Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e36322e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          ilFhhs6VsD7aFhA4MqsOzs1Hsrx+rwVmGHGRNCAExkU=
Subject key identifier:   86:96:69:58:CA:E1:8B:84:DA:6E:E0:87:6F:5D:CF:0B:7A:7F:11:D2
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       36774A73F03A7F31A516C01F9BE068DE47A31F37
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     28368
IP address blocks:        186.225.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:4a:73:f0:3a:7f:31:a5:16:c0:1f:9b:e0:68:de:47:a3:1f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=86966958CAE18B84DA6EE0876F5DCF0B7A7F11D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:15:5b:45:ec:91:10:17:95:d8:ff:a0:2d:
                    a7:93:fc:d9:11:1c:0f:78:a0:68:48:41:dc:c4:ca:
                    00:f3:57:92:13:05:20:d6:30:6a:f4:01:7c:7f:d1:
                    b5:41:a5:80:b6:21:c5:69:7d:55:b9:e5:b5:7e:18:
                    06:16:13:37:5d:48:61:58:d6:6c:0b:d9:68:00:f9:
                    d4:66:01:86:63:09:51:54:64:b4:db:79:6b:aa:41:
                    e8:7a:54:43:43:5d:48:5c:83:36:f1:8d:d9:05:be:
                    8e:55:7d:fc:59:7c:6e:eb:af:42:66:ee:85:e8:7b:
                    a8:d4:f1:0f:db:1a:40:1f:d9:93:51:89:d6:4c:fc:
                    ee:c8:81:51:a7:5a:5b:cd:9a:db:19:e3:ed:91:b4:
                    37:3c:38:6c:18:88:13:dd:5d:f5:08:32:70:f8:d2:
                    10:13:ff:26:0a:94:74:5f:d7:a0:2c:3b:32:29:cf:
                    50:89:05:00:b5:5c:d9:a7:03:58:5d:c3:1f:62:9e:
                    b5:44:98:69:a0:68:14:89:3b:2b:37:b6:54:a2:4e:
                    08:7a:c4:3a:67:60:f6:a2:32:13:03:7d:88:25:85:
                    34:8a:37:31:e9:38:8f:d6:48:15:5d:48:eb:6d:6a:
                    cc:23:86:23:69:82:9a:aa:ee:18:07:d1:0c:31:ac:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:96:69:58:CA:E1:8B:84:DA:6E:E0:87:6F:5D:CF:0B:7A:7F:11:D2
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e36322e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:13:42:08:60:e8:5c:36:e9:d6:2b:ef:a9:2c:bd:f7:19:f5:
         b5:9c:c6:01:9c:59:ec:65:1d:8b:61:1d:dd:a6:57:ec:19:99:
         37:3e:82:28:2a:ea:7c:d7:ce:af:c6:37:12:c1:0b:ae:32:3c:
         2c:69:00:62:87:4b:53:a3:30:c9:5e:11:6a:64:78:31:07:36:
         df:72:9a:5b:5c:85:0f:d3:b6:1b:20:a9:b4:8f:e1:4b:86:11:
         f0:0c:f4:68:2f:27:25:8e:30:a3:bd:8e:92:56:28:b5:28:ea:
         99:2f:2a:14:0f:83:8c:4e:04:d7:7b:bc:81:51:f8:ca:33:ab:
         a4:9c:e4:32:1b:76:a8:b4:b8:57:be:9d:19:03:40:66:b4:82:
         22:44:11:9e:1e:a8:18:47:88:fc:51:ee:28:2f:44:53:11:a5:
         fb:b8:26:c2:f5:83:c0:4f:3a:9b:60:96:0e:3e:85:65:67:62:
         4c:ff:44:d9:b1:1b:14:c6:62:1d:03:99:68:52:99:dd:9b:11:
         18:ff:ca:65:d0:eb:20:34:e7:98:ea:cd:5b:c6:6c:85:94:0e:
         29:4f:af:eb:e9:88:73:a9:88:45:f4:7c:30:45:71:91:7a:c3:
         bb:69:9c:7b:06:51:87:5c:71:aa:c7:f2:21:9f:14:9e:af:fa:
         69:20:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:21 2024 by rpki-client on console-fra.rpki-client.org