Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e33382e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          ee6IXz0cuQ+dnmg4zea86qTFkxQfhgf2fvf0u0ae1KE=
Subject key identifier:   DA:33:F4:8B:9B:D8:61:18:F2:C3:9D:C7:5F:CB:3A:E5:3E:61:0F:9F
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       5E960B614590AE2291DB905C5E972E2DB1971279
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:53 +0000
ROA not before:           Thu 06 Mar 2025 02:36:53 +0000
ROA not after:            Thu 05 Mar 2026 02:41:53 +0000
asID:                     28368
IP address blocks:        186.225.38.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:96:0b:61:45:90:ae:22:91:db:90:5c:5e:97:2e:2d:b1:97:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:53 2025 GMT
            Not After : Mar  5 02:41:53 2026 GMT
        Subject: CN=DA33F48B9BD86118F2C39DC75FCB3AE53E610F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:74:3a:57:1c:2f:51:33:c0:86:75:89:23:
                    74:93:15:51:58:50:f3:28:06:f5:fa:b5:69:c4:ca:
                    2f:99:44:83:63:5e:a1:0b:7e:71:1b:fd:87:ab:f0:
                    a0:b0:62:3b:da:d0:f0:00:ce:3d:7e:98:6a:a7:a0:
                    57:97:2c:b3:1a:31:ab:c0:01:78:4c:05:3d:e1:50:
                    eb:ff:22:59:bc:ce:eb:a9:ef:0c:23:19:b0:c2:85:
                    a2:88:47:1b:9d:1b:57:4b:4f:1f:54:46:23:51:4f:
                    6d:5a:6c:d8:41:ac:ab:e6:71:61:e2:0e:2b:b6:d1:
                    f6:0a:3c:56:8f:34:4e:4b:9c:4d:84:17:6f:1d:22:
                    5b:ef:df:88:7a:11:0c:08:16:c4:9b:8a:90:36:5a:
                    89:e2:4c:21:f9:44:32:e9:54:11:2f:02:48:da:d7:
                    14:5e:cc:fb:a5:62:05:bf:c8:dd:84:10:27:a6:16:
                    25:75:ec:73:d7:19:31:a4:31:60:3f:9c:73:6a:5b:
                    4e:29:b2:8b:c0:74:1b:07:47:fd:cd:d7:3b:bd:f3:
                    c7:da:b6:38:2f:7d:8c:0e:13:ba:b9:51:f0:17:5b:
                    62:8d:1f:7f:c9:51:c1:32:05:98:a7:d0:2b:40:1a:
                    1c:53:c6:3d:54:e3:03:c7:77:e7:01:8b:6b:d7:ef:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:33:F4:8B:9B:D8:61:18:F2:C3:9D:C7:5F:CB:3A:E5:3E:61:0F:9F
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33382e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:12:a0:a7:1c:5a:83:df:94:82:64:77:b2:8f:c9:48:f6:
         ce:06:be:4c:d5:71:cd:1c:ee:11:6a:10:cc:7a:c8:65:df:6c:
         2e:0a:b9:bb:d6:4b:3f:b5:f0:61:65:ca:19:76:27:8e:8b:0f:
         d5:96:bd:a0:ab:47:60:18:e0:48:c6:bf:ee:1a:33:7d:05:82:
         be:4a:8c:3a:8b:e4:84:4f:65:b7:34:75:a5:2b:d8:3b:38:95:
         04:40:10:fd:e6:bb:8c:58:2e:9d:12:1e:fd:33:a4:52:9c:22:
         59:c1:39:49:34:31:2e:d5:76:d4:d2:0b:a0:53:b5:52:8a:17:
         90:1c:5d:c2:c7:21:c4:56:07:e2:17:98:4a:86:09:c6:e5:9e:
         1b:b2:89:3f:ca:ed:10:e4:8e:b8:6c:a2:cd:db:13:fa:39:eb:
         fb:63:8b:77:01:12:c2:00:7c:d9:76:4d:67:4f:13:01:bc:e7:
         42:38:2f:6e:ca:bf:a2:4b:26:82:0a:c5:2d:67:49:87:7e:c5:
         27:31:92:93:b7:f4:a5:43:23:12:07:46:d5:eb:a7:7d:d3:c1:
         7e:26:94:e9:6f:78:1f:29:13:9a:e8:fc:d1:d4:d7:49:aa:c3:
         5e:69:0e:6f:15:c0:d5:58:98:f0:c2:f3:9b:f6:45:8f:33:18:
         70:96:82:58
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXpYLYUWQriKR25BcXpcuLbGXEnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM2NTNaFw0yNjAzMDUwMjQxNTNaMDMxMTAvBgNV
BAMTKERBMzNGNDhCOUJEODYxMThGMkMzOURDNzVGQ0IzQUU1M0U2MTBGOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4HQ6VxwvUTPAhnWJI3STFVFY
UPMoBvX6tWnEyi+ZRINjXqELfnEb/Yer8KCwYjva0PAAzj1+mGqnoFeXLLMaMavA
AXhMBT3hUOv/Ilm8zuup7wwjGbDChaKIRxudG1dLTx9URiNRT21abNhBrKvmcWHi
Diu20fYKPFaPNE5LnE2EF28dIlvv34h6EQwIFsSbipA2WoniTCH5RDLpVBEvAkja
1xRezPulYgW/yN2EECemFiV17HPXGTGkMWA/nHNqW04psovAdBsHR/3N1zu988fa
tjgvfYwOE7q5UfAXW2KNH3/JUcEyBZin0CtAGhxTxj1U4wPHd+cBi2vX75FFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2jP0i5vYYRjyw53HX8s65T5hD58wHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuuEmMA0GCSqGSIb3DQEBCwUAA4IBAQCTnRKgpxxa
g9+UgmR3so/JSPbOBr5M1XHNHO4RahDMeshl32wuCrm71ks/tfBhZcoZdieOiw/V
lr2gq0dgGOBIxr/uGjN9BYK+Sow6i+SET2W3NHWlK9g7OJUEQBD95ruMWC6dEh79
M6RSnCJZwTlJNDEu1XbU0gugU7VSiheQHF3CxyHEVgfiF5hKhgnG5Z4bsok/yu0Q
5I64bKLN2xP6Oev7Y4t3ARLCAHzZdk1nTxMBvOdCOC9uyr+iSyaCCsUtZ0mHfsUn
MZKTt/SlQyMSB0bV66d908F+JpTpb3gfKROa6PzR1NdJqsNeaQ5vFcDVWJjwwvOb
9kWPMxhwloJY
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net