Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e33362e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          DIulMaj5c4ypoj3+xw2GSKE3yqCtCX3AmAFuBHaNFRU=
Subject key identifier:   8E:98:31:C3:79:85:BD:3C:7C:E3:D5:04:FF:C2:85:EB:BF:EF:6E:44
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0B4A68DE881429494574EAA865B051E7F945BE69
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:10 +0000
ROA not before:           Thu 04 Apr 2024 02:21:10 +0000
ROA not after:            Thu 03 Apr 2025 02:26:10 +0000
asID:                     28368
IP address blocks:        186.225.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4a:68:de:88:14:29:49:45:74:ea:a8:65:b0:51:e7:f9:45:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:10 2024 GMT
            Not After : Apr  3 02:26:10 2025 GMT
        Subject: CN=8E9831C37985BD3C7CE3D504FFC285EBBFEF6E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:9c:84:ca:33:4b:11:6a:79:8c:6f:a5:5c:
                    5b:b7:69:10:5f:56:50:b5:76:74:62:c3:64:45:49:
                    79:81:b2:7f:2a:aa:64:df:f3:01:3b:b8:75:80:f3:
                    c8:41:1c:ae:75:93:45:a9:83:b4:97:35:81:e7:a5:
                    6a:cb:68:4b:b2:7c:ce:58:63:45:b7:e4:f2:ab:b0:
                    1c:33:61:9c:c4:7c:90:d3:36:ab:e3:39:b9:1f:4e:
                    d0:ee:62:f3:f3:f1:27:b8:fa:1a:7f:5b:09:06:08:
                    eb:ec:a3:ef:d3:d6:3f:cd:9d:23:41:aa:1d:db:91:
                    be:63:ce:3e:65:13:6f:f8:92:ed:66:0d:e3:55:6a:
                    94:2f:ab:f8:70:a7:3e:25:69:00:3a:3b:b5:15:c2:
                    34:8c:3d:1e:4f:47:6b:6d:40:be:f5:fc:33:d7:1b:
                    02:42:4c:7b:4a:ef:07:4f:d7:43:f7:b8:0e:30:09:
                    8a:1e:a6:15:d6:98:72:c0:09:30:fe:21:d5:70:77:
                    ff:be:59:e5:e7:0d:09:ff:f0:ec:04:76:bb:97:f3:
                    c5:2d:7c:87:f4:5d:e2:7a:01:6c:3a:f7:53:1d:49:
                    d2:b0:1f:bf:74:19:c9:b2:3f:f2:12:a4:85:26:c3:
                    5e:4d:b9:f1:f7:44:de:12:26:ce:93:0c:a0:58:94:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:31:C3:79:85:BD:3C:7C:E3:D5:04:FF:C2:85:EB:BF:EF:6E:44
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:67:50:19:84:7a:6c:50:80:f0:72:4c:d7:62:64:27:65:53:
         be:be:eb:df:e9:04:2c:00:48:0a:d1:3d:5e:a3:38:a2:47:8c:
         ef:ad:6b:41:b8:b5:06:83:74:ca:5e:22:87:80:b7:1a:59:d7:
         4b:03:14:a7:c3:bf:45:2e:f2:d1:5c:3c:d9:0c:67:7a:d0:12:
         70:93:4b:c8:63:b7:d4:e5:f0:75:95:c4:16:cb:77:4f:27:44:
         7f:84:bb:45:9f:fb:dd:85:9a:0a:bb:f4:49:6a:f0:cf:44:70:
         17:28:ca:83:df:98:e4:30:b5:18:58:9b:c9:6f:7f:b5:bf:d8:
         a3:44:a7:8a:ab:f8:8f:7f:45:56:5c:7d:51:1d:4d:b8:b7:e1:
         e4:8f:92:6c:a5:4a:61:5f:4e:04:90:96:6d:12:d1:89:68:81:
         e5:0c:9a:49:ca:16:d8:6a:03:e2:16:0f:cd:3f:2a:e2:82:fe:
         b9:61:75:1a:e1:45:8a:07:d1:b7:d1:a3:02:a5:cc:e7:b1:67:
         f1:49:e0:f6:a0:7d:40:e9:9f:ad:00:97:84:1c:94:15:00:95:
         95:f9:fb:b4:26:67:16:84:f3:18:5b:81:30:b4:0e:af:43:ea:
         a7:67:4d:9d:a6:73:2c:23:5f:7e:70:4f:e2:58:fe:fc:d8:d4:
         13:b7:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org