Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e33362e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          Ljtd1leQtko1ZRTAGHVqdpncolb/D951Dh4JSqtdktg=
Subject key identifier:   FB:FE:C2:01:67:7D:3E:FC:3D:E8:64:17:4B:24:83:0C:91:61:89:1E
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       3D8D757C928F632050C570D26BEAC87CE8AB82CC
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        186.225.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8d:75:7c:92:8f:63:20:50:c5:70:d2:6b:ea:c8:7c:e8:ab:82:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=FBFEC201677D3EFC3DE864174B24830C9161891E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:f9:3c:95:77:0c:42:b4:2a:41:47:7c:a5:
                    e5:e5:4e:5e:1f:24:a2:00:19:e0:3f:5b:78:65:14:
                    fd:43:12:1a:d4:b8:50:79:39:bb:17:52:4d:e1:5d:
                    c4:57:15:d2:ac:f0:2e:21:38:b5:f1:1e:da:2d:46:
                    08:6b:b0:28:bd:bb:0f:f5:f9:b0:6b:df:fc:4d:70:
                    79:3b:ec:e1:90:df:43:02:0a:26:d9:67:76:f4:2e:
                    a4:84:3a:d7:12:8d:95:65:2c:51:73:b5:49:14:51:
                    0a:e4:be:7c:83:a9:29:09:12:78:fe:79:c1:1a:22:
                    1b:65:3f:c2:a5:ac:41:27:87:9a:2c:dc:99:c6:2a:
                    0f:70:37:e1:29:94:91:fb:a0:d2:39:77:81:1d:85:
                    0e:ac:82:ce:24:37:36:fa:8b:93:d6:97:4d:90:07:
                    fa:2c:6d:31:cb:39:2b:10:f6:fb:bd:d1:48:28:85:
                    a8:1e:2c:62:e3:93:c3:46:3a:a9:8a:a8:3e:9b:b8:
                    aa:e1:2d:67:90:90:e2:07:27:97:24:41:5b:d9:df:
                    c8:92:72:f0:69:38:a4:62:c3:ed:47:e2:48:38:30:
                    64:6f:fc:50:36:3d:dd:10:88:f3:6b:b1:16:9d:8c:
                    f5:d2:80:36:2b:b8:ee:68:ab:2d:70:48:2a:08:99:
                    d1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FE:C2:01:67:7D:3E:FC:3D:E8:64:17:4B:24:83:0C:91:61:89:1E
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:41:5c:70:d3:d9:6e:bc:fc:c4:f4:81:9d:bf:74:7a:8d:34:
         27:38:a0:c9:f1:d9:1d:1c:83:f2:9b:39:20:67:36:fc:a0:23:
         45:1a:70:cd:ad:d7:62:10:dd:bc:37:75:6b:82:a8:a5:ba:1a:
         07:d4:84:20:b3:10:84:40:0a:e1:ec:f0:3a:c7:96:1c:04:63:
         56:5f:88:1b:48:f8:1a:82:35:06:15:0c:6b:bf:13:28:99:49:
         86:a7:5c:aa:8f:ca:7c:9c:30:3e:97:dc:e1:42:5e:e0:01:63:
         78:9e:ff:0e:c6:43:97:d0:62:35:ca:e9:96:59:0a:72:3e:21:
         82:93:3a:6b:13:08:36:4e:47:73:ff:cc:a8:3a:69:96:da:02:
         bb:14:c5:fc:d2:b7:a6:26:ef:07:85:4c:99:3b:51:72:fe:c9:
         fe:4a:b0:e2:b3:a2:ea:44:bd:4a:66:36:f0:5f:39:fe:97:ee:
         e0:ca:6a:65:5a:a1:aa:33:11:1f:79:3f:06:7f:ca:98:2f:e9:
         b5:b9:89:9b:ad:3f:d2:aa:3a:1b:de:85:28:6e:ba:90:4c:88:
         fd:24:57:36:4a:81:68:e5:9d:6b:fa:c8:fc:99:93:9b:7b:1f:
         f1:d2:9c:50:5d:32:00:e7:7a:ac:05:cc:b4:20:5b:d1:0a:41:
         0b:d6:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org