Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33382e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          YQrFVRwQhBpEUu3pNO7muMPKfOgxNCJUywWVkdP3UYk=
Subject key identifier:   99:FE:0B:AC:06:11:5A:D5:BF:13:A5:0B:0D:6C:03:FA:7A:2F:A1:05
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5BA1B463B7512A2C7A4081439387AC72A9174A60
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:07 +0000
ROA not before:           Thu 04 Apr 2024 02:21:07 +0000
ROA not after:            Thu 03 Apr 2025 02:26:07 +0000
asID:                     28368
IP address blocks:        186.225.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:b4:63:b7:51:2a:2c:7a:40:81:43:93:87:ac:72:a9:17:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:07 2024 GMT
            Not After : Apr  3 02:26:07 2025 GMT
        Subject: CN=99FE0BAC06115AD5BF13A50B0D6C03FA7A2FA105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:40:86:ba:7d:9d:bc:32:49:e6:40:c5:c7:
                    0c:9a:65:12:cd:01:90:1a:bc:f4:2e:50:cd:a7:af:
                    28:35:15:2d:75:bc:6c:e5:25:8c:27:7f:86:f4:5a:
                    7b:41:17:e9:60:bc:5d:b3:09:e7:46:ea:f2:87:d9:
                    a0:1a:43:26:40:61:04:f6:64:54:54:fe:ac:02:3b:
                    57:04:c5:1c:13:21:9c:32:85:84:b7:e4:42:a0:08:
                    5f:bf:c2:e7:c2:24:e1:3c:42:2f:2f:05:5e:26:3d:
                    e3:94:e6:7a:e5:2f:b7:a2:eb:da:d3:b5:f6:91:26:
                    af:b1:76:55:7a:83:44:72:92:59:6a:41:ca:c6:f5:
                    12:19:ba:98:9f:42:ee:60:f8:3a:f7:03:f3:00:09:
                    1a:b8:8b:e9:ce:8b:8f:9a:19:20:ae:db:07:fa:c6:
                    1c:f7:da:6d:c9:02:f7:31:d6:a6:47:9c:4f:22:77:
                    6c:e6:60:e9:c5:08:b1:d2:f1:62:49:b0:52:73:9e:
                    65:b4:5a:00:96:ce:ec:3d:5e:45:1e:d9:d0:d9:a1:
                    0f:00:75:8c:ce:3b:2a:75:c2:ac:6a:f6:35:2b:d9:
                    b8:74:5e:1f:72:2f:c4:32:46:4a:af:5f:7f:b5:81:
                    c1:80:62:a9:de:41:ad:f8:9e:cb:07:50:c3:e4:d4:
                    c2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:0B:AC:06:11:5A:D5:BF:13:A5:0B:0D:6C:03:FA:7A:2F:A1:05
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7f:d3:dd:17:ce:ab:95:1c:c0:e8:1d:4f:5a:8d:69:38:7d:
         10:4f:a3:82:2e:b1:5e:cb:82:54:be:3f:9a:5f:9b:4f:15:9b:
         29:47:c1:02:7a:70:0b:b2:f7:7f:01:b5:11:3f:4c:fb:19:0e:
         16:25:56:96:88:86:7a:fb:ea:c1:7c:99:6d:e0:29:d5:b3:2b:
         3d:0c:dc:92:7b:fe:e9:b6:8a:57:68:20:8d:6c:5c:07:89:59:
         e7:2a:da:6d:3f:fe:eb:97:01:15:c8:36:f7:b4:17:1f:67:06:
         e5:f3:e8:69:45:33:de:f8:02:1c:90:2d:68:93:60:37:47:16:
         9b:cb:d7:6a:6a:1c:01:a8:92:5f:cb:80:1e:b5:5c:e5:4d:ad:
         8d:59:f6:65:85:46:6c:18:7f:63:1c:9d:e0:7c:14:4a:d2:92:
         16:49:90:ac:b1:c4:ce:23:ef:d0:d7:ff:2b:fb:5d:ba:92:59:
         8e:1c:4a:89:97:60:bd:e3:c1:9d:3b:56:7f:6b:89:fb:f2:1c:
         be:34:f5:f3:4c:4f:63:96:d2:e1:11:94:3f:f2:4e:47:18:11:
         ad:0e:d4:f5:f1:9e:d8:fc:fe:8a:2e:14:2c:4f:3d:28:50:41:
         94:db:6b:46:f1:47:b4:ea:c8:e7:78:7a:df:12:ec:1a:09:91:
         26:e0:b5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:15 2024 by rpki-client on console-ams.rpki-client.org