:52:c8:71:b4:aa:e8:4b:d1:62:
         cd:de:b1:76:f0:43:98:b2:96:b1:08:0e:1f:a1:4a:46:7e:fc:
         f5:fb:ac:5f:73:f0:36:69:c4:09:5c:b3:8d:c0:32:bc:02:84:
         53:09:4e:f5:f4:76:85:31:8f:24:73:ad:e4:5a:08:cc:9e:e5:
         7d:1d:30:0b:d1:eb:29:ea:7c:a3:95:d5:35:90:46:b1:31:18:
         9a:57:05:37:54:74:ea:4e:0a:8b:ac:85:32:5d:a6:ea:45:45:
         f4:6d:d4:f3:2d:e5:5a:c5:12:99:a5:cf:20:d2:c0:63:2c:ff:
         84:c8:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:33:32 2025 by rpki-client