Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e33362e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          oIfXoomAm3Yt1HHHJqahUVU5iLqjHynrTP7kQpokTkU=
Subject key identifier:   88:F1:D9:12:4D:DC:23:F6:26:46:AC:8A:B1:69:3B:95:87:0D:99:30
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5125027FD7BE3ED377E9C79D13F56FE1AEA967F5
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        186.225.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:25:02:7f:d7:be:3e:d3:77:e9:c7:9d:13:f5:6f:e1:ae:a9:67:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=88F1D9124DDC23F62646AC8AB1693B95870D9930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:ef:cd:d0:d2:9a:53:7a:f5:8b:fa:b0:f3:
                    4d:05:37:12:d8:ae:82:d1:00:86:d9:44:73:90:2e:
                    64:5f:87:ba:0f:13:45:48:6c:ad:8d:80:eb:6f:79:
                    d9:b2:b8:4f:7f:01:bc:69:73:c0:14:f1:58:c0:be:
                    4c:6f:fb:d6:9c:72:5b:0d:42:cb:ad:f5:81:d0:42:
                    88:d6:ef:ef:38:59:ef:ea:89:b4:61:41:ed:53:21:
                    fc:23:c2:54:74:81:b8:ed:2b:c7:3a:35:49:69:b6:
                    99:5f:e7:82:61:3c:d5:d7:e0:e0:34:74:ba:4a:8c:
                    b4:b8:f2:50:0f:3b:26:02:60:36:7e:fa:9b:bb:aa:
                    21:1b:9d:30:9a:03:41:67:71:15:69:c3:a9:85:b8:
                    01:7e:8e:53:78:b3:a2:98:1b:f1:11:3b:d2:f7:fc:
                    19:f6:2c:b6:3b:9a:61:3b:7f:a3:fe:84:70:92:65:
                    70:37:f6:75:b4:51:b1:cf:c0:75:ff:72:30:87:2e:
                    b2:a0:b7:28:a4:7f:65:bf:11:47:0b:8b:42:ea:9e:
                    0c:4f:ac:a2:27:8b:c4:03:87:14:0c:31:68:04:d7:
                    51:67:03:a6:66:61:e8:d7:30:01:9a:b2:2c:c0:2a:
                    cf:3c:1d:c1:bf:c5:4d:a1:05:fb:8d:00:49:c7:91:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:D9:12:4D:DC:23:F6:26:46:AC:8A:B1:69:3B:95:87:0D:99:30
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:63:d8:33:46:96:20:86:5e:a4:91:d0:59:bc:27:b0:01:
         16:ff:61:03:ef:78:d0:5a:aa:76:a0:70:e8:cc:d3:32:b3:43:
         b2:07:91:c9:fc:0a:97:e3:0c:a3:26:54:d4:eb:f5:48:6a:17:
         d5:31:90:19:f9:66:6e:a5:98:fc:75:f9:97:3f:a9:b6:16:8e:
         80:03:41:3f:e8:12:4b:02:a3:88:f4:ee:20:0d:7c:30:98:d0:
         c0:b1:6a:c2:38:05:9b:74:90:0e:13:f6:41:67:eb:2c:71:ff:
         e5:7b:e4:04:01:62:65:eb:e3:bb:3b:40:93:8c:e7:2b:65:1d:
         f1:5d:9c:83:3a:0d:76:9c:23:2c:95:4d:32:cf:ad:04:4c:91:
         5f:30:83:ce:e7:de:bb:00:42:2f:f8:1e:9b:49:e6:f2:1f:d2:
         a6:f5:c8:b0:48:ca:3b:ee:2a:3a:6b:7c:0e:3f:d5:35:30:50:
         cd:a3:9c:79:01:52:d7:dc:c5:55:5c:be:fc:2e:b7:31:4f:36:
         6b:e0:65:d5:91:8e:41:9f:7c:a2:68:ce:8a:a2:7e:dc:45:8f:
         aa:14:46:f1:3b:7b:79:d3:d9:58:fa:46:b1:c4:b4:1d:43:ce:
         12:05:4a:d0:f0:91:e9:9c:b4:4a:d9:07:86:27:08:15:d8:48:
         b8:ea:82:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:55 2025 by rpki-client