Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e34382e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          3VzBaMhn2BVVGEfGN6atOG7XOWP7qJn4oxm6OhgGJWE=
Subject key identifier:   EC:98:46:3A:13:2B:7D:0A:0C:1F:4C:9E:90:7D:A6:7B:85:83:D2:0F
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       60E700073C15BB9C605A1E88D3AF00D872B21382
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:05 +0000
ROA not before:           Thu 04 Apr 2024 02:21:05 +0000
ROA not after:            Thu 03 Apr 2025 02:26:05 +0000
asID:                     28368
IP address blocks:        186.225.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:00:07:3c:15:bb:9c:60:5a:1e:88:d3:af:00:d8:72:b2:13:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:05 2024 GMT
            Not After : Apr  3 02:26:05 2025 GMT
        Subject: CN=EC98463A132B7D0A0C1F4C9E907DA67B8583D20F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:30:5e:65:61:49:e6:08:64:3f:2e:e8:13:
                    82:48:92:f4:3b:0b:cd:31:23:29:fb:dc:fd:34:aa:
                    9a:3e:aa:6a:73:27:c6:3e:a2:5c:9f:8e:83:03:1c:
                    65:c3:54:43:8c:5f:ef:90:5b:31:41:4c:a4:0b:b7:
                    62:97:3b:e3:cf:43:dc:60:3d:a9:0c:f0:b7:ce:b8:
                    af:a0:89:63:1e:ee:53:9e:66:7d:e1:c2:9a:7b:df:
                    e7:43:5a:43:c9:d1:09:ed:2e:80:d1:82:7f:84:da:
                    40:dd:32:e5:ef:0a:a3:8b:2a:a8:12:1d:7f:6b:70:
                    0e:d5:2d:8a:5d:b8:12:78:24:ba:92:4c:37:4c:32:
                    8b:0f:b3:e8:95:95:a4:b4:77:c7:13:6d:3c:b3:84:
                    9b:a6:b8:ea:9a:0d:03:10:ea:89:e0:0f:99:eb:52:
                    85:06:d0:d8:f1:6b:a6:d0:c1:81:aa:59:80:fc:42:
                    42:22:97:20:48:bc:72:bd:6b:1f:86:69:73:a3:0b:
                    e3:c3:45:d5:6a:95:6d:42:04:3f:81:27:25:c8:1a:
                    f7:a6:66:e9:21:2d:52:d5:64:ff:8c:20:3e:f4:b7:
                    23:4e:3d:55:0f:a5:b4:d7:f4:95:aa:17:98:80:23:
                    75:ed:97:ab:4e:d6:e8:a3:b2:20:65:c2:9b:08:cd:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:98:46:3A:13:2B:7D:0A:0C:1F:4C:9E:90:7D:A6:7B:85:83:D2:0F
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:5d:37:16:02:67:ff:fd:d8:29:c1:ee:58:9b:27:0c:b2:
         89:de:3e:37:c5:6b:51:a8:7f:55:c1:20:38:8e:94:ef:39:e0:
         5c:de:93:72:8c:63:70:06:86:34:e3:60:61:ea:e0:38:3a:0d:
         46:36:71:c1:6b:e6:a5:15:91:f3:12:67:5e:aa:f4:81:6c:15:
         16:78:df:53:d0:f1:51:33:5b:e9:d6:16:95:4d:3c:b4:bf:9f:
         a0:f0:54:75:04:00:51:1c:51:20:3b:31:d4:d4:b0:31:1a:c4:
         29:54:72:aa:b0:be:99:88:ae:1c:cc:16:5e:13:91:28:8d:7c:
         18:73:a5:f6:e1:cc:63:8c:b8:67:9d:b1:56:1d:2e:16:b1:bc:
         e0:2c:6d:11:fa:ad:ea:cf:ec:bd:44:2d:e6:70:26:1f:b1:a6:
         4c:16:c5:92:33:d9:5d:74:44:b7:e4:92:40:8f:f5:be:fb:ae:
         49:24:70:2d:26:96:e4:2c:b4:a6:6d:92:ad:9e:a3:80:0c:bd:
         41:74:1c:6b:c3:77:d7:a5:70:d2:46:11:79:02:1f:5e:e7:b4:
         51:a6:f7:13:b9:37:70:bc:dc:0f:c4:40:f3:c0:6d:02:11:e1:
         2d:1e:06:36:9a:6c:ae:45:ab:66:bd:71:10:71:b5:14:9f:a6:
         5c:1c:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:16 2024 by rpki-client on console-ams.rpki-client.org