Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          Q2FOoFYfQzbiWC97w/r0oV0k/fR/eFGSWfmCJt9rbPU=
Subject key identifier:   E2:22:42:95:DE:D8:DC:4F:D0:BC:C0:DD:81:E8:1D:72:A6:7A:60:4A
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6AC5881C11A7F09A62379CFB7D87B52963130FA8
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:56 +0000
ROA not before:           Thu 06 Mar 2025 02:36:56 +0000
ROA not after:            Thu 05 Mar 2026 02:41:56 +0000
asID:                     28368
IP address blocks:        186.225.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c5:88:1c:11:a7:f0:9a:62:37:9c:fb:7d:87:b5:29:63:13:0f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:56 2025 GMT
            Not After : Mar  5 02:41:56 2026 GMT
        Subject: CN=E2224295DED8DC4FD0BCC0DD81E81D72A67A604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:c0:ce:96:f9:f0:9f:6b:39:99:55:8c:bf:
                    96:35:81:d5:1b:15:7b:28:55:17:00:d8:61:be:6f:
                    53:1b:89:20:e7:19:95:1f:b2:80:ee:7f:ab:e1:0b:
                    23:74:59:ad:6e:31:08:da:d6:74:90:a1:22:5d:2f:
                    36:b3:2f:75:9e:ed:a9:0f:10:6f:6b:51:0e:d3:89:
                    96:65:4e:24:f5:a2:41:90:86:71:a1:46:9e:5e:d9:
                    3c:af:ff:81:b7:04:96:21:6c:b6:e7:9c:d8:5b:55:
                    c2:a0:1b:f9:b0:f4:7a:06:cc:e0:f7:58:07:33:28:
                    2c:16:2b:a2:09:b2:ae:f0:b7:b0:5e:d6:c5:eb:26:
                    43:66:24:d1:dd:3d:49:bc:67:bb:b5:82:13:af:47:
                    90:d0:d7:ce:f1:3a:66:97:56:82:a2:f4:81:ce:0e:
                    ec:95:28:bc:69:29:82:f9:72:6a:b7:b7:0c:69:ee:
                    20:27:4e:07:fe:84:a3:4c:51:c3:f6:bd:22:98:b6:
                    64:6f:4b:52:f1:6a:b7:9e:15:aa:92:a0:98:d8:e1:
                    cf:ed:5b:29:a6:08:db:8e:dc:81:c7:e2:4a:4a:ef:
                    c8:a1:30:15:a5:dc:e9:16:9d:8a:5a:0d:3a:81:e1:
                    ae:62:bf:3e:f2:fe:31:04:b9:05:9b:78:8c:9c:c9:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:42:95:DE:D8:DC:4F:D0:BC:C0:DD:81:E8:1D:72:A6:7A:60:4A
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:38:5c:d2:66:36:bd:36:38:70:23:6d:ec:fa:cc:fd:2e:
         6b:ed:28:cf:96:53:42:a0:42:9d:84:1f:c7:48:4e:eb:72:c4:
         7d:07:54:d1:2a:3e:3a:4b:f7:e3:30:d7:af:51:a9:f9:16:53:
         76:06:9c:da:f7:1f:a2:dd:2a:72:e4:2e:7f:6c:8f:5e:39:d7:
         4d:46:79:c5:79:33:e5:f0:1e:5e:06:d1:45:c5:bd:3b:bc:5a:
         ed:24:63:e6:a3:b9:08:19:0e:d5:ac:c5:50:95:f2:ec:a8:1a:
         66:9c:4f:8b:28:a3:5c:e3:c6:c0:0c:8a:e2:3b:8a:36:07:1a:
         c1:01:7e:39:5c:0a:49:90:a4:52:4e:df:c7:76:84:14:92:ec:
         c8:5b:5c:09:e1:80:5c:13:43:7b:07:11:74:d1:4f:39:51:ab:
         b6:10:00:e2:ec:03:2b:ea:8c:fa:8f:02:29:b4:6e:90:1c:39:
         03:49:bc:9d:cc:6a:3a:4e:c8:a2:d4:c0:e1:aa:d3:9a:cc:d1:
         1b:1b:02:7d:1c:87:09:23:30:f3:02:9b:a2:f8:58:91:4d:ca:
         02:df:6f:d5:a6:5f:04:d0:c6:54:d9:12:70:da:b3:1a:52:aa:
         2d:cc:6e:a0:d2:85:0c:bb:dd:f2:56:ef:1f:a9:d7:15:9b:ac:
         cf:0a:81:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUasWIHBGn8JpiN5z7fYe1KWMTD6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM2NTZaFw0yNjAzMDUwMjQxNTZaMDMxMTAvBgNV
BAMTKEUyMjI0Mjk1REVEOERDNEZEMEJDQzBERDgxRTgxRDcyQTY3QTYwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS48DOlvnwn2s5mVWMv5Y1gdUb
FXsoVRcA2GG+b1MbiSDnGZUfsoDuf6vhCyN0Wa1uMQja1nSQoSJdLzazL3We7akP
EG9rUQ7TiZZlTiT1okGQhnGhRp5e2Tyv/4G3BJYhbLbnnNhbVcKgG/mw9HoGzOD3
WAczKCwWK6IJsq7wt7Be1sXrJkNmJNHdPUm8Z7u1ghOvR5DQ187xOmaXVoKi9IHO
DuyVKLxpKYL5cmq3twxp7iAnTgf+hKNMUcP2vSKYtmRvS1LxareeFaqSoJjY4c/t
WymmCNuO3IHH4kpK78ihMBWl3OkWnYpaDTqB4a5ivz7y/jEEuQWbeIycyfC5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4iJCld7Y3E/QvMDdgegdcqZ6YEowHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuuEoMA0GCSqGSIb3DQEBCwUAA4IBAQA+uThc0mY2
vTY4cCNt7PrM/S5r7SjPllNCoEKdhB/HSE7rcsR9B1TRKj46S/fjMNevUan5FlN2
Bpza9x+i3Spy5C5/bI9eOddNRnnFeTPl8B5eBtFFxb07vFrtJGPmo7kIGQ7VrMVQ
lfLsqBpmnE+LKKNc48bADIriO4o2BxrBAX45XApJkKRSTt/HdoQUkuzIW1wJ4YBc
E0N7BxF00U85Uau2EADi7AMr6oz6jwIptG6QHDkDSbydzGo6Tsii1MDhqtOazNEb
GwJ9HIcJIzDzApui+FiRTcoC32/Vpl8E0MZU2RJw2rMaUqotzG6g0oUMu93yVu8f
qdcVm6zPCoGn
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:18 2025 by rpki-client