Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e34382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          BuVdDvHfUW3Y668tJLk4ZhaidgEYQla4vq6nkfuUJZk=
Subject key identifier:   3F:62:B1:02:80:6B:F3:F5:76:7B:EB:C7:EA:52:58:0D:0D:F9:B4:C9
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       4659BB5F3E01BB7E61B799D4016EED193ECE730E
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:11 +0000
ROA not before:           Thu 04 Apr 2024 02:21:11 +0000
ROA not after:            Thu 03 Apr 2025 02:26:11 +0000
asID:                     28368
IP address blocks:        186.225.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:bb:5f:3e:01:bb:7e:61:b7:99:d4:01:6e:ed:19:3e:ce:73:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:11 2024 GMT
            Not After : Apr  3 02:26:11 2025 GMT
        Subject: CN=3F62B102806BF3F5767BEBC7EA52580D0DF9B4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:4e:5d:98:b3:13:7b:92:a7:1f:61:83:03:
                    b1:e9:e7:9f:49:c7:c9:d3:11:d5:11:3d:3a:e2:cd:
                    7d:78:93:9e:47:aa:c7:e3:d6:6a:55:a9:9f:05:71:
                    13:24:1b:84:b1:ae:d3:e5:76:db:1d:02:cf:1e:5c:
                    33:a1:9b:e9:d5:8e:ca:de:f7:1c:f2:94:4f:a9:09:
                    13:f9:af:76:48:73:ac:0c:b0:c6:b7:61:72:d3:55:
                    e4:6e:13:e3:c6:be:1e:67:db:a1:a2:0c:1f:93:38:
                    98:f3:57:21:ad:17:9a:26:3a:44:62:9a:7d:f3:18:
                    58:f2:df:e5:b0:2c:9f:62:64:72:c2:bc:1c:e2:db:
                    36:62:df:62:f3:e0:6e:d6:d0:32:42:1f:5a:90:bb:
                    e0:f5:d2:f3:a4:1a:ae:25:40:90:fe:fe:a3:c3:f8:
                    62:8d:38:12:1c:a0:87:e4:48:cc:c3:46:7b:9e:3b:
                    55:e3:68:d9:b6:f9:9a:cc:ec:9d:a1:38:95:8a:82:
                    3f:46:86:df:a2:fb:99:96:7e:56:4c:47:5b:73:f7:
                    b7:1a:09:6d:ac:96:e3:a5:5f:9b:71:f6:94:1a:99:
                    15:84:c6:f3:d5:25:cf:de:47:cb:c1:6b:76:f5:f3:
                    30:63:56:d6:98:15:69:d7:58:e6:06:8c:30:0b:92:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:62:B1:02:80:6B:F3:F5:76:7B:EB:C7:EA:52:58:0D:0D:F9:B4:C9
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:b4:a0:c8:71:48:a1:27:55:6c:66:59:30:52:b1:0e:9c:
         c9:8c:86:5d:01:79:84:d5:9e:bc:7e:6c:23:49:24:d7:2c:44:
         79:0e:4a:c1:b6:df:d8:b3:75:63:33:e7:91:15:bd:a6:9f:8c:
         d5:2f:5e:b7:2d:9d:d2:5d:1a:56:00:c1:c8:d0:90:18:a8:7a:
         cd:a7:ce:82:2d:11:06:fd:d2:21:e0:81:62:c1:27:f2:15:4c:
         a4:8f:12:5e:69:8a:d2:c2:27:e9:fd:49:2c:64:60:a9:f6:27:
         2d:99:b1:89:f3:3b:78:a8:62:a4:69:bf:62:2c:48:ca:fc:d4:
         6b:6f:1f:cd:c9:a9:87:70:88:3e:5f:10:70:b6:e1:51:1f:3b:
         6a:11:ee:30:b6:0a:14:76:fa:88:92:ed:83:e9:b8:cc:7d:3c:
         45:85:18:97:2d:76:27:62:02:0c:48:b8:82:ef:aa:13:33:32:
         a4:27:18:bd:2f:ce:63:58:06:5c:8e:dc:64:f0:d4:b3:06:64:
         0b:e7:94:e3:ae:08:8f:63:ea:25:72:0b:0e:e2:bf:2c:e7:2e:
         b5:da:41:54:f1:25:76:b8:e1:8c:74:95:b0:d8:b1:50:09:1b:
         87:3e:fe:a7:f0:dc:f7:9a:90:eb:9a:b6:8e:10:eb:43:b3:71:
         ac:20:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org