Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34372e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          JEneZ/MgluQH/GkUBjCiGIg4ZUY0u4xShP8fFXQ4J0w=
Subject key identifier:   C0:59:77:2D:AA:4E:2F:D7:06:6B:B5:59:F8:98:FD:AF:76:3A:B8:26
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5F7DCC4771E51F9895C3BF068EC795C514C0FAA0
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        186.225.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7d:cc:47:71:e5:1f:98:95:c3:bf:06:8e:c7:95:c5:14:c0:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=C059772DAA4E2FD7066BB559F898FDAF763AB826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:34:0f:27:2a:98:99:33:e0:fe:0e:b5:95:
                    11:81:93:95:aa:62:38:3d:e3:26:b0:b7:21:26:9a:
                    61:f7:2a:dc:d9:57:6c:cd:24:c8:d2:02:b1:d9:0d:
                    87:f5:8a:65:fe:06:c4:79:a6:a1:11:14:d2:29:97:
                    78:1c:c9:b4:61:b2:e9:d9:13:7a:1f:6e:e5:01:a9:
                    b4:54:ea:37:01:66:48:c2:97:af:21:db:5a:30:e6:
                    c6:e7:44:28:a2:3a:18:18:81:9f:af:ce:51:bc:5b:
                    a4:a3:b6:56:13:a8:78:cd:14:be:75:48:a3:f0:cb:
                    2c:d5:97:de:64:87:33:85:93:4e:8e:6c:d1:1b:b4:
                    0e:c8:9f:cb:5a:7c:05:14:ab:a5:7d:44:47:22:01:
                    cd:ce:00:96:dc:88:52:b3:cd:d6:48:70:8a:42:f5:
                    9d:46:d1:d3:b9:d5:08:c0:4c:58:56:fd:ac:f3:1a:
                    e3:0a:12:4a:60:9f:8b:de:f7:27:f8:3c:63:d3:e8:
                    56:34:80:db:23:71:2e:2c:e7:93:d4:26:3b:08:82:
                    c7:19:b7:20:cb:7c:c6:c7:f8:ae:ac:e4:e5:69:60:
                    3c:c4:4d:a0:49:38:71:6e:33:fd:5c:8d:43:45:fd:
                    27:05:24:e5:23:35:ff:02:c3:cd:07:92:ba:59:9b:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:59:77:2D:AA:4E:2F:D7:06:6B:B5:59:F8:98:FD:AF:76:3A:B8:26
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:d4:72:de:23:57:44:64:c2:a1:b5:d1:ea:13:0e:8c:45:
         f8:ec:d5:4c:62:a8:42:f3:9a:c5:65:b3:ff:5d:59:54:68:38:
         10:7d:74:d4:8e:c6:29:ec:c7:54:17:9a:47:de:0b:33:67:6c:
         1f:c0:59:bd:4b:b4:86:22:30:1c:58:cc:72:06:94:21:62:82:
         23:16:63:c5:3d:6b:30:7c:17:0e:f0:fe:cd:ed:f8:7d:61:75:
         0e:79:e2:43:32:81:29:28:95:ab:7e:e0:10:d7:56:ab:15:18:
         3a:d2:37:7e:2b:69:5b:31:1a:b1:26:92:0a:2d:0b:e1:19:9d:
         55:d2:af:75:22:cb:48:9b:b0:2b:32:6b:66:f9:3c:a4:8b:9b:
         e2:ec:b2:d9:65:74:2a:d9:88:e7:9c:f2:db:4e:c0:09:0a:5c:
         4c:24:97:8a:57:21:1d:d2:3e:dd:8c:e4:2d:f7:29:d4:71:de:
         84:e4:75:86:f9:d9:b6:d5:b5:fc:98:b3:ec:57:17:2b:4d:4e:
         97:f0:76:b9:c7:fd:73:f7:82:bb:31:38:48:5c:4d:8f:57:b1:
         50:0b:e8:4c:28:54:7d:77:cf:b2:8c:4b:39:32:ce:58:81:c0:
         9f:55:b1:54:93:a5:a4:8d:32:8e:44:2e:27:49:ed:dd:33:81:
         5f:b1:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:15 2024 by rpki-client on console-ams.rpki-client.org