Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e36322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          d+UcHw+kQAs0YFmqcgJqNG96tDimOB7e2sthnhA7On8=
Subject key identifier:   CD:E4:F0:BF:0A:0B:50:BA:52:0B:48:A8:34:30:C1:13:51:9E:8A:31
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       16039AEC9F8AA86A395C4F2A8A4711A00FC46A0A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:00 +0000
ROA not before:           Thu 06 Mar 2025 02:37:00 +0000
ROA not after:            Thu 05 Mar 2026 02:42:00 +0000
asID:                     28368
IP address blocks:        186.225.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:03:9a:ec:9f:8a:a8:6a:39:5c:4f:2a:8a:47:11:a0:0f:c4:6a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:00 2025 GMT
            Not After : Mar  5 02:42:00 2026 GMT
        Subject: CN=CDE4F0BF0A0B50BA520B48A83430C113519E8A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:86:35:a1:80:e2:3a:e4:b4:ea:8d:31:6c:
                    26:cb:70:98:ee:ba:46:9b:58:f8:2f:6a:ff:fc:ea:
                    5f:b6:8a:b6:22:4b:62:84:7c:9d:56:73:68:ac:dd:
                    7e:6d:91:c3:2c:1a:d1:59:4c:f9:e2:8f:08:fb:05:
                    ff:1f:1c:ae:fe:59:a6:0e:a3:91:5a:35:e7:ec:93:
                    74:30:dd:f7:fd:35:f1:28:86:07:0e:d1:b3:7f:60:
                    5f:f9:5e:0e:c3:32:3a:10:08:5d:00:bd:a6:54:c3:
                    de:2a:e9:74:f0:53:da:de:76:b7:13:9e:00:8a:fe:
                    61:bb:71:1d:b9:6f:08:34:fa:a8:4c:f8:e6:5d:4c:
                    69:17:27:1b:16:50:88:07:d6:2f:89:f0:c0:4f:90:
                    38:5a:62:8f:9c:2f:6f:d1:78:ff:ce:a6:b3:ed:97:
                    98:a8:34:8a:f8:66:19:49:80:13:70:64:e6:27:54:
                    28:55:8f:f9:37:9f:c1:99:7b:43:05:44:86:55:a0:
                    6e:f2:e7:d0:dc:2c:1b:a7:82:09:71:80:43:1e:0c:
                    0c:a5:98:82:2b:a2:68:9a:8e:ff:7c:8d:b3:61:20:
                    9c:d9:56:3c:e3:aa:44:fe:fd:3e:5b:db:ca:54:8b:
                    9b:0b:46:1d:65:d3:49:fb:d4:eb:58:b1:8d:5f:34:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:F0:BF:0A:0B:50:BA:52:0B:48:A8:34:30:C1:13:51:9E:8A:31
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:53:0f:50:20:13:d6:0d:39:dc:5b:ed:1f:fb:f2:7f:40:
         a0:cd:0e:2f:e0:a4:35:14:44:e3:82:27:62:24:02:92:36:1b:
         a6:a1:72:6c:98:3e:b8:2c:88:54:1b:c7:b1:a6:22:2c:9b:7c:
         d5:7d:33:1e:0d:c2:c8:34:9d:a4:a5:0f:bf:4f:ab:af:9e:dc:
         b2:98:9d:34:b9:2a:37:b4:eb:58:62:6b:f2:3c:28:39:15:8f:
         c0:32:1d:44:7b:15:66:68:38:e7:c8:08:a2:23:a3:8f:d6:fc:
         46:29:08:c3:ff:6e:1c:c9:22:66:9b:d9:29:fe:c6:63:81:68:
         6c:6f:c6:8a:66:ff:0f:ca:94:4b:69:2c:c9:15:35:40:de:aa:
         aa:4f:2d:ae:00:2f:4c:fc:a6:15:a4:0a:9a:c8:0e:ae:e0:89:
         28:e9:e2:3d:f4:2b:c0:66:19:a8:bb:9d:5c:cc:84:39:bd:36:
         9d:d6:a7:b6:bd:b3:97:24:78:9e:3a:67:61:c3:24:03:af:91:
         6b:68:77:98:78:19:5c:83:33:ec:b7:c5:27:8e:cf:e5:b8:e6:
         1f:c6:a5:1f:0a:99:19:d2:61:3a:48:94:79:8b:ed:67:a0:ea:
         b2:19:1b:30:87:9c:fc:ae:3e:52:d8:13:54:45:69:e6:ce:92:
         f0:e1:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:22 2025 by rpki-client