Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e33392e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          6PgU/6cr4t6ULfoKL9eVgJ6eYBFryJvBsUl/N8G2f9g=
Subject key identifier:   33:A5:94:54:2B:EB:7D:5F:DD:93:8D:A2:3B:D3:0B:D5:E2:69:1E:96
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       22B3503497CC426A40875C52AAEF7D3420F1F00A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:00 +0000
ROA not before:           Thu 06 Mar 2025 02:37:00 +0000
ROA not after:            Thu 05 Mar 2026 02:42:00 +0000
asID:                     28368
IP address blocks:        186.225.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b3:50:34:97:cc:42:6a:40:87:5c:52:aa:ef:7d:34:20:f1:f0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:00 2025 GMT
            Not After : Mar  5 02:42:00 2026 GMT
        Subject: CN=33A594542BEB7D5FDD938DA23BD30BD5E2691E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:19:13:de:2c:86:82:58:46:4e:ac:a3:3d:
                    68:b7:fc:dc:b8:d6:ac:50:44:ec:3b:64:2b:41:2a:
                    88:69:c0:ce:d3:fc:74:22:a5:4b:bc:2b:03:91:15:
                    e7:aa:92:2a:a5:96:28:a8:14:79:cf:ec:3b:6d:fa:
                    ec:d6:e6:e3:5e:9e:5e:ba:c0:76:b9:db:91:3d:b9:
                    81:3b:13:09:3f:57:37:f1:95:66:6e:b9:60:a7:c8:
                    7a:9f:f1:a7:76:35:72:60:29:2e:e3:73:76:ad:c9:
                    bc:54:7a:c4:8b:fb:e7:4d:61:03:77:c6:7a:f2:0e:
                    2e:33:32:b5:f4:e6:40:21:39:a2:fc:2f:db:ae:c0:
                    cd:82:21:a4:b6:24:74:38:f1:c4:2f:1d:80:46:f0:
                    32:d4:80:d9:c0:8f:20:87:f9:13:58:33:df:fc:cf:
                    51:05:d4:c3:f0:03:f6:a8:d2:58:0f:a6:00:06:c7:
                    ee:6a:12:3d:7d:38:a2:93:a3:98:9f:44:bb:62:b9:
                    aa:1f:3a:fa:8e:8a:99:08:09:fb:df:a1:ec:4a:8b:
                    97:3d:13:3b:59:ff:4e:f5:6b:83:0c:9e:1a:c6:b4:
                    d2:3b:a1:f7:df:35:4e:8a:9f:de:00:e6:df:ca:df:
                    82:a0:d9:3f:bf:54:c1:72:41:0a:eb:a9:6c:46:e0:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:94:54:2B:EB:7D:5F:DD:93:8D:A2:3B:D3:0B:D5:E2:69:1E:96
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e33392e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:b2:b5:2f:3c:1a:46:52:d2:bf:1d:11:4a:84:44:4e:f2:
         b4:e0:ed:f2:16:8e:d3:10:48:da:e6:0c:13:b8:ff:26:ee:aa:
         a0:31:04:57:b6:a1:c8:1c:9d:72:7a:5c:08:51:df:f1:95:a2:
         78:50:bf:ff:c7:19:a8:db:e1:23:82:fa:f3:25:94:79:05:cb:
         ed:4a:20:9f:4e:21:6d:f6:39:63:fe:40:36:38:1f:65:26:58:
         a3:06:7d:b5:c5:68:e8:87:fb:ac:cc:16:47:c5:c3:4e:1b:63:
         e2:d0:e0:aa:39:8a:d1:90:34:0f:86:66:f2:61:c3:7f:f5:c7:
         ef:97:b3:60:30:5e:4a:0c:8b:f0:5c:26:5f:6b:c7:c6:c7:df:
         ad:fd:7a:78:b2:d5:ed:00:06:e2:8c:fe:e5:c8:eb:3e:28:c3:
         45:03:ac:02:07:c4:7e:17:bd:37:56:01:16:ba:ca:50:41:55:
         c7:58:88:87:37:f5:75:35:2b:2c:af:d6:92:01:a4:52:00:d4:
         40:32:f1:18:5b:0d:71:55:ed:1b:8f:03:3a:2f:1b:8b:fa:2b:
         55:55:0d:c8:75:2b:15:83:39:fb:1e:27:be:99:a6:16:91:1a:
         fe:8e:3a:e4:ef:05:ae:c0:56:46:19:20:5b:51:48:1b:7d:26:
         57:c3:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net