Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34332e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          5VfYz/+sKYAA/LAPqRL4HSECJV737q5AdGCApOFVltQ=
Subject key identifier:   66:58:8F:02:A6:91:B9:A7:35:BE:00:4F:18:57:D6:B1:31:8A:AE:87
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       09C7433A7E898D9E1AC0AC16F6DC1D298E19FAF7
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:07 +0000
ROA not before:           Thu 04 Apr 2024 02:21:07 +0000
ROA not after:            Thu 03 Apr 2025 02:26:07 +0000
asID:                     28368
IP address blocks:        186.225.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c7:43:3a:7e:89:8d:9e:1a:c0:ac:16:f6:dc:1d:29:8e:19:fa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:07 2024 GMT
            Not After : Apr  3 02:26:07 2025 GMT
        Subject: CN=66588F02A691B9A735BE004F1857D6B1318AAE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:77:fd:ba:ea:b6:e0:e2:22:09:36:5b:a9:
                    b5:50:d6:72:f8:c4:a5:4e:b5:53:7a:05:44:6d:ed:
                    11:7f:f4:14:71:51:73:f9:45:57:03:59:d7:ea:1f:
                    2c:ec:5a:54:22:d0:0e:ba:e3:94:1b:30:bd:63:fc:
                    28:f5:b2:0f:cb:c5:c0:f1:da:e4:8b:09:b7:7f:af:
                    1d:97:c3:0d:73:4c:c8:06:05:d7:20:69:18:ca:86:
                    ef:27:9f:39:93:94:55:35:8c:8d:08:86:ba:7a:92:
                    0d:d0:a4:48:ff:4b:d7:12:ee:aa:4c:91:7d:5e:4f:
                    2e:dc:19:e4:15:5b:3f:c3:4b:12:fc:be:ff:9e:38:
                    a1:a9:99:a6:94:e8:45:ef:f2:90:57:e2:98:ba:d8:
                    f7:cf:e3:d5:c1:1d:a7:28:ab:27:2b:72:0f:2d:71:
                    7a:ba:94:56:0f:d8:6e:63:af:e3:9c:85:35:b3:cc:
                    70:d3:1c:39:b9:12:65:ed:a3:b4:56:49:fe:28:99:
                    4a:44:32:53:5f:b7:ff:9b:35:e8:3d:98:f5:93:54:
                    92:d3:ee:69:4f:bb:2e:13:3d:f3:fe:46:bb:f4:34:
                    6a:08:a9:2e:aa:b8:c6:2b:76:00:60:f1:a4:2d:5f:
                    b4:f1:d9:3f:96:a7:a9:17:91:21:fc:94:04:ae:35:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:8F:02:A6:91:B9:A7:35:BE:00:4F:18:57:D6:B1:31:8A:AE:87
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:77:d0:82:fa:90:0f:78:0f:78:5d:1a:12:fb:3e:a2:d4:ea:
         28:38:e1:67:2f:dd:9c:e6:88:5c:8e:66:3a:bc:d1:dc:4e:47:
         c6:74:45:64:23:5d:e7:ff:36:07:f4:b0:9a:09:07:c6:08:4c:
         77:14:7e:0c:f7:5d:59:82:59:65:0e:e5:b5:ce:f2:f4:39:dc:
         95:e6:22:36:58:02:b7:b7:65:40:7d:f9:8b:06:0f:fc:98:3e:
         40:63:54:9f:b0:9a:d1:47:92:64:2c:a9:46:5b:85:b2:0a:70:
         d6:1d:08:aa:58:28:22:65:c9:2f:f4:fe:a5:e9:5d:1d:72:69:
         8c:48:0d:45:05:b4:be:6e:d7:26:9c:ae:bc:c9:22:8d:fc:cf:
         c8:41:d6:c0:39:70:34:bc:b8:f3:0c:5a:d2:cc:4d:22:9f:38:
         b9:11:e2:32:41:bc:ef:fa:bc:8f:25:c1:bb:b6:f0:a8:95:ff:
         2c:bb:d1:d2:53:42:24:b7:a9:7c:42:78:e2:85:8a:15:41:e2:
         80:1a:2f:4e:6c:bc:ef:9a:36:af:10:9c:ff:3f:d9:4f:dc:48:
         b3:4e:d0:0a:8c:93:be:12:17:28:bd:b9:f1:eb:90:ad:c1:ae:
         f7:12:92:d7:39:3c:6e:d9:f3:8d:b4:0a:01:11:62:32:70:2a:
         82:55:da:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCcdDOn6JjZ4awKwW9twdKY4Z+vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMDdaFw0yNTA0MDMwMjI2MDdaMDMxMTAvBgNV
BAMTKDY2NTg4RjAyQTY5MUI5QTczNUJFMDA0RjE4NTdENkIxMzE4QUFFODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJnf9uuq24OIiCTZbqbVQ1nL4
xKVOtVN6BURt7RF/9BRxUXP5RVcDWdfqHyzsWlQi0A6645QbML1j/Cj1sg/LxcDx
2uSLCbd/rx2Xww1zTMgGBdcgaRjKhu8nnzmTlFU1jI0Ihrp6kg3QpEj/S9cS7qpM
kX1eTy7cGeQVWz/DSxL8vv+eOKGpmaaU6EXv8pBX4pi62PfP49XBHacoqycrcg8t
cXq6lFYP2G5jr+OchTWzzHDTHDm5EmXto7RWSf4omUpEMlNft/+bNeg9mPWTVJLT
7mlPuy4TPfP+Rrv0NGoIqS6quMYrdgBg8aQtX7Tx2T+Wp6kXkSH8lASuNdDDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZliPAqaRuac1vgBPGFfWsTGKrocwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuuErMA0GCSqGSIb3DQEBCwUAA4IBAQC1d9CC+pAP
eA94XRoS+z6i1OooOOFnL92c5ohcjmY6vNHcTkfGdEVkI13n/zYH9LCaCQfGCEx3
FH4M911ZglllDuW1zvL0OdyV5iI2WAK3t2VAffmLBg/8mD5AY1SfsJrRR5JkLKlG
W4WyCnDWHQiqWCgiZckv9P6l6V0dcmmMSA1FBbS+btcmnK68ySKN/M/IQdbAOXA0
vLjzDFrSzE0inzi5EeIyQbzv+ryPJcG7tvColf8su9HSU0Ikt6l8QnjihYoVQeKA
Gi9ObLzvmjavEJz/P9lP3EizTtAKjJO+Ehcovbnx65Ctwa73EpLXOTxu2fONtAoB
EWIycCqCVdrZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org