Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e35322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          Rv6cIZIfHdsZt7Sh6oiiOnLkzMfIW/pVQHbUoolEryY=
Subject key identifier:   4C:8E:77:F1:62:0A:07:F9:6A:76:4A:DF:C6:68:B6:D5:ED:44:D9:44
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       266F788CF6C433AA9B793F3050D5C2C44D10D755
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:06 +0000
ROA not before:           Thu 04 Apr 2024 02:21:06 +0000
ROA not after:            Thu 03 Apr 2025 02:26:06 +0000
asID:                     28368
IP address blocks:        186.225.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6f:78:8c:f6:c4:33:aa:9b:79:3f:30:50:d5:c2:c4:4d:10:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:06 2024 GMT
            Not After : Apr  3 02:26:06 2025 GMT
        Subject: CN=4C8E77F1620A07F96A764ADFC668B6D5ED44D944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:4f:4b:ef:09:ac:22:74:b7:7b:bc:90:04:
                    cf:49:b7:81:82:30:52:71:e3:d9:67:18:32:85:8d:
                    65:8f:c9:5f:7a:eb:7d:6d:df:d0:29:5e:7b:be:e3:
                    e3:04:70:7c:8a:7e:0c:22:46:86:c0:a4:81:98:64:
                    2e:6d:4d:0b:8e:00:d7:7d:75:43:b2:5e:c5:f5:e5:
                    cb:a3:a9:2e:b1:f2:ef:b2:85:ad:00:f9:6b:fe:fe:
                    cb:9d:e4:d9:5d:15:28:a2:af:09:ee:4c:15:97:6c:
                    b3:62:cc:79:96:65:3a:13:f0:55:03:14:4e:c2:9d:
                    23:7e:b8:18:ff:6a:07:fd:b3:d6:1f:f4:e1:4d:ac:
                    1f:eb:9b:b4:ba:ed:d2:21:fa:fd:73:2e:49:db:dd:
                    6a:e1:9e:a1:0d:09:ad:2d:f8:06:b4:a9:b5:d1:78:
                    6f:04:5e:5e:da:ff:8b:4c:94:be:df:8c:38:2f:82:
                    7a:82:d2:e7:6c:00:43:e5:76:90:fb:64:30:2e:6d:
                    0c:78:0f:30:a6:09:31:71:87:05:c8:4b:c7:49:e7:
                    4d:a8:e0:2e:4d:66:f9:c7:2c:ae:11:1f:9f:8d:30:
                    cb:38:e3:4d:9b:d6:0d:5c:37:1f:ff:58:95:ba:20:
                    73:05:6e:8b:3b:1d:a2:5f:3f:02:19:8f:4f:10:14:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:77:F1:62:0A:07:F9:6A:76:4A:DF:C6:68:B6:D5:ED:44:D9:44
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:5a:f8:5d:71:fb:2b:01:5a:80:75:fd:f1:b7:8a:88:ce:
         65:07:84:90:2f:96:be:a6:08:28:08:fa:31:68:51:c8:2b:e6:
         dd:a3:13:e0:0c:e9:ea:02:df:1e:8a:d6:a1:ac:79:59:5c:7b:
         6f:53:39:39:4d:01:56:63:09:be:72:1c:65:d5:37:e1:52:f0:
         03:f9:54:00:09:f4:c1:46:0a:07:95:a1:db:c4:f6:6b:32:22:
         e1:50:96:4e:cc:f8:8b:29:cf:3b:e4:f5:59:07:ef:f8:e4:e2:
         03:27:55:6c:79:ac:d8:47:88:2f:03:99:a8:b9:43:d2:b5:be:
         ce:fb:85:63:5c:7d:c4:d5:63:69:ff:26:e6:ca:d0:11:3f:c9:
         a4:18:19:8f:c3:91:b2:3d:14:58:4e:70:f4:99:7f:f9:0d:20:
         29:28:8a:74:55:94:eb:f0:a6:eb:89:75:44:c2:a2:a0:11:6c:
         52:43:87:c9:c6:53:71:5c:a3:a8:48:da:f4:2e:51:d5:90:8a:
         c7:00:1b:2c:77:61:b8:f6:47:9e:31:04:90:31:48:76:7f:81:
         35:17:43:7a:8c:03:26:c6:b5:cc:4e:e8:58:f7:bc:d3:e0:3b:
         87:ea:d4:fa:2f:aa:da:b6:22:d9:a5:b3:14:41:2a:7b:5a:ae:
         27:5f:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org