Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33362e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          8WslnzekdkKfaU3ip5Z44pNB7Bf+pTXh8tFmb/YBTGg=
Subject key identifier:   F1:FB:EC:D9:71:E1:B7:D9:A8:D8:DE:5A:E5:22:FB:78:EB:61:28:57
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7667E95C2D558002EA5B89143D32CC9D12089F10
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:09 +0000
ROA not before:           Thu 04 Apr 2024 02:21:09 +0000
ROA not after:            Thu 03 Apr 2025 02:26:09 +0000
asID:                     28368
IP address blocks:        186.225.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:67:e9:5c:2d:55:80:02:ea:5b:89:14:3d:32:cc:9d:12:08:9f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:09 2024 GMT
            Not After : Apr  3 02:26:09 2025 GMT
        Subject: CN=F1FBECD971E1B7D9A8D8DE5AE522FB78EB612857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:0f:d6:fe:8e:9e:39:18:6b:b9:cc:21:70:
                    1f:ea:9c:91:ac:26:f6:34:09:46:6b:bf:23:59:3e:
                    79:85:2c:04:20:4c:e9:d1:78:59:29:0f:17:d9:65:
                    94:02:de:f3:af:8c:3c:fb:8d:fe:46:28:4b:71:17:
                    e2:be:ec:49:05:7d:57:4c:54:8f:a6:ea:21:ee:12:
                    42:bd:77:c1:79:ed:b4:f8:42:ba:98:e2:8a:7f:9d:
                    ba:5d:aa:68:9c:8a:b1:bd:52:ad:60:dc:01:16:7c:
                    d8:fa:2c:93:f8:8b:6e:8e:a9:f2:c8:fc:c5:26:96:
                    f1:3b:d5:3d:8c:dd:89:f0:ff:48:37:fd:b3:86:af:
                    15:73:67:41:11:7e:10:37:12:02:8f:2b:2e:9c:6c:
                    3f:05:f9:ae:5d:7b:41:ba:7a:6a:74:b2:94:ff:63:
                    b4:5d:e3:39:81:08:f2:4a:7c:1f:d7:58:52:2d:8f:
                    e3:b2:3b:c2:98:c0:b1:43:a6:f1:67:6a:e0:bc:5d:
                    26:bf:c8:74:3b:9b:f7:8f:18:97:e3:23:d2:fe:bb:
                    6d:46:e2:f3:fd:4e:19:53:b5:a2:18:e3:e0:92:94:
                    d3:30:4a:09:40:b7:16:5c:d7:23:f5:fe:9e:d2:c3:
                    44:f9:bb:66:93:0d:82:ad:6f:1c:6c:66:93:99:dd:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:EC:D9:71:E1:B7:D9:A8:D8:DE:5A:E5:22:FB:78:EB:61:28:57
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33362e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:f2:3c:c8:eb:b2:3c:ad:3e:82:ab:c2:a3:7b:60:88:3c:
         ba:5f:f3:68:2c:02:f2:f6:b1:97:e9:37:3e:f7:bc:de:62:d1:
         dd:5a:d1:20:8f:12:be:ea:e2:d7:68:96:0f:c3:40:a1:7a:94:
         eb:0b:3f:bd:d5:a2:b0:e2:83:bf:24:c9:b3:96:7f:1f:e5:7a:
         44:30:88:8b:db:d8:f3:01:41:5f:6c:67:81:d6:3f:43:77:56:
         e8:ca:ac:f9:6c:ab:d6:5f:68:62:56:bf:d5:f0:2f:6a:c6:74:
         99:9e:ce:a7:62:11:7f:26:6a:fd:8f:52:18:4a:7e:e7:db:7f:
         54:b4:ac:a1:87:90:79:b2:d0:6e:89:2f:ee:3a:22:d8:63:c8:
         c0:bf:71:c4:53:16:eb:24:dd:fb:9e:63:2b:f7:a6:08:83:a9:
         c5:b1:e6:b6:d4:a6:58:d9:8d:b8:e2:30:71:32:75:c1:1d:7f:
         23:21:4f:a4:09:37:85:d6:08:73:36:9c:d9:45:d8:80:24:35:
         0c:bd:be:a0:9d:65:9a:ec:20:4c:4e:65:18:bd:e3:0c:be:7f:
         03:24:4b:37:18:45:81:63:6f:11:b2:82:ea:eb:96:93:79:2a:
         55:73:45:6c:52:28:25:5e:76:ac:f9:0d:90:4f:78:bd:b3:ee:
         15:e4:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org