Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          biuZEMz9GZOWihAiKIE5J1F3EnzN11RZ0abeS3cUt+E=
Subject key identifier:   26:75:F3:97:03:8F:9D:3E:7B:FD:3A:0D:80:AA:9C:DF:4A:34:63:69
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       66AB5632030E5D91FFCDA98422597F5192B93A94
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:08 +0000
ROA not before:           Thu 04 Apr 2024 02:21:08 +0000
ROA not after:            Thu 03 Apr 2025 02:26:08 +0000
asID:                     28368
IP address blocks:        186.225.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ab:56:32:03:0e:5d:91:ff:cd:a9:84:22:59:7f:51:92:b9:3a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:08 2024 GMT
            Not After : Apr  3 02:26:08 2025 GMT
        Subject: CN=2675F397038F9D3E7BFD3A0D80AA9CDF4A346369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:c3:64:f4:ad:c4:ba:1b:1b:41:49:e5:99:
                    1e:28:ec:53:f5:18:c0:c7:fb:00:3e:72:a0:10:77:
                    47:b6:2d:0a:29:71:0b:f1:2e:b7:50:69:75:6f:62:
                    66:b7:5e:35:60:dd:53:f0:d6:50:00:a8:9c:f5:bc:
                    f1:2a:82:c3:bd:4e:e2:19:00:e4:48:01:52:d2:a8:
                    1e:b3:7a:f7:57:02:c6:b0:96:a3:79:7c:f2:0a:a2:
                    1b:71:9f:61:2f:cf:56:c9:7f:cd:a1:ab:c8:dd:77:
                    37:84:4d:a3:c4:ce:8e:56:fc:a7:3f:79:af:68:fa:
                    e8:9a:d5:a9:83:29:11:f5:8d:3b:e6:91:a0:74:74:
                    d8:d3:56:88:c3:df:73:7c:a9:24:9d:4e:bc:45:c0:
                    b4:1a:13:32:93:61:da:00:db:19:29:af:63:e5:0c:
                    a9:eb:ec:31:71:0c:21:3c:09:c8:26:12:7b:8d:02:
                    07:d6:ca:68:2d:70:14:af:4e:9d:4b:3a:1b:75:c4:
                    00:fe:82:3f:77:98:c4:5e:c7:c8:cc:da:1d:fd:3f:
                    f1:84:10:90:8b:65:6b:87:55:a5:55:1d:dd:8f:bd:
                    64:81:2b:0c:97:df:90:d8:05:a4:6d:06:5b:a0:4c:
                    47:3f:b9:7c:0a:d7:81:14:96:ed:1e:8f:a9:68:ba:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:F3:97:03:8F:9D:3E:7B:FD:3A:0D:80:AA:9C:DF:4A:34:63:69
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:53:b5:4f:20:c8:e4:2b:3b:02:15:69:ca:47:eb:eb:08:
         b8:04:08:d1:e4:bb:14:0b:41:85:d6:06:e4:9a:dd:39:e4:b1:
         bf:18:31:6f:42:4d:ee:d7:bc:ed:82:dc:c6:d8:dc:82:ad:36:
         6d:1a:60:9b:7c:b2:82:87:e0:2d:f6:d3:b1:85:12:64:f2:f4:
         0e:6b:0b:41:ea:2b:3f:f0:22:1c:c6:57:c8:df:ac:96:33:00:
         24:60:b0:17:cf:68:7f:99:7b:a2:4e:26:14:82:29:ee:77:b9:
         f8:cd:2a:dc:90:0a:de:44:4e:5a:a3:26:79:b6:b1:81:79:f8:
         04:47:1f:07:c2:77:b1:54:70:35:c8:cf:d8:21:99:5e:c0:ac:
         99:e3:a8:c2:b4:f1:3d:60:cf:ba:e1:a7:53:81:06:6b:85:b9:
         dc:0c:83:21:66:39:b6:03:df:1a:72:99:17:5e:a3:a5:8c:4b:
         ca:a7:e2:91:8a:3e:4f:fb:b7:66:05:27:9b:ec:6a:8e:f0:b7:
         c0:92:38:db:02:69:ad:8c:1e:91:3e:3e:21:09:72:dd:9f:91:
         26:86:f2:10:3a:58:dd:51:fc:5e:c3:2a:8a:05:16:fe:32:dd:
         17:7f:e6:9b:84:df:8f:1b:25:52:f4:1e:45:98:63:de:ef:cf:
         2c:23:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org