Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          OQtiTiX/6qNO04Y2TjrQ1SPZjaUWqSW3xGbYByAEJIg=
Subject key identifier:   B6:6F:DE:C7:14:D0:3E:A5:40:0C:4A:2C:D4:45:67:7E:C2:58:92:B2
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       675061EE157A759ACF60398237F4FF8285AD4021
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:07 +0000
ROA not before:           Thu 04 Apr 2024 02:21:07 +0000
ROA not after:            Thu 03 Apr 2025 02:26:07 +0000
asID:                     28368
IP address blocks:        186.225.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:50:61:ee:15:7a:75:9a:cf:60:39:82:37:f4:ff:82:85:ad:40:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:07 2024 GMT
            Not After : Apr  3 02:26:07 2025 GMT
        Subject: CN=B66FDEC714D03EA5400C4A2CD445677EC25892B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:32:0f:e6:a5:9c:aa:f7:9b:75:4d:87:80:
                    b1:7f:ca:1d:db:b0:2e:98:de:06:db:9a:10:fc:b5:
                    56:16:2a:78:e3:d4:9e:f2:fc:93:f0:50:14:6b:ea:
                    fb:c8:08:f1:1a:3f:ea:34:38:eb:2f:07:55:08:78:
                    c7:c0:fa:26:19:c5:01:63:07:dd:79:83:99:ad:ea:
                    ff:4f:ca:c4:e4:8a:dc:1b:1b:61:ed:c7:6c:14:5a:
                    9f:2e:fb:22:0b:95:5c:17:67:dc:d0:9a:5f:47:5e:
                    dd:0f:1d:0a:c5:4b:d6:5e:fe:6c:ff:3d:13:b3:b8:
                    f2:b0:dd:d9:c1:4d:aa:ba:92:b0:d4:6b:7f:e0:3b:
                    e8:3c:f4:ac:ca:dd:34:66:89:ce:7e:54:53:68:03:
                    9f:5e:e7:86:6a:50:b7:be:bb:d6:34:f2:62:4b:55:
                    06:e8:ee:f2:f0:1b:56:51:22:3b:f8:49:6a:91:2d:
                    34:9f:60:02:40:5a:d1:cd:f2:03:bc:24:56:ee:1f:
                    13:59:a4:6c:59:83:61:a5:76:9a:01:52:87:59:91:
                    4c:33:8a:28:e8:9b:cc:19:13:9f:8e:9e:70:61:94:
                    8a:97:44:f8:aa:3a:77:c8:55:93:d0:e9:01:ff:b2:
                    33:b4:39:2e:ed:e9:12:5c:59:68:9c:73:a4:e0:ae:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:DE:C7:14:D0:3E:A5:40:0C:4A:2C:D4:45:67:7E:C2:58:92:B2
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:e4:71:11:6e:97:6f:0f:12:ff:d2:e2:29:fa:6d:e0:23:89:
         26:44:a2:58:6d:42:39:33:22:2b:4b:ef:4b:a9:9c:67:89:bb:
         59:58:e6:4b:a0:b6:3c:5d:85:eb:ac:cb:f7:d4:47:b5:c2:d2:
         77:c9:a8:9c:5b:6a:61:da:b7:d7:5c:b6:9f:82:e5:5b:66:68:
         66:e7:6b:56:fe:2a:9d:9f:f1:99:30:e3:32:bf:0b:59:ed:0c:
         50:11:6f:64:9c:cc:3f:6e:b3:2e:29:da:59:ce:81:06:03:7a:
         ec:87:ff:e5:0c:50:5f:84:07:af:2c:40:13:87:a5:b1:d9:f6:
         b8:c5:e9:53:c2:12:b1:1f:ec:a4:8c:7b:c4:52:ac:16:7e:6c:
         57:cc:9a:f5:81:8a:2b:e8:5f:c6:46:8e:5a:b7:da:b5:3d:1c:
         c1:b5:79:cf:52:04:91:d8:57:56:65:6b:52:d3:77:17:45:9b:
         46:b6:5e:7a:03:cc:a2:55:3b:38:37:66:a2:2e:34:9c:f7:82:
         5a:06:f2:2f:a8:fb:61:01:06:5b:f1:6e:3b:52:b0:bc:6c:5e:
         d9:12:0c:bd:aa:91:42:8e:d7:05:41:e3:80:5d:99:34:ea:cc:
         e5:66:62:48:a0:4d:d6:55:08:fb:6f:ef:6f:6e:e6:61:5e:c6:
         12:d2:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org