Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e34382e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          AhFIlFoI/HnwCMq8ExaA1JmEK3/55sVmB+mBsTmnsrY=
Subject key identifier:   32:B9:E9:D1:C4:E4:6E:D6:7E:FB:30:D3:DC:B4:50:44:53:72:FB:D7
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       37CC5852C07BC05A6D5D952098EBD132FAA69ECD
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cc:58:52:c0:7b:c0:5a:6d:5d:95:20:98:eb:d1:32:fa:a6:9e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=32B9E9D1C4E46ED67EFB30D3DCB450445372FBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:ae:de:33:23:d6:dc:5b:79:f7:aa:ac:be:
                    69:f3:bd:dd:88:3e:31:35:d8:4a:2e:5c:13:93:03:
                    dd:73:d9:1c:6c:c6:69:a6:38:16:d6:57:8d:63:35:
                    81:ec:99:c5:ee:83:eb:84:72:0c:49:86:41:be:12:
                    d8:86:89:0d:06:51:aa:7b:7b:fa:c7:a0:67:5a:bd:
                    b3:f4:49:19:3d:83:7a:09:a9:56:8e:b5:b9:16:24:
                    aa:f7:d7:ba:e1:e1:07:f0:9c:3c:69:0e:33:9e:95:
                    06:1c:17:e4:42:ac:d3:ce:66:d3:8e:05:47:6b:ad:
                    f0:e1:df:f3:1b:ad:54:9e:07:8c:2d:58:46:84:94:
                    02:f1:13:6b:06:79:c8:ca:c7:8d:6c:4a:f7:1b:49:
                    95:aa:f4:5a:11:15:fc:87:a4:19:b8:c7:1f:a0:09:
                    d9:f5:65:ee:97:87:63:bc:b2:3f:ef:6f:ab:cd:95:
                    ff:9f:37:ba:51:9c:ef:a5:fa:f0:ff:7a:34:1c:2d:
                    ba:16:3a:f8:f5:e0:bb:e3:00:f4:94:65:30:32:76:
                    0f:3c:7c:58:9c:09:93:93:19:d1:da:6f:59:b0:c7:
                    a6:6d:ec:7d:ab:d3:d8:f5:73:39:1c:72:77:15:db:
                    e1:e4:b8:c0:2e:13:40:c7:df:29:37:28:47:4a:e8:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:E9:D1:C4:E4:6E:D6:7E:FB:30:D3:DC:B4:50:44:53:72:FB:D7
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:93:73:4b:7a:aa:83:8a:22:be:2a:df:d3:cd:a1:4c:bf:
         29:fd:a9:c7:5e:e8:5e:3f:5c:96:39:ec:16:9c:d1:a1:1d:2d:
         5f:bd:09:ef:da:17:43:0a:9e:3a:21:9a:88:24:87:0c:77:2e:
         5e:92:1f:36:5c:83:c7:cb:e2:09:af:0a:20:c0:5f:77:1a:9e:
         9d:e4:23:ff:c3:0c:d4:dc:15:26:07:81:2e:39:3b:9b:4e:6a:
         0d:11:07:76:80:19:03:41:a3:c2:3c:30:cc:84:fb:a8:98:06:
         3d:43:21:dc:05:4b:d2:2a:cc:e3:79:58:69:cb:26:0a:cf:9a:
         83:37:67:b3:6f:51:f5:84:62:68:89:8c:c7:22:78:c4:bd:a9:
         aa:ac:b6:ab:4c:19:1b:e7:2a:0f:08:2d:1a:45:96:8c:65:b5:
         ff:f3:f2:30:9a:ed:d5:e9:c7:bd:c9:83:52:9f:b0:52:c9:22:
         f8:22:9f:88:bc:7d:1f:8f:8e:1b:54:4c:f2:e5:a5:88:cd:cf:
         66:3c:02:e3:b3:92:2f:39:57:8b:5e:0f:13:33:14:81:b7:7c:
         b4:a9:ff:83:07:e4:6a:76:59:33:ee:1a:b1:5a:36:83:2d:91:
         40:95:4b:be:a6:9a:c0:59:3e:42:f2:4e:9e:22:9d:a6:aa:f7:
         a7:9d:f9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:03:00 2025 by rpki-client