Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34322e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e34322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          3encQPGxKShICe91bUePJVNZ38TbTn42cSxxwgwX95c=
Subject key identifier:   CF:A0:8E:A2:97:CE:29:FA:94:22:E9:C4:50:31:EC:7F:DF:6D:BD:E5
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       4860C771A8FB160FDAE9B4FFE49363D937759F36
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:42:03 +0000
ROA not before:           Thu 06 Mar 2025 02:37:03 +0000
ROA not after:            Thu 05 Mar 2026 02:42:03 +0000
asID:                     28368
IP address blocks:        186.225.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:60:c7:71:a8:fb:16:0f:da:e9:b4:ff:e4:93:63:d9:37:75:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:03 2025 GMT
            Not After : Mar  5 02:42:03 2026 GMT
        Subject: CN=CFA08EA297CE29FA9422E9C45031EC7FDF6DBDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:cc:db:3d:08:e4:79:85:18:f3:9f:2a:fa:
                    93:44:51:3d:06:7c:e2:b5:a2:dd:f3:a5:2e:40:1d:
                    4d:62:38:c7:e1:cf:37:25:2e:d2:2b:5f:af:4d:9d:
                    39:70:30:f0:c5:76:a3:c8:5e:70:80:9a:6d:92:7e:
                    f0:de:48:0a:07:4b:d9:a9:50:f3:5c:af:02:2b:49:
                    9b:8e:1e:de:6d:1b:10:47:8f:fc:11:75:fe:e5:9f:
                    d7:c5:20:01:ec:18:b9:54:04:69:ab:5b:81:0e:d8:
                    9d:61:eb:1b:cf:78:10:f1:20:91:4d:da:ed:47:ca:
                    ec:ec:07:8c:14:a8:38:89:30:e4:57:8a:cc:88:85:
                    13:c7:31:78:da:e4:fd:4e:18:73:08:af:0e:77:41:
                    80:e5:a8:1e:97:bc:ab:8c:81:df:2f:0e:29:c1:3e:
                    10:7c:ed:eb:2a:c9:da:da:36:96:d0:fe:89:5e:99:
                    ae:3c:6d:77:0a:2e:0a:8c:0d:40:3b:28:42:07:e1:
                    13:6f:98:5a:28:5e:46:16:4d:6a:a9:c5:5f:e1:81:
                    d9:11:c7:d4:e0:a1:ee:b7:89:21:e1:2c:91:aa:a6:
                    b6:22:a8:29:10:29:27:bb:1e:10:1b:93:82:78:06:
                    3c:14:9b:c8:3d:dd:f1:89:52:06:53:28:5a:c1:63:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A0:8E:A2:97:CE:29:FA:94:22:E9:C4:50:31:EC:7F:DF:6D:BD:E5
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:4f:da:2e:5c:7e:53:eb:37:9c:cf:52:0a:d3:9a:69:b7:16:
         cc:c2:7d:e3:b7:f5:ad:99:b2:25:38:41:14:34:9b:8d:19:35:
         f0:3f:72:a2:8f:5e:ec:55:68:c2:d8:21:90:e9:f8:7b:ac:81:
         f8:3a:72:46:8b:94:af:cd:25:b0:ff:46:46:c2:17:01:bc:76:
         0c:22:32:5f:5e:fe:e7:8b:f5:f8:84:d4:5d:28:74:2a:d9:e9:
         88:1b:1b:bc:5f:6a:5e:03:7f:a1:56:b1:77:03:5e:31:db:d4:
         41:b7:88:62:46:99:b1:a5:34:1a:12:ba:4e:b7:35:cf:e9:0c:
         60:a2:6d:aa:da:b5:3f:cb:13:6f:70:74:23:f0:15:08:93:4d:
         61:f2:b5:cd:de:e8:c8:a7:c0:dd:d5:d0:52:71:b9:25:ed:e1:
         26:cb:da:c9:18:e6:a6:44:52:f9:6f:25:2b:ee:bc:bc:8d:58:
         ff:97:68:85:61:ca:f0:5c:f0:a7:d5:2b:a5:4d:e5:06:73:28:
         55:95:7a:2e:a7:cb:4d:a1:a2:87:3b:a6:ab:84:e6:05:a0:b2:
         3e:fa:87:73:a3:5b:c3:5f:d6:08:61:01:24:5c:84:06:45:36:
         64:0b:f3:ca:33:a0:f9:48:a7:a9:6a:16:a8:c8:4c:22:ea:de:
         53:fa:70:8c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSGDHcaj7Fg/a6bT/5JNj2Td1nzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNTAzMDYwMjM3MDNaFw0yNjAzMDUwMjQyMDNaMDMxMTAvBgNV
BAMTKENGQTA4RUEyOTdDRTI5RkE5NDIyRTlDNDUwMzFFQzdGREY2REJERTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNY8zbPQjkeYUY858q+pNEUT0G
fOK1ot3zpS5AHU1iOMfhzzclLtIrX69NnTlwMPDFdqPIXnCAmm2SfvDeSAoHS9mp
UPNcrwIrSZuOHt5tGxBHj/wRdf7ln9fFIAHsGLlUBGmrW4EO2J1h6xvPeBDxIJFN
2u1HyuzsB4wUqDiJMORXisyIhRPHMXja5P1OGHMIrw53QYDlqB6XvKuMgd8vDinB
PhB87esqydraNpbQ/olema48bXcKLgqMDUA7KEIH4RNvmFooXkYWTWqpxV/hgdkR
x9Tgoe63iSHhLJGqprYiqCkQKSe7HhAbk4J4BjwUm8g93fGJUgZTKFrBY+QBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz6COopfOKfqUIunEUDHsf99tveUwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzODM2MmUzMjMyMzUyZTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuuEqMA0GCSqGSIb3DQEBCwUAA4IBAQBbT9ouXH5T
6zecz1IK05pptxbMwn3jt/WtmbIlOEEUNJuNGTXwP3Kij17sVWjC2CGQ6fh7rIH4
OnJGi5SvzSWw/0ZGwhcBvHYMIjJfXv7ni/X4hNRdKHQq2emIGxu8X2peA3+hVrF3
A14x29RBt4hiRpmxpTQaErpOtzXP6Qxgom2q2rU/yxNvcHQj8BUIk01h8rXN3ujI
p8Dd1dBScbkl7eEmy9rJGOamRFL5byUr7ry8jVj/l2iFYcrwXPCn1SulTeUGcyhV
lXoup8tNoaKHO6arhOYFoLI++odzo1vDX9YIYQEkXIQGRTZkC/PKM6D5SKepahao
yEwi6t5T+nCM
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net