Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e35362e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          PDsqxxzE3Cw9sreRsIvo6CM0e15MzUo7k3+AgO/MQZ8=
Subject key identifier:   58:90:B6:CC:24:EF:FF:31:26:F5:12:4A:BA:53:F5:D0:7F:B0:49:57
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       64E1A85AC36259CEA9C72764216618A03972E961
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:13 +0000
ROA not before:           Thu 04 Apr 2024 02:21:13 +0000
ROA not after:            Thu 03 Apr 2025 02:26:13 +0000
asID:                     28368
IP address blocks:        186.225.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e1:a8:5a:c3:62:59:ce:a9:c7:27:64:21:66:18:a0:39:72:e9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:13 2024 GMT
            Not After : Apr  3 02:26:13 2025 GMT
        Subject: CN=5890B6CC24EFFF3126F5124ABA53F5D07FB04957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:db:4b:8a:bd:34:74:1a:dd:6f:86:c0:97:
                    08:c6:06:cb:cb:36:e9:28:7d:b9:c1:5a:f0:c1:15:
                    4d:42:ce:49:73:a0:b3:f1:4e:b8:2e:97:2f:60:a7:
                    25:64:39:15:d1:de:93:7b:fd:30:2d:5a:d6:3b:94:
                    aa:f7:4d:dd:21:d3:1f:04:86:04:5c:4f:6e:d6:54:
                    89:46:49:e1:43:d4:78:f9:5a:e7:5a:b4:51:ec:cb:
                    ad:02:da:32:3f:58:9b:42:32:c3:02:1d:dd:c8:c9:
                    c1:6c:43:58:52:db:0d:e2:6f:ef:76:01:eb:0f:0f:
                    34:18:69:23:c1:cf:6b:18:c9:b8:9a:d4:4c:fc:e9:
                    d6:a4:08:f3:93:b0:d9:35:08:d6:40:02:d9:be:f2:
                    73:39:86:2e:d3:57:18:74:1b:b1:29:83:c1:b8:b5:
                    05:59:a3:ec:7c:f2:f7:98:14:d6:73:1d:90:fa:b2:
                    65:8d:ae:3c:ea:b5:87:9e:c7:10:41:23:f0:60:f9:
                    b6:2f:74:58:81:56:56:ec:00:c7:04:29:5c:92:4f:
                    86:0b:30:f1:b4:1c:7d:fc:77:e1:7e:16:85:c1:27:
                    95:00:3e:16:90:42:ac:65:29:ed:97:d7:a4:af:78:
                    9f:98:2f:bc:f5:3b:39:e6:5a:72:30:d7:56:7e:76:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:90:B6:CC:24:EF:FF:31:26:F5:12:4A:BA:53:F5:D0:7F:B0:49:57
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:58:40:9e:3b:a6:62:f5:3e:74:1f:c6:79:cb:84:28:7a:
         52:12:78:96:2a:13:e8:d8:e1:b9:10:6b:96:6f:a9:d5:13:49:
         33:18:6a:b8:17:84:2e:70:3b:1f:e5:de:39:22:00:f4:37:16:
         d3:c4:58:e6:86:37:b9:53:ee:1e:e1:96:6a:a7:71:f5:3b:7d:
         de:94:bc:a9:e4:eb:c8:f1:0c:61:ef:b5:04:1f:b2:dd:b2:75:
         15:c0:5a:c1:04:5f:15:8d:da:b9:13:6f:6b:b8:83:c4:46:20:
         c0:cc:c5:33:02:0a:a0:0b:57:41:fd:8e:c3:63:c4:bf:9b:d6:
         da:7e:bd:06:d0:d2:d0:78:e0:34:dc:17:5a:e3:28:59:74:eb:
         91:ab:1e:ea:24:1d:9a:da:29:aa:de:93:53:31:f7:e0:dd:97:
         a4:a2:85:39:10:65:bd:4f:5b:2d:dc:07:92:e9:f1:0f:9a:48:
         26:e6:59:ba:40:28:80:05:64:24:0f:24:eb:83:1d:5a:23:25:
         1f:cd:2d:2b:66:7f:83:bf:ab:ac:9a:23:35:78:31:23:b2:c1:
         4e:cf:b8:7b:7d:07:7e:3c:7b:55:cc:77:1e:86:2d:c1:ee:09:
         2f:bc:fd:a7:82:ba:d3:1e:20:3a:84:6a:c7:56:b7:95:d9:ca:
         97:e4:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org