Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34392e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34392e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          07kmeV8JgRaawQhGT5BDemRUYWqvQnZnoV6UkdRZZtQ=
Subject key identifier:   23:64:BC:B2:89:17:03:00:41:50:A2:F0:87:62:8D:F6:1D:22:EE:7B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       588F3699699AEE38376973ABA775D4598BF6F722
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34392e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:00 +0000
ROA not before:           Thu 06 Mar 2025 02:37:00 +0000
ROA not after:            Thu 05 Mar 2026 02:42:00 +0000
asID:                     28368
IP address blocks:        186.225.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8f:36:99:69:9a:ee:38:37:69:73:ab:a7:75:d4:59:8b:f6:f7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:00 2025 GMT
            Not After : Mar  5 02:42:00 2026 GMT
        Subject: CN=2364BCB2891703004150A2F087628DF61D22EE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:ba:21:6d:54:c8:b8:04:5d:c9:8e:2f:6a:
                    24:a4:24:fc:78:76:51:8f:1a:2b:b3:bf:49:1d:cd:
                    3d:45:02:99:b4:21:10:bb:c5:7f:9d:cd:2e:2d:57:
                    db:ad:49:76:44:af:06:83:d2:83:4d:ba:96:5b:3d:
                    95:7b:a9:5e:c7:77:ee:f8:7b:76:f9:75:cd:db:ca:
                    fd:a9:4f:15:94:e5:d4:ab:ab:29:6f:64:01:9c:1c:
                    3c:70:ea:cb:34:a9:63:a0:d2:7b:b0:49:f3:ab:87:
                    f4:bc:7e:89:e4:e0:f9:bb:7d:c0:9b:58:03:e6:b4:
                    d5:49:6e:f6:f0:c1:35:db:5f:bf:01:0f:63:e4:65:
                    87:1d:35:10:58:3a:24:41:3b:6f:15:11:b2:b1:68:
                    aa:4d:59:21:11:6c:33:4e:df:36:cb:4e:f4:02:de:
                    2d:e9:86:71:b3:82:26:cf:1f:44:ac:43:c7:a2:61:
                    e8:ba:84:12:59:74:ea:60:01:f0:48:54:13:79:e9:
                    cd:4a:69:ef:c3:27:7b:61:ef:f1:bc:f2:e4:fd:6d:
                    ab:12:cd:54:21:1b:25:1d:06:3f:00:5c:ac:8a:a5:
                    d1:49:2b:a7:e4:fb:48:42:3f:3e:67:b3:3d:b6:ae:
                    82:23:2a:8e:eb:fa:68:8f:73:47:75:b4:ec:e1:a5:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:BC:B2:89:17:03:00:41:50:A2:F0:87:62:8D:F6:1D:22:EE:7B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34392e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:8c:64:fa:78:4f:4c:5d:2e:11:6a:21:83:eb:a4:0d:ef:
         22:24:46:cb:c7:66:ac:12:60:91:2a:98:f2:3a:2c:22:28:9c:
         ce:f3:27:23:cd:0d:be:ce:a1:83:4e:77:3e:93:14:05:0a:65:
         fa:d9:12:90:d9:16:9f:d8:da:8a:c0:44:d7:69:62:95:b7:dd:
         cb:d2:ed:26:21:66:56:42:e7:98:ad:1a:61:bd:cf:5e:31:8e:
         6b:17:3c:5c:8d:81:e0:9f:52:47:d6:1a:fe:d2:90:80:37:47:
         86:c2:4a:82:a3:13:cd:0f:59:90:aa:c6:6b:94:c4:90:75:53:
         da:99:f7:cf:74:ab:a4:f4:78:0b:4d:24:91:f9:01:8b:a4:17:
         bd:54:15:be:00:7a:dd:55:85:56:6d:75:cf:23:96:f8:90:29:
         d1:80:90:59:c9:24:7e:e1:6a:4f:6f:66:41:94:1c:55:c6:49:
         f1:e2:32:22:73:6c:c9:aa:7d:ce:91:25:5f:fd:9c:d8:67:5f:
         4f:0a:9c:3d:a1:9f:e3:7e:c4:0c:23:ef:46:ff:96:e8:0a:e5:
         6c:51:a5:5a:c6:fc:5b:af:97:b6:44:1d:9b:6d:1f:4e:14:a5:
         75:87:6e:71:0d:5f:98:11:9f:70:b5:5c:5c:e7:d3:b4:38:de:
         80:ef:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:14:36 2025 by rpki-client