Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e33362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          isO/5IrD3tz3jDF+dC6XQEOXTl5+Hpp8DY4rLwvQdII=
Subject key identifier:   6D:02:2C:CE:15:8E:79:C9:C3:73:80:A2:4D:CE:57:D3:E9:74:B4:7D
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3F15FEF9A7EA29D0CF0BD199100220A1C0763CCD
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:15:fe:f9:a7:ea:29:d0:cf:0b:d1:99:10:02:20:a1:c0:76:3c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=6D022CCE158E79C9C37380A24DCE57D3E974B47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:90:14:d5:ad:38:33:10:2a:44:21:a7:d6:
                    cc:97:d5:fb:36:ba:fc:73:f4:a5:4c:1a:39:6a:c6:
                    0f:c9:1a:f0:d1:71:10:86:f9:65:2c:bb:c5:13:cc:
                    52:11:db:df:ee:c0:1c:da:9b:04:c3:af:99:f2:2a:
                    b1:56:81:8e:97:19:89:9d:75:d3:84:65:ac:0d:c9:
                    74:71:9d:8c:fc:25:ac:7f:de:1c:a2:5f:12:7e:ff:
                    54:32:66:2c:f3:c3:1f:0e:4e:4c:3d:bc:4e:d5:5c:
                    fc:7f:e1:21:22:29:c6:49:39:dc:c8:1b:0a:24:a7:
                    4a:4c:dd:44:39:78:13:95:90:28:9b:67:9a:34:6a:
                    e3:6f:2a:ff:32:84:d7:f8:c7:f1:48:ce:df:41:f6:
                    7d:a1:6d:93:e6:46:91:f5:70:e4:35:fe:00:2f:37:
                    9d:3b:6f:04:02:e8:5b:23:e7:9c:e9:d3:09:00:c0:
                    86:68:29:93:f3:dc:c9:81:bb:cf:db:9b:ba:92:4e:
                    47:a4:01:54:3f:40:9c:b1:20:56:74:32:dc:80:64:
                    76:78:31:49:40:92:09:e7:bc:4b:1b:ba:d4:22:84:
                    46:2f:29:90:6e:ab:e3:01:c1:f0:88:4e:be:a3:e1:
                    3f:88:f5:8f:fc:24:4e:40:cc:83:7c:c9:10:31:9b:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:2C:CE:15:8E:79:C9:C3:73:80:A2:4D:CE:57:D3:E9:74:B4:7D
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:fd:99:86:50:f1:35:43:e5:79:b4:de:4f:4e:ae:02:40:
         8a:92:76:93:e5:62:b2:a9:6b:2d:1e:e7:cc:38:7a:24:e5:48:
         f3:fa:3e:d1:3e:18:e7:6f:b8:8e:bb:b1:0b:ce:17:f9:b3:35:
         bb:f3:7c:ba:0f:45:18:25:5c:f1:d0:ff:ef:68:98:e3:1b:26:
         bc:3a:45:40:fd:67:26:01:c2:c0:b4:c5:6e:cc:0b:69:a6:0f:
         60:6c:e6:1f:83:bf:c8:a7:9c:b1:cf:ee:be:88:2f:f9:67:55:
         b4:17:53:4f:02:1d:8c:f3:1c:0e:49:46:32:db:52:2c:06:4c:
         f9:b7:8a:17:48:bc:40:e9:40:ee:60:ed:29:b3:0a:35:32:17:
         30:d1:81:e7:f8:8f:d6:1c:59:dc:55:12:e9:78:06:e3:46:c4:
         fe:34:e4:21:25:f1:d8:77:49:5c:94:c7:86:9c:80:e5:56:10:
         25:bd:86:7e:97:10:86:bf:4e:47:5a:2c:3c:83:f0:c0:49:e2:
         e1:43:62:34:f7:c9:d6:86:52:12:1e:e3:8e:7e:56:3d:dd:eb:
         7d:66:d1:be:25:49:97:a7:cc:6a:29:b9:b1:f6:77:ad:e0:f5:
         71:d6:44:3d:71:76:e6:8d:20:84:b8:32:be:02:20:60:d6:f1:
         bc:a8:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:56:38 2025 by rpki-client