Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32322d3232203d3e203238333638.roa
File:                     3138362e3232352e34302e302f32322d3232203d3e203238333638.roa (raw, json)
Hash identifier:          qHwOm2vIHgXQcjrVE/SW/Pi5I8PMpy5nnNYF5xSUGI0=
Subject key identifier:   42:50:96:D9:09:7E:5F:94:31:2F:C7:8A:D4:EE:F6:BE:34:14:C6:A4
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       595E7B15C47B39335419F369F47B0C9B07228FF8
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32322d3232203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5e:7b:15:c4:7b:39:33:54:19:f3:69:f4:7b:0c:9b:07:22:8f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=425096D9097E5F94312FC78AD4EEF6BE3414C6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:a2:5c:51:2b:cd:c3:51:3b:c6:18:7f:6a:
                    e5:f0:55:24:3e:d3:c3:72:cb:a3:9b:1f:a5:03:af:
                    8a:37:81:75:f8:5b:48:5a:2d:d7:09:97:7b:68:94:
                    40:bb:08:57:44:25:6a:2d:ff:75:04:0f:fa:c1:94:
                    07:59:12:c5:1d:a7:5b:a5:7c:b8:21:df:63:3c:8d:
                    82:4a:ce:f5:5e:ab:5e:48:e4:cb:60:66:27:d3:62:
                    cb:3c:21:5d:15:dc:ca:2f:fb:d4:b3:49:c2:61:45:
                    ea:96:9b:bb:d5:08:dc:31:8d:68:29:09:52:fe:6f:
                    da:db:fb:aa:de:18:be:82:f7:33:8b:04:b0:cd:32:
                    b9:3c:bc:2b:b9:40:a6:75:de:ac:a3:5a:02:83:f7:
                    87:7a:db:c1:ec:69:0f:96:05:51:f3:bd:9e:4b:04:
                    90:6b:4e:0f:d3:8f:2e:0c:7c:61:ca:e8:05:84:0b:
                    10:a9:da:e5:59:85:0e:96:af:fb:2d:77:f6:fd:26:
                    14:6c:67:fe:36:af:35:ab:fd:83:27:09:26:93:f7:
                    ec:d7:a8:ff:38:ea:6a:85:ca:59:ce:62:98:4e:8f:
                    f4:8f:16:71:cf:b2:c4:e6:25:cb:a7:24:58:53:cf:
                    35:f0:67:82:11:d3:32:a5:34:fc:dd:ed:bc:87:20:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:96:D9:09:7E:5F:94:31:2F:C7:8A:D4:EE:F6:BE:34:14:C6:A4
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34302e302f32322d3232203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:35:db:56:3f:a3:75:e6:46:62:4e:35:27:3c:37:e3:e4:
         7b:bf:e6:3c:09:b8:ad:0f:5a:68:31:f4:11:30:e4:38:c7:d9:
         d4:70:f9:74:5a:5c:91:7f:7f:ef:a6:f3:9c:eb:b6:4c:85:a3:
         11:66:29:f9:89:7f:ee:7d:bd:70:04:90:41:d8:ed:cc:38:fb:
         a7:fb:42:4c:68:af:dd:12:b2:98:6c:11:4d:87:1d:74:b9:5d:
         5f:15:60:c6:17:70:90:dc:f9:78:a5:8c:1c:64:3d:25:95:b5:
         03:6a:00:1b:23:80:64:0d:51:62:4d:8d:fa:db:d2:b9:50:5a:
         02:14:8e:9c:73:96:04:d1:a5:f0:de:fa:ec:14:84:19:93:c3:
         e0:49:bb:86:db:ef:00:77:01:4a:35:ce:ca:d4:3e:4b:8a:45:
         a5:d1:5e:27:e6:c0:f1:5e:fc:b6:6c:12:92:7c:b7:db:fa:6c:
         17:ad:48:0c:a2:7e:7f:fa:21:6a:47:d0:ca:85:4a:00:8c:30:
         22:fb:2e:14:2e:f8:21:c1:7b:1f:7e:02:88:ba:43:34:31:5f:
         5a:23:f5:67:99:c3:88:6b:9a:04:a3:88:17:49:91:63:72:71:
         2b:65:be:78:d1:48:4a:17:b8:b2:b4:c9:e2:57:e0:6b:c5:0e:
         d6:e5:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:00:25 2025 by rpki-client on console.sobornost.net