Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa
File:                     3138362e3232352e35362e302f32312d3231203d3e203238333638.roa (raw, json)
Hash identifier:          hnjINTL3ECHiASncbHM/jFTctQfj3XtrpOHV3oDwPOI=
Subject key identifier:   33:2B:68:3B:D9:36:F2:D0:D3:45:DD:09:22:89:CD:35:A2:BB:3B:AC
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       05BDEF48A4A2B49570E5BFE99F8B7DCBEC960D2F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:55 +0000
ROA not before:           Thu 06 Mar 2025 02:36:55 +0000
ROA not after:            Thu 05 Mar 2026 02:41:55 +0000
asID:                     28368
IP address blocks:        186.225.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 18:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:ef:48:a4:a2:b4:95:70:e5:bf:e9:9f:8b:7d:cb:ec:96:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:55 2025 GMT
            Not After : Mar  5 02:41:55 2026 GMT
        Subject: CN=332B683BD936F2D0D345DD092289CD35A2BB3BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:38:c6:66:58:28:b6:7a:8b:c8:4f:99:de:
                    73:8a:e8:9b:9e:e9:af:b2:ab:22:1f:b3:60:46:67:
                    a2:75:d4:8c:dc:23:8b:cd:59:87:b6:3b:08:a4:97:
                    d3:fd:c9:9d:43:b1:79:17:86:f4:22:11:a1:63:d5:
                    2c:cc:d1:c6:f9:82:01:f9:6c:61:7e:11:a2:86:e0:
                    ef:03:eb:3b:0b:95:6e:65:44:79:48:cc:fb:2a:9f:
                    9f:d6:e4:6a:bd:b9:61:98:17:0c:95:9b:f1:7c:bf:
                    db:22:f6:29:4f:85:f7:f8:86:ae:98:26:71:f3:df:
                    57:63:32:d3:fc:55:b0:c3:c3:e6:a5:aa:28:80:49:
                    64:b4:2a:a8:04:68:0d:3f:62:bb:9e:09:43:22:86:
                    2c:f2:83:b6:96:48:50:ea:3f:88:27:b1:bf:cc:21:
                    f0:73:c8:9f:23:bd:00:15:4e:54:8a:ae:80:c1:22:
                    68:83:61:0a:78:28:7c:12:ba:11:84:d7:a6:a5:3d:
                    ad:51:a5:5e:3e:0e:e5:bc:12:72:e4:7f:3e:1d:55:
                    0b:0c:3b:6f:84:a3:69:80:fb:d9:4d:d9:86:07:7e:
                    9b:38:bf:09:09:87:30:e8:75:a0:e3:4a:44:b3:51:
                    cb:5b:dc:dd:c2:c5:10:d5:5b:50:94:f2:4b:e6:cd:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:68:3B:D9:36:F2:D0:D3:45:DD:09:22:89:CD:35:A2:BB:3B:AC
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35362e302f32312d3231203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:d9:eb:25:d9:5d:bc:dd:cf:da:21:1e:6a:54:bc:fa:0e:
         32:7d:94:2f:5a:07:70:e6:16:c4:52:e8:38:83:eb:8c:ac:07:
         3c:34:9d:ad:f8:29:24:7e:a2:db:94:ec:34:c9:51:2b:b7:c4:
         c9:70:2f:e5:59:4b:81:05:10:70:a0:28:07:3d:3d:ae:ee:aa:
         50:da:f8:6b:18:10:2c:83:55:f9:06:bc:e5:39:df:4a:57:78:
         dd:21:ba:41:25:b0:e0:8d:0b:a5:a7:0a:ba:89:c1:4e:bf:38:
         c5:41:0f:48:7f:a4:77:79:59:a5:6c:82:fc:b4:b5:12:27:5c:
         7e:81:e2:a9:52:09:b0:ee:1c:fb:09:0d:e9:87:ee:9a:b7:15:
         79:5d:5b:a6:a5:3b:42:89:e0:7d:e1:ac:7e:49:55:30:30:27:
         e6:18:6f:c8:7f:aa:3e:41:d9:e8:82:23:82:86:b0:c5:5e:2d:
         19:83:89:be:72:7c:5d:d0:ab:1a:f5:b8:70:6d:a6:3d:a7:b9:
         5a:48:8b:81:61:d7:93:f0:03:69:14:06:45:64:97:1d:ee:de:
         db:f3:17:39:64:31:94:3f:e5:74:01:7f:8e:9d:c3:e1:15:46:
         ab:74:80:24:a1:21:e4:4d:98:89:37:df:59:e2:de:61:ee:ad:
         b3:12:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:05:33 2025 by rpki-client