Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34372e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          GHW5HCVTcshkPymQkzpNZLqSE2EIeNr3iBsoZ6erY9o=
Subject key identifier:   C1:4B:10:E3:F0:AF:0F:69:80:B8:29:51:FF:8F:81:9C:6C:0B:87:29
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7451303199037CBD44E557C99B3663A3CDD711A3
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:00 +0000
ROA not before:           Thu 06 Mar 2025 02:37:00 +0000
ROA not after:            Thu 05 Mar 2026 02:42:00 +0000
asID:                     28368
IP address blocks:        186.225.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:51:30:31:99:03:7c:bd:44:e5:57:c9:9b:36:63:a3:cd:d7:11:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:00 2025 GMT
            Not After : Mar  5 02:42:00 2026 GMT
        Subject: CN=C14B10E3F0AF0F6980B82951FF8F819C6C0B8729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:21:40:bd:b9:d8:2f:08:90:5c:5c:4a:ed:
                    6f:c5:c3:36:42:b7:8a:32:03:4e:ef:9b:40:9f:29:
                    53:33:6c:df:5b:24:1c:7e:e0:74:ae:63:4d:83:51:
                    18:3c:38:de:b8:d7:19:99:3f:fd:9d:30:7b:4c:4e:
                    95:ac:c7:27:13:63:92:14:21:b3:d0:f5:62:76:ee:
                    97:32:ac:97:56:4a:ca:5a:80:29:60:6d:18:e4:0f:
                    57:e0:07:31:77:ec:56:df:0c:d9:2b:01:93:79:1a:
                    9b:33:62:25:7d:1e:4f:da:dc:e9:65:c1:60:5e:9e:
                    8a:55:21:ba:09:4e:de:6e:ff:6a:8d:a3:4d:65:65:
                    3d:77:2c:9d:e6:1b:ed:4f:b6:41:fb:b7:08:c8:a4:
                    58:2e:3d:8b:65:cd:e3:71:a8:0c:41:b5:ef:ae:1a:
                    a3:54:0f:09:bf:cc:95:0b:67:38:ef:f6:0d:21:9b:
                    b2:6b:ca:7e:dd:79:8d:f4:2f:16:b8:8b:62:5f:11:
                    72:4d:c4:43:21:6d:31:71:08:57:95:a2:8f:c0:83:
                    26:ec:9a:75:1d:0c:2e:39:b9:0b:77:a1:a1:e8:a8:
                    f4:00:1d:36:bb:12:5c:9f:dd:e3:5e:fb:5e:2b:2d:
                    d1:21:23:5f:03:e0:07:3f:2f:2f:6f:61:72:77:5f:
                    4e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4B:10:E3:F0:AF:0F:69:80:B8:29:51:FF:8F:81:9C:6C:0B:87:29
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34372e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0c:8d:cc:d0:a8:77:b7:e8:f9:91:1d:9a:f9:03:3b:c2:2f:
         da:63:32:99:8d:45:c1:c3:13:2c:af:51:59:da:f2:c3:27:e2:
         78:68:ec:cf:e0:3e:3d:8b:fb:a7:be:fc:0f:1a:d7:4d:cb:99:
         93:c9:e6:02:04:63:8c:ac:c0:f9:f6:0c:15:e0:6d:6f:72:d4:
         76:bb:85:10:2f:da:5b:1e:28:f0:93:07:ff:d5:7f:c6:a5:e4:
         13:de:c9:b6:64:63:1a:a4:af:b8:05:08:17:85:c8:b7:90:7c:
         64:e7:1d:2f:e7:34:f0:5b:11:3b:65:8b:76:4e:af:52:4f:93:
         ba:01:1d:84:eb:fb:a0:cb:3c:2a:29:fd:70:21:af:7f:f7:47:
         01:54:e5:a2:ca:bd:7e:a8:ee:2b:e0:c6:b0:65:5f:30:d0:55:
         20:a2:fb:d9:96:68:cf:e4:ec:96:e5:35:4e:1b:39:ed:95:a1:
         34:5e:9e:f0:0e:bf:ab:7e:1e:ec:47:c0:1f:dc:38:89:cb:32:
         14:d9:bd:07:66:24:ee:fe:5a:c8:b3:15:85:31:02:ba:54:f9:
         a4:26:55:15:c0:f9:d4:2d:9c:ee:e6:69:de:18:06:81:af:a8:
         a2:12:3c:4b:bf:5f:34:52:e5:25:e0:22:98:dc:f3:3f:15:62:
         15:8f:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:46 2025 by rpki-client