Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e33322e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          bv6DhLY0wohnqs7qAdrKnp8RpS2fLp50JdjgHZbPAWg=
Subject key identifier:   34:34:93:E8:0D:8C:B9:D3:73:02:C8:54:80:5D:A4:DE:3F:10:90:E4
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       6B9D9CD67D4223189D21C125B7B7293F730F572E
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:05 +0000
ROA not before:           Thu 06 Mar 2025 02:37:05 +0000
ROA not after:            Thu 05 Mar 2026 02:42:05 +0000
asID:                     28368
IP address blocks:        186.225.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9d:9c:d6:7d:42:23:18:9d:21:c1:25:b7:b7:29:3f:73:0f:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:05 2025 GMT
            Not After : Mar  5 02:42:05 2026 GMT
        Subject: CN=343493E80D8CB9D37302C854805DA4DE3F1090E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:6a:ba:9e:62:ea:d5:21:13:8b:1c:66:26:
                    50:de:c7:35:b9:53:05:d3:af:20:00:75:27:e1:83:
                    c0:ea:52:14:c4:0e:3b:0f:b5:31:90:3d:4a:1b:e9:
                    ae:e0:63:67:f0:a0:1b:db:3f:65:79:f0:23:94:ea:
                    31:a7:9c:7e:08:a5:60:90:34:16:e7:34:20:e6:76:
                    41:d0:47:9d:fd:36:1d:7c:5d:7b:06:ee:e8:39:4a:
                    79:f9:5a:34:91:ca:46:ff:6a:32:1b:87:07:da:74:
                    da:8b:c6:33:da:d6:73:5c:04:ef:31:c6:e5:52:f8:
                    18:eb:cd:98:be:02:69:2d:c5:3d:8d:3a:2a:fb:3e:
                    f3:8f:2a:5e:4a:7f:04:ba:c8:a2:a7:cb:73:92:08:
                    c4:93:ee:55:ca:24:17:2e:4f:de:5e:2c:3d:fc:8d:
                    52:76:88:ce:ec:07:69:70:7f:6b:c4:55:61:17:6b:
                    cf:d4:ca:dd:e3:b9:9f:ca:e7:59:97:aa:69:af:d1:
                    83:84:7f:55:ab:9c:ee:56:3e:82:dc:f9:e5:1b:68:
                    0a:8b:c1:9c:7c:07:92:6f:68:73:46:7d:87:25:99:
                    e1:27:6a:2c:50:c3:a0:3b:65:66:30:ba:45:79:bb:
                    a8:80:d9:f8:15:d0:e5:a3:b8:66:4c:20:e1:8d:49:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:34:93:E8:0D:8C:B9:D3:73:02:C8:54:80:5D:A4:DE:3F:10:90:E4
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33322e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:a7:ec:b0:ba:90:4b:70:58:82:f4:dc:36:65:c5:37:22:68:
         97:08:1a:dd:31:30:71:82:b5:db:10:93:38:c0:6e:c8:30:69:
         1a:cc:79:b1:5e:b9:52:ea:fe:4f:02:e2:e4:c1:02:7a:ba:52:
         01:44:cc:e0:80:55:fa:dc:73:31:99:eb:d6:6a:a7:f0:6a:40:
         5b:e4:14:57:f0:d7:b8:46:9e:3d:63:02:83:61:98:d3:f9:98:
         e0:0b:09:0d:d5:d6:c4:f5:b2:d1:3a:f1:07:f1:2e:6c:0b:fe:
         00:29:07:d1:c6:a7:8b:cf:91:db:7c:70:37:6f:48:52:5c:5f:
         bb:40:10:d8:f1:5e:11:0c:c4:a1:12:4d:3f:57:37:fe:f9:f4:
         70:ee:6d:35:48:02:57:6e:b0:62:62:c8:1f:cd:80:b1:b3:43:
         d0:77:a9:49:17:91:1d:a3:31:79:be:fe:48:e8:ea:c9:96:ba:
         bd:4c:b2:7b:7f:e9:4a:2e:62:49:c8:68:12:f7:51:68:c0:a5:
         de:45:cf:20:8a:5e:63:2a:77:de:a6:65:96:6d:b4:94:e1:fe:
         40:cd:b4:17:25:a9:5b:4e:57:91:49:f7:20:45:17:a5:c0:3c:
         a5:9d:ea:0e:c9:36:98:c9:22:91:03:f2:5a:38:4e:f6:37:d3:
         6f:5a:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net