Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          xpGGtxVbzfPAPqay64xyDdzSD0e3ui8TYPWzdo4p4Co=
Subject key identifier:   A4:71:7D:6D:41:A1:4F:27:66:F2:6B:5E:72:EB:D3:F8:2D:A5:AF:73
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       61CC36DFA4F4F065A63F26717CA7DDB190A37C30
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        186.225.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cc:36:df:a4:f4:f0:65:a6:3f:26:71:7c:a7:dd:b1:90:a3:7c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=A4717D6D41A14F2766F26B5E72EBD3F82DA5AF73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:a4:da:59:a0:37:55:a5:54:ad:5e:74:9a:
                    70:96:0a:24:49:5e:8a:ae:92:89:51:44:d1:85:cf:
                    a8:4a:f9:1e:bf:f4:7b:f9:2f:b0:b4:12:54:0a:92:
                    e5:ba:ce:fc:93:ea:84:32:9c:17:7a:a3:04:36:5d:
                    f2:2d:73:55:a0:f7:0f:60:c7:3e:98:9a:e4:92:37:
                    86:a9:25:97:fa:13:ad:8b:89:97:05:8e:79:d2:0e:
                    6d:20:de:f4:0d:93:b9:8b:2b:c8:84:80:f9:a4:93:
                    68:9c:9b:d0:7b:2f:93:56:58:56:21:95:21:7c:4e:
                    eb:a8:ea:97:04:79:80:2e:b0:45:37:88:68:e4:50:
                    7f:20:14:6e:a5:c6:40:75:95:40:1c:f1:d1:cc:1f:
                    f1:04:59:ff:36:cd:2a:28:80:ed:d6:c9:5a:d8:ef:
                    65:86:8c:27:7e:74:ff:d8:db:d0:58:ff:91:00:24:
                    9e:f7:5b:40:7f:8f:05:0f:5e:57:1f:bb:97:d7:83:
                    f1:b4:45:c8:66:95:98:d4:0a:6d:97:c6:16:37:b7:
                    c5:f5:7f:45:6d:eb:58:e4:91:ab:a7:81:f9:96:63:
                    89:3e:06:a3:98:d9:b3:79:0d:48:d6:37:06:23:04:
                    a4:a1:99:4e:90:67:65:08:85:7e:3c:8f:07:af:94:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:7D:6D:41:A1:4F:27:66:F2:6B:5E:72:EB:D3:F8:2D:A5:AF:73
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:2f:be:5f:1f:e7:57:25:77:3f:05:f2:2b:b9:c8:98:62:
         6e:e5:33:d4:28:e0:e8:8e:45:bc:f1:7a:0c:a8:69:37:05:ab:
         57:21:33:e6:e7:92:0e:d7:56:d4:b5:37:ea:ff:6a:c5:26:9b:
         38:bd:c4:b2:e8:84:eb:15:ba:be:2a:3a:60:2c:95:f8:2e:11:
         06:78:de:2f:48:07:7d:b7:b1:7a:e1:80:24:7f:2e:b8:95:98:
         e2:bc:12:2a:dd:5a:5f:08:90:37:8f:70:73:b1:b7:bc:ef:5e:
         b9:20:38:b9:eb:27:0d:e3:cd:25:a7:7b:03:eb:0a:bd:af:67:
         bb:70:ab:e1:41:ff:53:1f:4a:75:37:39:0e:f0:f0:19:ac:ba:
         08:1a:6c:02:80:f6:29:f4:19:78:0e:e4:b4:33:6b:93:f7:25:
         50:5e:c5:e4:9c:fa:ea:cd:b1:f3:66:03:d0:1a:79:92:99:73:
         74:4f:e4:00:71:f6:69:b7:fb:4b:59:62:3e:a7:a3:ee:bc:4d:
         7c:4d:0b:05:03:19:7a:59:e3:a4:0a:31:6e:18:a8:0b:bd:3c:
         c6:5a:fa:b3:98:81:09:30:2f:3b:0e:57:07:d2:e5:fd:ad:1e:
         c1:e2:6e:49:9b:19:df:f0:c5:36:96:69:e6:04:b7:23:94:8f:
         6e:a7:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:13 2025 by rpki-client