Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e36322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          O84b2cuBzLWLpuEz1qsYUaI6i0bPCw9gRaGpcerWBcs=
Subject key identifier:   6E:78:77:AE:4E:CF:D1:08:AB:F4:73:38:9C:94:EB:25:B1:E1:85:BE
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       7A2FCD6D8CB30BE305BBD794D239D0285CFCBC35
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:18 +0000
ROA not before:           Thu 04 Apr 2024 02:21:18 +0000
ROA not after:            Thu 03 Apr 2025 02:26:18 +0000
asID:                     28368
IP address blocks:        186.225.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2f:cd:6d:8c:b3:0b:e3:05:bb:d7:94:d2:39:d0:28:5c:fc:bc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:18 2024 GMT
            Not After : Apr  3 02:26:18 2025 GMT
        Subject: CN=6E7877AE4ECFD108ABF473389C94EB25B1E185BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:51:8c:b5:21:c7:ae:73:4d:9e:df:d5:a8:
                    cc:7f:e3:d9:4d:37:b2:fa:87:5c:09:83:cd:10:95:
                    36:e9:b6:8e:3d:cd:9b:b9:e3:54:d2:91:d0:b8:07:
                    8f:b6:a6:64:67:0f:96:55:d1:ab:fa:c2:5a:0a:f5:
                    72:79:ea:ef:de:af:57:64:6f:6a:f4:18:9d:de:56:
                    71:c8:f9:98:9a:67:99:b6:fe:78:6f:03:ab:e5:a8:
                    c7:14:19:cf:a1:a7:01:09:3e:2e:5e:4c:29:ac:22:
                    25:9e:59:98:a5:f0:88:2d:83:04:a7:1b:5b:0a:41:
                    10:73:78:b4:ef:c8:89:aa:78:47:de:d3:a1:92:07:
                    84:7a:e2:89:4b:5d:e6:77:e9:76:23:ee:17:ee:54:
                    2d:ee:0c:e0:54:0f:09:6c:56:8a:4d:9e:4c:4d:1b:
                    c1:5d:ae:3e:b8:4e:72:1f:64:f0:40:0d:e4:63:a5:
                    b4:4a:2c:77:38:42:79:46:3e:d3:70:56:c7:11:1b:
                    87:f4:04:14:4e:07:52:7b:2e:28:1f:9a:93:a4:b2:
                    42:55:8b:bd:41:98:6e:73:76:b2:3f:d8:e9:46:4c:
                    59:33:87:b0:6f:a8:67:c5:53:60:72:8b:70:eb:0d:
                    b9:4a:fe:93:f5:a2:a9:24:e7:de:65:f3:4f:e6:8c:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:77:AE:4E:CF:D1:08:AB:F4:73:38:9C:94:EB:25:B1:E1:85:BE
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:36:3b:f1:2f:f5:5c:51:e4:7e:17:d8:52:67:a9:68:04:7e:
         b3:a8:62:51:87:9e:2d:48:51:57:cc:88:76:c4:9a:d9:24:31:
         19:38:16:8e:df:ac:b7:f9:86:c2:99:04:ce:eb:58:a7:6b:72:
         f6:a5:8f:2b:34:fb:82:11:16:6c:23:a7:ff:d1:d5:a2:47:bd:
         63:7f:f7:24:cc:b6:0f:31:25:b4:5b:0e:27:29:29:72:08:77:
         8d:95:e3:58:00:d8:23:f7:63:75:97:38:27:49:d8:95:5f:2b:
         94:aa:ca:53:3c:9b:db:0a:6e:ed:e7:37:77:6a:7d:28:4a:eb:
         75:da:ad:b3:90:13:5c:54:63:68:f5:08:31:68:5a:d8:f2:5d:
         65:6d:7e:03:b3:07:62:b0:40:98:06:87:bd:b3:c7:85:d2:d0:
         95:01:f2:2a:3c:d2:00:67:28:f8:06:af:9f:00:63:0c:3b:7e:
         b6:94:a6:e3:76:b2:55:8e:0d:66:a6:ce:03:a8:85:19:e0:f4:
         fe:43:cc:7f:7b:65:ba:f1:31:13:cd:16:b6:f5:4c:66:7b:bc:
         0c:90:50:10:08:84:66:a6:57:8e:b6:d7:49:08:d6:3b:9f:c4:
         db:91:5a:eb:a8:3e:7b:0e:09:77:65:78:73:a3:ed:b0:b9:6f:
         e3:60:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org