Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          dshO/sjXhOd427225T1n+astY4YSzpaTGQdQpCUZCy0=
Subject key identifier:   37:48:51:F8:94:92:D2:4D:94:81:F1:1D:1D:32:9D:7F:16:76:CB:44
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       51DEF296E8EE50D2EE028B820568E48CD163322B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        186.225.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:de:f2:96:e8:ee:50:d2:ee:02:8b:82:05:68:e4:8c:d1:63:32:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=374851F89492D24D9481F11D1D329D7F1676CB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:ff:46:1f:d2:de:8c:76:41:de:c6:d5:b4:
                    e4:96:0a:1f:58:6e:16:1b:ff:a0:48:59:02:7c:21:
                    ba:e7:e2:23:2a:b8:5f:40:41:22:c0:2d:d5:50:da:
                    9e:ef:c6:b2:b8:be:4b:ea:d4:3b:44:f0:b6:27:45:
                    61:22:46:16:bc:42:2d:e2:7b:53:36:88:3f:bd:26:
                    f3:d2:5a:26:59:97:5a:4e:f6:f4:99:f1:5d:22:18:
                    ba:31:07:cd:7c:86:3f:6a:85:18:7c:79:49:60:22:
                    b2:0e:0f:e4:d4:d8:57:0c:94:3f:3f:23:18:9c:e9:
                    6c:1e:ec:47:93:63:20:f3:e4:07:83:60:a8:71:ab:
                    23:32:78:38:4c:8b:c7:4f:c0:a5:bc:3e:cd:0f:e3:
                    0e:1a:5a:b9:1c:4d:5c:a4:58:31:c6:5b:bb:da:16:
                    d9:a4:cc:d2:74:54:c0:f2:98:12:a2:22:07:8d:aa:
                    d2:e9:a6:54:d6:ed:01:18:45:1b:41:aa:46:92:a8:
                    61:d6:30:ba:5f:21:59:cf:19:79:fc:9c:69:79:40:
                    d9:1e:6b:78:e1:ad:98:fc:74:58:16:94:e5:cb:b2:
                    4f:eb:f4:65:6d:9f:49:4f:f0:45:79:0f:69:09:15:
                    ba:69:b5:67:1d:cb:ac:47:90:1a:c8:c1:c9:77:d4:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:51:F8:94:92:D2:4D:94:81:F1:1D:1D:32:9D:7F:16:76:CB:44
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:07:c1:25:6d:22:f0:98:93:15:13:bb:75:51:27:98:db:1c:
         b5:d8:f2:52:6d:3b:13:9c:c3:2e:11:af:1a:7a:80:a0:06:43:
         e7:07:df:15:65:71:fb:e5:6e:c5:74:04:c2:64:26:00:66:6c:
         7d:e8:a5:d3:ed:a1:b4:14:51:1e:62:cd:d7:a6:55:df:83:36:
         1b:e4:db:79:05:b5:31:4c:50:e9:1b:a5:19:17:9b:cb:f6:bc:
         9c:37:ee:09:09:22:98:43:e6:00:55:f2:73:3f:77:79:7f:e9:
         0a:c2:ff:a3:c7:f9:99:33:15:03:8a:11:c7:1d:6b:28:fd:0f:
         af:2d:05:86:1d:47:9c:16:fe:e3:e9:0b:e2:72:eb:9d:7a:f0:
         3d:b0:ee:6e:41:64:88:51:20:18:e7:23:38:cf:7b:dc:fa:68:
         3b:be:40:87:ed:46:4d:4b:b4:6f:40:12:38:38:d3:70:d1:3a:
         79:18:24:d3:0b:28:5b:5b:5a:7d:68:3f:a5:c9:a1:71:89:d8:
         a2:d6:43:49:70:17:13:ff:82:f2:c6:a8:d0:c7:db:3d:e3:8d:
         22:17:2f:22:c3:50:3f:43:36:b7:16:ec:cd:2d:8c:61:55:8e:
         60:cd:bc:73:ef:e3:c8:c7:44:25:90:bc:fe:32:2c:82:62:ae:
         21:77:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:11:35 2025 by rpki-client