Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e35322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          PI+JjRofoluAxn1OP6fouZimwa6/VzS2FKcyzEPsRC4=
Subject key identifier:   D7:66:1C:D9:8B:41:2E:A1:98:78:25:DF:82:6F:97:55:1B:37:20:19
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       09F8CA1EA1EEF3687B904CF980EBFD32DFD622F4
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:06 +0000
ROA not before:           Thu 04 Apr 2024 02:21:06 +0000
ROA not after:            Thu 03 Apr 2025 02:26:06 +0000
asID:                     28368
IP address blocks:        186.225.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f8:ca:1e:a1:ee:f3:68:7b:90:4c:f9:80:eb:fd:32:df:d6:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:06 2024 GMT
            Not After : Apr  3 02:26:06 2025 GMT
        Subject: CN=D7661CD98B412EA1987825DF826F97551B372019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:ae:d0:6d:ce:95:86:b4:82:13:07:52:2a:
                    7b:65:13:01:82:b9:23:3c:ae:26:e6:8a:93:02:2c:
                    f0:33:72:8a:2f:a2:c2:d2:28:3c:7b:ee:9f:cc:dc:
                    1f:8c:d3:ed:e8:e6:ac:96:7a:17:ff:b1:93:d2:f6:
                    12:b2:fa:6b:85:88:0d:4a:8e:5b:06:9d:60:2e:cf:
                    40:b9:38:50:75:b6:03:6f:44:8a:c9:0f:f9:7b:10:
                    44:be:54:20:cf:80:58:dc:85:1a:c7:b6:c3:03:c0:
                    2e:dd:a5:9e:91:4f:ec:34:bb:18:34:f1:fd:34:95:
                    65:1b:72:a6:33:7a:de:cd:c3:c8:66:d5:79:81:8d:
                    65:d5:d1:45:20:bb:87:50:19:90:bd:91:0e:8f:3f:
                    8c:de:fd:c5:ec:72:2e:1e:7c:ec:15:57:99:51:e2:
                    d4:11:2c:26:34:0d:cc:37:5e:6b:90:c2:f9:2b:25:
                    18:52:2d:1f:d8:82:2b:db:c7:97:c8:1e:6f:4f:d3:
                    d3:f1:22:a3:a1:6e:bc:54:25:71:f4:f0:41:3f:98:
                    09:d2:ca:fe:d2:88:5b:09:d2:4c:43:79:ee:41:1b:
                    2e:e5:7b:79:b0:69:56:71:07:56:2f:53:f2:53:46:
                    58:eb:40:43:ce:3d:4a:d6:75:7e:ef:bb:4b:cc:af:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:1C:D9:8B:41:2E:A1:98:78:25:DF:82:6F:97:55:1B:37:20:19
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:08:13:dc:8c:15:57:57:a6:1a:6a:2f:97:29:65:4e:9d:fe:
         a5:78:60:58:50:ba:af:1b:be:87:0e:3b:d6:07:71:7c:f9:0c:
         2e:19:88:a8:c9:28:5d:53:fa:95:d9:85:ee:f8:22:d4:78:d5:
         21:28:65:4d:ae:ab:ef:56:01:b1:00:da:ac:01:fb:30:4c:3f:
         c3:65:4b:a8:ba:fc:1f:1c:5f:28:a8:11:48:0d:49:55:66:ed:
         f5:34:e9:01:70:5b:62:ed:77:d4:84:f8:bc:d1:01:b6:5b:74:
         fd:50:dd:87:d7:67:81:e3:32:de:87:38:cd:e5:fe:5a:33:f0:
         a1:83:24:84:83:0d:94:e2:f0:67:b5:37:b2:c3:dc:29:7e:c5:
         d7:19:05:a0:03:44:3d:b6:e1:6a:d2:fd:de:37:e8:38:ea:3f:
         56:93:bf:cb:67:e9:e0:69:4d:81:52:1f:8d:e0:31:58:24:c8:
         e5:3e:c0:71:ca:4a:42:d8:83:57:ca:82:2d:eb:03:75:74:a9:
         a9:ab:09:69:2b:8e:a9:e4:cf:3e:e0:f5:d1:85:82:d0:83:ea:
         58:9f:be:73:61:c2:36:c7:7c:41:2e:a1:42:cd:06:3c:14:1c:
         8a:11:24:4e:b4:a2:61:fb:a4:4a:92:2d:37:a7:1a:66:75:5c:
         d4:04:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org