Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33352e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          6mPCBBRwmCeZFGN0fzcahtLoIORT9vq/nheXPwS3KcE=
Subject key identifier:   C4:A9:76:94:50:AF:5C:DD:68:E7:D7:03:70:91:3E:D5:B6:4E:73:28
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       27D99B5AFA01238CB8E0C298E203547BAA936071
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        186.225.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:9b:5a:fa:01:23:8c:b8:e0:c2:98:e2:03:54:7b:aa:93:60:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=C4A9769450AF5CDD68E7D70370913ED5B64E7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:11:97:7f:ad:d8:89:ec:f0:1d:32:d8:62:
                    26:75:6b:26:dd:4e:5c:23:fa:09:cd:d2:37:6d:d1:
                    d8:af:08:d0:bf:a9:7a:ab:a6:1c:02:4b:df:e7:07:
                    2a:5b:be:58:c6:91:45:1b:11:6c:75:ff:fc:0d:88:
                    08:a0:ab:0b:ff:00:b9:03:86:08:04:17:79:45:e6:
                    30:22:f1:3c:dc:38:d3:bd:b5:5e:c6:5c:52:2d:a1:
                    40:b9:9c:38:2f:7b:71:f3:f3:40:b0:e7:55:a8:ec:
                    6c:7a:f1:2b:b3:7b:21:a5:ed:6a:64:24:89:29:98:
                    a6:46:50:d6:69:8f:50:dc:b6:c9:d2:0e:27:a3:48:
                    3a:45:fb:01:94:6a:94:6e:8d:e4:84:b3:61:a5:c3:
                    ed:9f:e1:78:44:77:99:e2:12:78:93:4a:80:ff:85:
                    27:a2:c5:26:3b:f2:b4:37:88:f6:6c:54:a1:7f:40:
                    36:9f:94:05:b5:ef:cb:4b:eb:e9:df:d5:2c:05:19:
                    cd:8d:da:8a:4f:3e:f3:27:3a:7b:88:1e:e1:07:05:
                    1c:ec:e0:2a:2b:2d:3b:60:80:2a:54:50:f3:a6:73:
                    95:0e:a1:60:a0:c0:4f:45:78:6a:c0:61:58:31:46:
                    10:a7:d4:0f:55:08:d9:4a:2e:b9:24:fb:ae:c9:8e:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A9:76:94:50:AF:5C:DD:68:E7:D7:03:70:91:3E:D5:B6:4E:73:28
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33352e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:86:d9:65:d1:94:0c:11:05:fe:32:7a:1f:1f:d0:2b:91:9c:
         9f:b4:fe:ee:1f:d2:af:df:72:61:f2:23:00:d6:92:eb:38:b8:
         6e:31:0d:71:0b:24:b0:dc:7b:4d:ab:27:89:72:c7:c2:ac:5b:
         a7:83:e0:81:8d:4d:1e:e8:19:e8:7e:71:c7:3e:58:9a:bf:c9:
         86:c3:6c:dc:97:92:28:12:23:53:3e:56:dd:cd:9a:0e:25:b2:
         43:78:a2:33:b1:b3:d9:34:4b:f8:60:cc:82:75:b2:4e:b8:99:
         b2:ac:4a:ff:ed:a6:f0:87:9a:59:d5:9f:a5:2a:c0:80:36:e8:
         ba:84:b8:f3:34:97:79:cc:15:58:9b:be:d5:46:1f:94:55:50:
         b6:3e:71:db:ea:4d:79:9a:52:c9:a0:40:37:79:c1:36:73:6b:
         b4:79:74:93:40:b8:2f:98:1e:b3:7f:5e:01:57:13:d5:d8:0e:
         4e:8c:80:1b:4a:21:55:74:c0:77:ec:a1:5d:14:5e:09:e6:aa:
         6a:b8:7b:57:7f:33:55:64:d6:c8:a6:24:e7:d7:60:f8:cb:92:
         f2:d8:ba:b2:09:3c:e5:a1:de:22:4c:0a:7b:d7:50:d4:ea:c7:
         01:f7:32:75:4c:20:bd:6f:ec:b2:61:c8:26:9c:53:27:c1:6f:
         22:99:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org