Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e34382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          Zgb30SVMhtk1wNzp4brcpisEZMy0psbiz137A5lSshM=
Subject key identifier:   56:FA:B1:D5:D6:46:C5:31:E6:25:A3:0F:24:10:25:8E:DD:EE:A0:DA
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       4C64650E617D77E5B6CB8D46054CC62CEA289728
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:64:65:0e:61:7d:77:e5:b6:cb:8d:46:05:4c:c6:2c:ea:28:97:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=56FAB1D5D646C531E625A30F2410258EDDEEA0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:9c:6b:9f:cf:1a:da:e4:99:70:c9:19:d5:
                    61:7d:d9:a1:44:27:31:a8:2e:a9:9f:d4:78:8e:af:
                    9a:b4:5e:1a:c2:a4:23:cc:2c:06:b4:76:73:3b:3e:
                    e7:24:b9:86:6a:cb:b1:94:e4:7b:6e:a4:86:4e:d5:
                    60:0d:97:a4:42:c1:7d:1c:ca:da:4f:98:64:61:06:
                    d1:12:61:2c:53:8f:03:92:fa:a7:bc:ee:2a:a9:b4:
                    f6:68:08:f7:1e:c1:b3:8f:11:54:80:67:06:79:c2:
                    5c:0f:ef:b8:71:c5:d9:96:cc:45:aa:24:bd:06:a5:
                    bf:ca:71:e6:4f:60:7b:15:82:7b:57:e8:1f:a2:a4:
                    94:37:48:79:3e:3e:4c:b9:52:9d:cd:69:db:df:c7:
                    27:9d:ea:95:65:86:0c:c5:f9:38:b3:81:bd:d4:d9:
                    b5:1c:b4:0c:5f:57:9b:67:85:6e:62:a0:89:9e:5d:
                    cc:54:9b:96:05:6a:16:1f:6a:e8:16:ab:60:55:44:
                    05:09:c1:21:ce:0c:64:20:71:c5:49:65:14:a2:a5:
                    ec:18:9c:8c:6a:83:27:df:1b:11:48:d1:12:dc:66:
                    6c:c7:8b:ec:f7:9f:ea:d7:13:f2:43:af:10:0a:53:
                    22:0a:fc:c1:59:0c:93:cb:af:83:82:c4:ef:77:16:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:B1:D5:D6:46:C5:31:E6:25:A3:0F:24:10:25:8E:DD:EE:A0:DA
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:df:bd:75:21:87:67:c2:9c:68:b0:ea:67:65:ea:3e:b4:
         09:2d:63:fe:25:3f:8f:d8:44:29:8f:0f:3c:f3:c3:43:c1:23:
         a8:32:a4:d5:dd:e9:bd:7f:6f:7c:04:32:0b:cb:f5:0d:12:09:
         b9:30:3e:61:33:dd:13:64:c9:55:90:72:91:16:c9:ef:a9:4f:
         a2:e3:ff:17:92:38:8f:28:a1:24:ba:41:7d:4a:6f:81:ad:2c:
         e7:cf:a1:b7:00:5d:f9:7c:ce:1b:46:19:df:21:22:43:8d:01:
         0f:2c:63:92:dc:51:49:7b:22:42:be:3d:7a:bf:67:fd:69:05:
         84:6e:c9:35:b4:57:2d:ea:48:38:f5:ff:79:9f:fc:09:a2:a3:
         db:49:e6:44:42:d7:1c:ca:c6:eb:75:47:3d:70:8f:ae:6e:1b:
         1a:4f:af:e5:d0:aa:60:59:b5:6f:d4:90:cc:65:28:33:6d:36:
         f3:3c:e9:e8:58:35:9a:1e:77:bd:eb:89:38:05:50:4e:50:bc:
         11:cf:de:42:7d:16:4e:a2:49:92:e8:6a:a5:f9:a2:4a:b8:44:
         3f:64:c4:07:e8:c7:7a:be:86:7c:fd:06:95:7e:32:63:ab:ab:
         18:1f:48:9f:28:2d:9e:e4:10:6f:cb:62:eb:d9:23:ed:f5:d5:
         62:7b:64:d5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTGRlDmF9d+W2y41GBUzGLOoolygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM2NTlaFw0yNjAzMDUwMjQxNTlaMDMxMTAvBgNV
BAMTKDU2RkFCMUQ1RDY0NkM1MzFFNjI1QTMwRjI0MTAyNThFRERFRUEwREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM95xrn88a2uSZcMkZ1WF92aFE
JzGoLqmf1HiOr5q0XhrCpCPMLAa0dnM7PuckuYZqy7GU5HtupIZO1WANl6RCwX0c
ytpPmGRhBtESYSxTjwOS+qe87iqptPZoCPcewbOPEVSAZwZ5wlwP77hxxdmWzEWq
JL0Gpb/KceZPYHsVgntX6B+ipJQ3SHk+Pky5Up3Nadvfxyed6pVlhgzF+Tizgb3U
2bUctAxfV5tnhW5ioImeXcxUm5YFahYfaugWq2BVRAUJwSHODGQgccVJZRSipewY
nIxqgyffGxFI0RLcZmzHi+z3n+rXE/JDrxAKUyIK/MFZDJPLr4OCxO93Fk4JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVvqx1dZGxTHmJaMPJBAljt3uoNowHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuuEwMA0GCSqGSIb3DQEBCwUAA4IBAQBNrt+9dSGH
Z8KcaLDqZ2XqPrQJLWP+JT+P2EQpjw8888NDwSOoMqTV3em9f298BDILy/UNEgm5
MD5hM90TZMlVkHKRFsnvqU+i4/8XkjiPKKEkukF9Sm+BrSznz6G3AF35fM4bRhnf
ISJDjQEPLGOS3FFJeyJCvj16v2f9aQWEbsk1tFct6kg49f95n/wJoqPbSeZEQtcc
ysbrdUc9cI+ubhsaT6/l0KpgWbVv1JDMZSgzbTbzPOnoWDWaHne964k4BVBOULwR
z95CfRZOokmS6Gql+aJKuEQ/ZMQH6Md6voZ8/QaVfjJjq6sYH0ifKC2e5BBvy2Lr
2SPt9dVie2TV
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:02:18 2025 by rpki-client