Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e36302e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          3mRRWELPKXdL2UjZpIEnsCN9hRo/+XL7aEmJM2JO57M=
Subject key identifier:   ED:15:F8:48:8D:E4:05:01:10:42:4B:D2:7B:83:6F:86:32:CF:66:1D
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       51E0BEB8268BE84948164DE6C57F313E465C4F82
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:12 +0000
ROA not before:           Thu 04 Apr 2024 02:21:12 +0000
ROA not after:            Thu 03 Apr 2025 02:26:12 +0000
asID:                     28368
IP address blocks:        186.225.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e0:be:b8:26:8b:e8:49:48:16:4d:e6:c5:7f:31:3e:46:5c:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:12 2024 GMT
            Not After : Apr  3 02:26:12 2025 GMT
        Subject: CN=ED15F8488DE4050110424BD27B836F8632CF661D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:97:57:3a:9e:6d:2e:9c:01:8c:f7:c1:bb:
                    8a:f2:53:0a:e1:39:5e:0b:e6:31:6b:54:21:c3:15:
                    1e:ed:9a:37:a8:33:a0:f8:fb:53:b3:d3:09:cb:d5:
                    81:5c:86:e3:86:50:11:b6:fd:4b:39:8a:d6:6f:fc:
                    ce:3b:9c:80:86:a6:e1:96:ca:7a:08:e4:af:11:16:
                    59:45:09:d2:f8:b3:4f:48:7b:53:a9:6d:12:5c:cb:
                    b9:4b:b7:61:b8:35:8f:d4:7c:e6:d8:ee:a7:23:b4:
                    47:73:83:be:85:b6:2c:cb:c3:33:d3:2a:bd:ed:f9:
                    38:27:43:8a:6a:b3:2d:44:76:a5:48:d9:e5:75:03:
                    54:89:7b:c1:18:2b:e1:5a:55:b3:0b:ec:9a:ab:22:
                    65:e5:72:2b:55:15:7d:d4:f6:77:b4:29:88:d6:65:
                    4d:7e:47:d4:61:a8:50:99:69:43:9a:25:a6:eb:14:
                    56:60:1c:b8:a2:2c:b9:e3:54:cc:ec:bb:a2:5c:46:
                    8e:35:84:8d:e7:66:98:15:d3:ac:e0:03:7b:87:91:
                    1a:b3:b4:3c:f4:77:25:d8:a6:86:0b:b5:3f:6f:9c:
                    ee:ca:0b:ca:f6:29:fc:c0:01:a1:b2:2f:17:04:f9:
                    b9:e3:91:33:5b:5c:18:85:14:02:ce:8e:8c:44:3b:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:15:F8:48:8D:E4:05:01:10:42:4B:D2:7B:83:6F:86:32:CF:66:1D
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36302e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:52:e5:dc:55:92:88:87:4e:bd:23:83:78:6b:3d:fc:64:
         23:6d:f0:73:41:ab:a0:1d:28:a7:cc:40:4c:61:eb:7a:20:e4:
         d5:7f:da:c7:01:1d:a8:5c:50:aa:ab:86:dc:83:22:c1:86:70:
         c0:c8:34:a5:cc:5e:b0:6c:ae:2d:81:9e:f0:c0:88:ef:3a:fd:
         ae:c3:9d:33:b7:44:ec:01:4b:9e:1e:98:87:6f:08:74:b2:84:
         f6:7a:0f:7f:e0:a0:f9:b2:fa:29:65:85:9b:44:fd:6b:85:66:
         6a:ea:3f:93:00:45:24:2e:02:9f:c3:77:b4:92:c8:f9:40:8c:
         0f:6d:99:eb:8f:87:55:c3:cc:25:ad:b7:6b:89:c2:97:fb:34:
         b3:ff:a2:4b:7f:54:d5:37:16:68:3e:88:88:47:c8:59:c9:c2:
         ab:ec:c9:71:61:78:73:7a:40:a2:7a:9f:4b:f0:96:5f:4f:a6:
         74:87:fa:67:15:e4:94:e3:9a:77:6a:5c:bb:61:de:eb:74:fc:
         fa:12:6a:e2:2e:b5:01:f0:23:42:8a:66:72:64:6f:21:1d:4b:
         38:7c:8c:9d:4e:a6:8a:85:3c:80:8c:90:23:3d:17:9d:bd:73:
         57:f8:ad:23:2e:9b:4c:83:ed:fd:44:0d:ae:67:37:4a:1e:52:
         aa:e2:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org