Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa
File:                     3138362e3232352e34332e302f32342d3234203d3e203238333638.roa (raw, json)
Hash identifier:          v7/D149nD1yuDP/7uS7OXpwv97gzvKrLgjv50tQFXwA=
Subject key identifier:   95:B4:91:FA:96:59:31:3A:25:96:CC:F1:C0:BF:E8:D3:52:54:6C:76
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       37119F8E31DBC1A0271C3DB48BDAD974AFEBD26F
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:11:9f:8e:31:db:c1:a0:27:1c:3d:b4:8b:da:d9:74:af:eb:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=95B491FA9659313A2596CCF1C0BFE8D352546C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:f1:30:85:f6:c1:c5:9d:64:a4:1c:09:c7:
                    22:fa:5b:c6:ac:eb:85:7b:2c:67:53:99:60:79:0a:
                    a0:f3:c8:9e:73:bf:d0:67:e6:c4:99:10:65:75:01:
                    1d:38:ec:18:d6:4f:77:ae:4b:68:5c:b9:39:3b:cd:
                    0e:0b:b5:64:d8:81:37:32:41:05:01:10:cb:a1:f8:
                    df:4e:18:1d:63:2f:56:7c:2d:b4:b4:b7:1b:13:9d:
                    c0:45:e0:10:93:72:5c:c8:48:b2:59:b7:49:6f:a0:
                    87:d6:0b:50:cb:eb:08:09:cf:d0:e8:9f:b0:50:0b:
                    f0:dc:a0:97:4b:d5:24:30:b9:7b:ad:b7:07:6d:0e:
                    d5:5a:50:99:45:5f:1a:3c:75:e4:e8:ca:dd:9d:bc:
                    8b:3c:f9:98:4d:d1:ed:87:4c:9a:1d:62:e3:f6:da:
                    d2:d2:ec:1d:8d:39:47:7b:0c:5a:d0:c7:2d:e9:b5:
                    ff:3d:be:2d:1e:ae:21:ed:cc:ce:5f:74:b5:9a:80:
                    0d:75:12:3d:e9:7c:9b:51:12:3e:4c:3d:8a:84:06:
                    2f:3b:ed:bb:00:07:17:44:9a:db:1b:a3:5d:c9:83:
                    0d:53:14:12:a9:49:e3:b6:99:dd:d3:d2:07:cf:e6:
                    3c:5b:86:50:0c:3d:ff:a2:01:32:d7:8a:fd:f9:a4:
                    00:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:91:FA:96:59:31:3A:25:96:CC:F1:C0:BF:E8:D3:52:54:6C:76
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e34332e302f32342d3234203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a5:a4:2c:ae:cc:cf:91:2d:8e:52:49:3b:83:8e:76:74:66:
         d2:10:fb:21:92:68:f2:63:f8:af:b4:65:d7:dc:39:8a:4f:d3:
         c6:0c:be:c5:e6:1d:e8:ca:ee:ab:a6:3b:60:ef:0a:e5:6b:63:
         7a:5d:0e:5a:f9:b5:d4:41:06:9f:87:b3:fc:cb:04:26:41:90:
         f4:44:f6:1d:1e:65:d1:65:f1:d8:00:62:d4:bd:d2:85:b6:4d:
         0f:3d:07:57:f6:f9:b9:48:7b:30:0b:ad:01:c9:01:fb:41:45:
         92:b2:0b:2f:31:43:33:96:68:4f:76:de:15:0d:32:d3:bd:c1:
         cd:45:07:a3:7c:db:40:cd:e6:7a:c8:1f:ea:ef:8e:12:83:40:
         39:d0:55:0c:d8:8b:8f:43:18:e2:a1:73:93:84:f1:eb:8e:8d:
         aa:b1:e3:fb:b6:88:27:2a:88:18:45:a9:fd:fd:eb:f4:49:1e:
         b7:af:6b:fc:04:53:48:5f:ec:2d:86:6c:ca:9a:ee:80:9d:c2:
         77:03:fe:4a:dc:de:d7:09:73:9b:77:97:ec:d5:ae:8c:5a:5d:
         16:4b:ff:33:af:d1:57:51:a7:7e:ac:b8:90:97:85:51:c6:4b:
         43:41:a2:68:5a:be:71:b5:60:5c:1d:bc:bd:70:10:d4:72:a7:
         03:7b:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net