Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138372e36302e33322e302f32302d3234203d3e203238333638.roa
File:                     3138372e36302e33322e302f32302d3234203d3e203238333638.roa (raw, json)
Hash identifier:          poDhg1N25rgs4T4fuJfxD93XQXbMsfFGasgmJtsFhI8=
Subject key identifier:   CD:D6:03:AF:79:6C:9E:68:55:2C:EF:11:55:82:2A:47:1A:24:EC:F7
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       126BDE7B49EBB79AB4D50B75A25C9C40E1D30D85
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138372e36302e33322e302f32302d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        187.60.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6b:de:7b:49:eb:b7:9a:b4:d5:0b:75:a2:5c:9c:40:e1:d3:0d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=CDD603AF796C9E68552CEF1155822A471A24ECF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:7d:50:3a:72:7f:c4:f4:ee:4e:0c:c2:32:
                    52:4f:95:0a:07:db:de:6f:6a:83:e6:d6:ff:1c:10:
                    2a:67:2d:c7:27:24:c0:13:29:9f:ba:de:95:fb:7f:
                    0c:e7:27:a5:fb:e5:b5:66:49:a3:44:79:d0:43:cb:
                    fe:e5:cf:02:87:ff:7e:ec:fa:e5:bb:ac:c2:ae:78:
                    06:c0:36:85:ed:1a:2b:29:02:8a:72:b5:aa:d1:a5:
                    9c:a7:f6:c8:eb:c7:73:fd:d9:4d:23:1e:64:d6:f7:
                    8e:13:da:7b:5e:02:3a:bb:50:b5:ac:da:07:28:cc:
                    03:68:22:86:e6:f5:70:ce:a9:70:28:7e:f6:5e:1d:
                    f8:48:93:1c:0f:d5:a5:35:6c:e3:49:40:1d:86:4a:
                    fc:03:37:b2:4d:cd:89:2c:12:10:0e:23:e4:a7:d4:
                    55:a8:7f:b7:bb:9b:61:44:e7:29:63:6e:05:e4:c3:
                    a5:3a:44:48:3e:98:44:b6:41:25:e6:31:fc:7a:c6:
                    8b:38:55:b3:13:9d:64:b6:2a:fc:42:0e:f4:ec:00:
                    1c:50:2e:18:b1:a3:fa:05:12:28:cc:76:de:a3:88:
                    50:db:1f:e7:66:17:5f:bf:9f:62:6e:b3:0a:57:d1:
                    b4:81:09:8a:80:59:15:a5:49:c7:40:dd:4d:98:df:
                    0b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D6:03:AF:79:6C:9E:68:55:2C:EF:11:55:82:2A:47:1A:24:EC:F7
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138372e36302e33322e302f32302d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:80:48:b0:f7:1e:7f:a5:79:f4:a3:d0:94:a4:96:e8:f9:96:
         20:68:c3:29:b1:a5:15:41:e4:86:16:1d:b5:3d:7c:26:1b:4f:
         27:56:1a:de:7a:14:61:f7:7a:7e:f0:be:2a:2c:a9:4d:ea:fc:
         11:c0:4c:16:c9:b8:88:ec:85:c7:6e:37:69:6b:80:ff:3b:ab:
         27:31:98:65:33:7a:ad:a3:bb:d2:68:d8:60:2b:d2:55:96:66:
         8f:4a:f8:41:bc:43:75:b5:40:0c:dc:82:ad:11:3f:72:e1:ae:
         ef:3a:f3:b5:67:f0:1f:11:95:f2:ef:db:a8:af:50:7d:85:87:
         85:17:2e:65:26:f2:a0:97:8b:7a:ae:ad:58:d6:15:30:1b:56:
         59:8b:33:04:8a:78:46:65:53:9f:3e:f5:d7:29:09:97:4e:c9:
         ce:d9:ed:64:53:2d:26:1c:8a:c2:42:72:54:62:a4:34:0d:e8:
         6a:87:4d:1e:a4:04:98:eb:39:db:d9:d8:09:6f:b7:dc:79:b6:
         90:bd:49:91:65:fa:9f:7a:48:5c:ad:1e:f1:fa:89:9a:a4:f0:
         61:de:2e:cd:99:b0:bb:c6:1f:43:5a:87:93:8b:ba:ca:0e:41:
         33:4f:f5:56:c8:c2:d2:fa:24:e7:1e:65:37:ca:f5:17:31:a9:
         13:40:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:39:29 2025 by rpki-client