Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e36302e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          NOHDhAIBBCN/AQuFwsEadlo5L2tIeyxsCky6bPc+SPw=
Subject key identifier:   10:CE:89:A7:C6:79:7B:84:94:CB:F6:2D:28:B7:72:A4:26:2A:02:5B
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       1A5C96DF87550EFEB101772AE63D9C53798AC70C
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:55 +0000
ROA not before:           Thu 06 Mar 2025 02:36:55 +0000
ROA not after:            Thu 05 Mar 2026 02:41:55 +0000
asID:                     28368
IP address blocks:        186.225.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 09:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5c:96:df:87:55:0e:fe:b1:01:77:2a:e6:3d:9c:53:79:8a:c7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:55 2025 GMT
            Not After : Mar  5 02:41:55 2026 GMT
        Subject: CN=10CE89A7C6797B8494CBF62D28B772A4262A025B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:92:12:6e:56:a5:73:44:37:65:cf:f5:ea:
                    21:e0:98:10:5f:4e:1e:5b:1f:d6:9d:77:bf:97:97:
                    ad:69:3b:26:d7:e9:a5:48:af:de:b1:bd:9c:7c:75:
                    97:e4:c0:2f:50:d4:1e:77:49:22:06:f2:77:3b:e0:
                    2c:99:16:b5:e1:5b:11:35:0a:d5:30:41:19:ee:51:
                    e7:54:c7:f6:e8:06:5b:9e:c7:71:87:40:f6:29:9e:
                    46:ed:4f:bf:10:a9:11:38:e8:f0:1b:fd:d8:0e:bf:
                    fb:e3:c9:2f:c9:4f:1c:6f:b8:a4:11:ea:8e:b8:28:
                    ae:42:b3:eb:cc:fc:fe:a0:d4:0d:b5:44:d0:2c:fb:
                    21:44:5f:51:b8:d1:40:67:8b:60:c4:51:4c:85:bf:
                    58:00:cc:77:04:cf:ca:c4:56:b9:27:49:ce:64:80:
                    b8:af:88:87:03:0d:26:e8:13:b4:70:64:1d:95:e1:
                    08:ec:1c:15:a9:4d:6d:79:e3:a5:7e:4f:28:55:ab:
                    86:5b:af:60:e8:bb:ae:60:60:b0:6b:4d:aa:b6:c1:
                    59:c5:8c:d5:b7:39:a9:ac:61:da:d5:a8:a4:08:32:
                    eb:1f:d2:b9:b8:0a:35:16:b5:52:2e:d7:1e:48:2b:
                    e0:8b:b2:65:59:e3:4d:16:c9:51:e3:f5:d0:1c:c1:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CE:89:A7:C6:79:7B:84:94:CB:F6:2D:28:B7:72:A4:26:2A:02:5B
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:16:61:93:d8:94:7e:12:8c:6c:ac:6e:69:5c:c9:a8:af:
         27:6c:2e:3a:0d:bf:27:9e:39:e0:dd:bf:38:e1:1e:2c:d5:db:
         d4:7f:c6:f4:bb:ae:e8:88:17:d7:a0:5d:91:ba:0c:2e:74:b4:
         e5:a9:45:df:69:48:00:9b:a4:55:5e:5c:62:a0:d2:11:06:df:
         a2:9e:ad:4c:8e:bb:d3:ca:e0:a4:6c:8c:db:ea:e9:b5:82:f3:
         de:e2:dc:2d:6a:14:3f:8c:f9:0b:21:ab:c9:65:99:28:58:10:
         0a:59:91:0d:6c:d1:f0:a2:c6:e8:7a:05:1f:99:de:64:18:1d:
         10:6d:bd:5d:d2:c8:ff:9c:2d:19:34:ce:b9:f5:5b:48:43:b9:
         ea:e5:98:4a:bd:70:c8:0a:b0:2a:f4:69:48:2e:0f:d5:6f:67:
         e3:9d:83:b0:c8:62:e2:98:3e:5b:22:cf:3f:6f:47:4e:bc:d8:
         e9:cc:f7:01:c0:4a:08:e7:4a:6a:66:94:a9:9e:ad:2a:ea:c6:
         fa:e0:db:42:3b:63:e9:c9:cc:6c:be:14:70:7b:33:91:b6:d0:
         e5:e8:e9:19:de:e7:d4:d2:84:13:bc:8f:dc:76:8f:8e:3b:2f:
         98:5c:fd:3a:79:92:7a:c8:bf:d0:63:fe:0f:be:b7:79:17:9c:
         a6:dc:93:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:00:42 2025 by rpki-client