Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34352e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34352e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          gDE2ImKRyOb10fn0kPUylqaX/K//4NWlrGn6o7Ga8c8=
Subject key identifier:   A3:44:18:F6:37:F6:B9:F1:F1:61:75:67:8C:54:81:C1:2B:61:B2:AC
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       33F0D84B2B582D5EB2C77D6F1878B86E51E4FF97
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34352e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:00 +0000
ROA not before:           Thu 06 Mar 2025 02:37:00 +0000
ROA not after:            Thu 05 Mar 2026 02:42:00 +0000
asID:                     28368
IP address blocks:        186.225.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f0:d8:4b:2b:58:2d:5e:b2:c7:7d:6f:18:78:b8:6e:51:e4:ff:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:00 2025 GMT
            Not After : Mar  5 02:42:00 2026 GMT
        Subject: CN=A34418F637F6B9F1F16175678C5481C12B61B2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c4:5c:8f:9b:e3:d8:b9:b8:f7:30:e9:c7:d5:
                    77:d2:12:7f:52:fd:8c:48:2c:3e:c5:1c:a4:7f:51:
                    b0:e1:9e:b9:ee:fc:48:10:9a:8b:27:f5:26:a7:d7:
                    de:e4:84:9c:66:6a:d7:3a:be:3d:7b:c7:60:21:51:
                    12:8a:02:9a:71:b5:0e:88:26:64:d4:1c:7c:83:0d:
                    80:14:1f:b9:f7:ef:ce:46:23:b4:2b:58:f9:b7:b9:
                    ca:ee:10:fe:46:ff:32:b7:d3:fc:a9:a0:5b:10:3a:
                    ba:36:2d:e3:ed:3e:64:4a:23:95:45:f2:19:11:3c:
                    89:75:22:6f:01:e7:ef:42:43:cf:24:4c:63:92:31:
                    b6:f5:49:77:e7:68:ea:66:1b:33:28:81:a4:38:99:
                    9d:f2:58:35:68:95:92:15:bb:37:26:88:a3:5e:91:
                    0d:f8:2e:ae:b3:24:80:f8:93:e7:52:51:89:be:94:
                    81:2c:e5:ad:cb:ce:a2:e2:3a:01:e6:39:21:9c:f8:
                    41:95:93:be:33:19:84:51:61:b2:9d:d2:4e:cd:15:
                    fb:37:bf:cb:fd:f6:45:d3:5e:d0:8f:0d:56:bb:1a:
                    b3:1d:7a:dd:ba:9d:af:c5:9b:a5:f3:44:82:b0:97:
                    05:b0:4e:54:7f:a8:12:8f:71:41:ed:cb:3b:55:58:
                    24:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:44:18:F6:37:F6:B9:F1:F1:61:75:67:8C:54:81:C1:2B:61:B2:AC
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34352e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:70:fe:f6:53:3c:7c:c8:79:28:e0:8d:dc:25:46:ae:4a:38:
         f4:f7:b8:a1:87:da:ce:ab:32:49:d3:c7:d4:81:46:0e:1c:cb:
         b0:b4:d2:6f:03:c3:1c:9c:a2:4a:4c:4b:be:90:b4:5c:03:22:
         ef:9a:b2:98:87:f3:96:ff:c5:a2:44:b7:4e:61:a7:a3:f1:16:
         b9:a7:95:12:0b:0e:50:cc:a8:c6:ea:18:53:9c:ee:c4:36:06:
         64:62:a8:42:99:f8:c4:21:7e:5e:80:0d:7a:e1:53:8b:de:bf:
         0b:ec:32:ea:d9:cc:bf:e6:65:5f:37:5e:42:48:67:99:53:90:
         76:fd:67:f1:0d:ea:47:ed:d3:85:8b:f9:e6:1a:67:85:1f:be:
         1e:6b:d9:b0:d5:4c:bf:b4:86:c4:00:03:50:6d:50:8a:40:ed:
         ec:e1:a0:a1:cd:38:98:23:e0:34:c4:a0:4b:67:87:2e:2d:4c:
         dd:6e:b0:ce:97:d1:da:5b:04:87:5d:17:c1:61:21:64:53:23:
         8d:74:e5:9a:52:46:6a:7d:26:3e:1c:66:20:94:3f:53:9a:19:
         61:9d:21:89:cf:18:d3:4b:95:a9:ad:ec:62:9e:61:06:e0:b7:
         c3:29:6e:2c:e1:b9:54:66:c2:d1:79:a4:98:1d:52:f9:56:64:
         8d:70:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:36 2025 by rpki-client