Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          PDGQTw2BvE7s+HTSw1F/9avLzc+xMz9l+OhXUvwhSdc=
Subject key identifier:   39:4E:9C:D5:C0:B3:31:0B:C5:CE:0B:0A:B6:6B:ED:47:7D:42:57:C5
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       09758921EA3FCE96243CDA84FA3A76E229BA4A63
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:08 +0000
ROA not before:           Thu 04 Apr 2024 02:21:08 +0000
ROA not after:            Thu 03 Apr 2025 02:26:08 +0000
asID:                     28368
IP address blocks:        186.225.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:89:21:ea:3f:ce:96:24:3c:da:84:fa:3a:76:e2:29:ba:4a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:08 2024 GMT
            Not After : Apr  3 02:26:08 2025 GMT
        Subject: CN=394E9CD5C0B3310BC5CE0B0AB66BED477D4257C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:e5:38:79:b8:b9:15:c0:f3:30:7d:6b:af:
                    d3:e9:6e:f0:08:97:a5:ab:fd:7a:2a:70:74:b2:38:
                    b0:93:20:79:19:70:be:b3:d5:8f:fd:68:b0:57:f8:
                    ba:2d:40:8e:51:5c:8f:27:b3:10:42:61:32:77:31:
                    b3:cf:3e:4b:fb:e9:6d:b3:2a:26:f0:de:87:58:32:
                    84:35:b5:6b:7e:7e:ff:14:34:bd:87:fb:18:10:f4:
                    f6:5f:a2:dc:fe:3c:16:e5:54:ab:e2:c8:23:c9:cd:
                    e8:cf:62:85:f0:5b:bb:f6:81:b2:e7:d8:d4:8f:ff:
                    75:2d:4d:e5:36:fc:af:bc:a4:78:c6:c9:da:7e:d7:
                    71:dd:91:07:ff:cf:53:76:a6:f9:f9:b3:28:b2:81:
                    ec:90:51:59:85:f1:b1:90:30:87:4d:e4:f1:4d:83:
                    99:0c:19:52:e0:a3:76:ec:33:e5:a0:57:5b:3d:a3:
                    6a:32:11:5d:c6:d8:cf:ba:54:5e:0c:26:19:7d:02:
                    17:dd:8b:7f:ea:3b:8d:9b:84:5b:b3:76:d3:02:40:
                    e5:fb:55:70:2f:d3:85:ad:15:9d:fb:0a:30:c1:05:
                    fd:c3:7a:df:21:36:90:e7:9f:fc:be:21:b8:8b:52:
                    bf:dc:e2:a2:42:39:f0:67:b1:b5:ea:8f:d0:02:1d:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4E:9C:D5:C0:B3:31:0B:C5:CE:0B:0A:B6:6B:ED:47:7D:42:57:C5
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:58:8c:a0:1e:8b:3c:4e:dc:b7:ae:87:19:12:74:90:34:dd:
         73:e5:68:91:51:f1:1d:35:62:12:d8:1e:da:f8:40:ad:cf:ff:
         b5:bc:48:8f:90:33:db:48:ba:56:d6:8c:cb:cd:57:bd:46:9d:
         92:f4:a8:20:17:31:03:df:b1:26:99:cb:f0:43:8b:b7:d0:dc:
         29:75:54:83:26:2c:fd:13:73:a3:b4:d2:1d:b9:1d:ea:ba:8e:
         49:37:33:86:44:29:b6:95:44:1f:52:60:d2:c0:fa:54:20:52:
         28:f7:a0:4b:68:37:de:e9:ec:07:07:e6:c7:38:3d:5b:d3:59:
         c1:23:63:38:f7:0e:6d:10:93:91:ca:60:8a:7e:76:21:b2:f5:
         ba:6a:a7:df:69:15:2a:7d:62:19:25:69:f5:40:0f:28:f9:3f:
         e9:3d:1e:b4:b3:b6:5c:d9:57:bd:6a:e4:42:86:c3:09:dd:02:
         78:69:05:51:d9:69:4e:c6:04:41:75:7b:91:08:da:b8:b2:b5:
         4e:6f:f9:9c:0e:38:e7:f7:3b:35:b6:28:41:19:e6:af:3c:dd:
         cf:b0:57:b8:c1:25:6f:51:f4:b1:e2:bb:b4:1a:cc:c2:ba:30:
         e7:2d:e8:43:10:6f:94:a0:b2:5d:a4:4f:0c:01:ac:8a:09:b9:
         07:7f:ca:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCXWJIeo/zpYkPNqE+jp24im6SmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMDhaFw0yNTA0MDMwMjI2MDhaMDMxMTAvBgNV
BAMTKDM5NEU5Q0Q1QzBCMzMxMEJDNUNFMEIwQUI2NkJFRDQ3N0Q0MjU3QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DOU4ebi5FcDzMH1rr9PpbvAI
l6Wr/XoqcHSyOLCTIHkZcL6z1Y/9aLBX+LotQI5RXI8nsxBCYTJ3MbPPPkv76W2z
Kibw3odYMoQ1tWt+fv8UNL2H+xgQ9PZfotz+PBblVKviyCPJzejPYoXwW7v2gbLn
2NSP/3UtTeU2/K+8pHjGydp+13HdkQf/z1N2pvn5syiygeyQUVmF8bGQMIdN5PFN
g5kMGVLgo3bsM+WgV1s9o2oyEV3G2M+6VF4MJhl9Ahfdi3/qO42bhFuzdtMCQOX7
VXAv04WtFZ37CjDBBf3Det8hNpDnn/y+IbiLUr/c4qJCOfBnsbXqj9ACHfMnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOU6c1cCzMQvFzgsKtmvtR31CV8UwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDuuEoMA0GCSqGSIb3DQEBCwUAA4IBAQBIWIygHos8
Tty3rocZEnSQNN1z5WiRUfEdNWIS2B7a+ECtz/+1vEiPkDPbSLpW1ozLzVe9Rp2S
9KggFzED37EmmcvwQ4u30NwpdVSDJiz9E3OjtNIduR3quo5JNzOGRCm2lUQfUmDS
wPpUIFIo96BLaDfe6ewHB+bHOD1b01nBI2M49w5tEJORymCKfnYhsvW6aqffaRUq
fWIZJWn1QA8o+T/pPR60s7Zc2Ve9auRChsMJ3QJ4aQVR2WlOxgRBdXuRCNq4srVO
b/mcDjjn9zs1tihBGeavPN3PsFe4wSVvUfSx4ru0GszCujDnLehDEG+UoLJdpE8M
AayKCbkHf8ri
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org