Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33392e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          50ixPMh+1ZMihu5jCq3rkfRWnzFor2UwO7bjz6F+M2I=
Subject key identifier:   45:DD:1F:50:7B:B0:2C:4B:68:A9:45:99:B0:F5:FE:D6:C2:FA:75:E5
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6F24CCE423ADCC1B91B7C9F22D05EB7BF0894B4D
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        186.225.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:24:cc:e4:23:ad:cc:1b:91:b7:c9:f2:2d:05:eb:7b:f0:89:4b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=45DD1F507BB02C4B68A94599B0F5FED6C2FA75E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:6e:ec:68:b3:c5:1a:1f:b9:8b:c5:15:98:
                    5f:67:1d:ef:09:9e:73:61:db:7b:44:03:8e:c6:e3:
                    06:bb:d1:8d:49:b5:b0:60:43:1d:e9:2c:55:60:be:
                    70:1c:42:c9:db:c7:86:be:76:8e:23:c4:9f:96:58:
                    44:c1:af:4c:88:20:b2:f4:b3:9a:3b:3a:8c:74:34:
                    f5:85:d7:5e:76:ba:0c:cb:c7:6f:7d:6a:67:81:c4:
                    d7:c3:4b:99:cc:80:7e:a4:b0:96:e0:75:d7:6d:ae:
                    03:e7:87:92:36:aa:7f:55:e6:c4:d0:b9:05:0a:1c:
                    b6:ce:67:b3:00:ad:98:9b:f1:99:43:d8:a2:e2:38:
                    d6:09:26:07:1d:a2:00:a1:b1:0f:33:b2:28:8a:19:
                    c2:0d:81:47:59:70:a5:ef:44:2e:ea:cc:ce:4a:df:
                    5c:29:de:76:4e:ad:29:60:48:6f:f9:9b:42:b1:cd:
                    de:a9:22:79:5c:7e:94:8c:3b:99:2f:2b:7c:0a:61:
                    95:36:2b:36:4e:02:b4:b6:33:7d:a7:f2:8a:a9:54:
                    63:35:4d:41:2e:ba:01:62:d0:66:ab:61:38:26:cc:
                    e9:90:9b:fc:fc:db:c6:62:58:ff:22:2c:38:a3:c3:
                    61:b3:e5:2d:9d:39:bf:4a:bc:59:b7:88:63:3e:02:
                    00:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:1F:50:7B:B0:2C:4B:68:A9:45:99:B0:F5:FE:D6:C2:FA:75:E5
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:31:26:fe:42:a6:60:87:a2:2b:e1:03:b8:91:29:26:9b:d5:
         0b:3f:17:82:b3:bd:9f:65:42:8e:97:66:1c:11:2a:c8:ea:a8:
         af:91:9f:63:c6:8d:5a:75:dd:d1:dc:5e:78:67:c7:56:db:cc:
         31:66:de:63:d3:ca:d2:eb:c9:45:3a:70:3f:df:1b:40:7e:9e:
         d6:39:7a:13:78:2d:59:74:d5:50:e1:37:cc:31:81:38:09:d0:
         11:ee:40:aa:84:84:4a:c2:0b:09:db:f3:2f:7b:04:de:e3:fd:
         d2:63:bc:a2:e9:73:e7:96:1d:86:d5:f4:43:6d:71:1c:06:c4:
         68:d1:68:1b:ef:ca:78:1e:85:50:6c:4b:80:c1:63:f2:98:66:
         45:90:68:2b:f9:01:ff:6e:bc:a6:d9:63:42:17:2b:f8:01:7e:
         40:9b:83:2a:cf:f7:cf:ff:9b:e8:1e:77:a6:23:9f:b5:3d:8f:
         9b:cc:77:a3:57:0c:50:a3:92:3c:70:ce:1f:26:90:ff:43:be:
         f8:31:13:07:c4:7b:f6:f8:df:c7:82:56:b6:54:39:d1:df:3b:
         f2:c4:c9:df:1b:0c:6f:20:ea:29:02:b6:e8:d9:67:6b:3f:d4:
         6f:19:76:41:de:35:fe:77:87:f4:65:06:b6:a0:46:3d:a0:12:
         10:09:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org