Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35302e302f32332d3233203d3e203238333638.roa
File:                     3138362e3232352e35302e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          ROdEJALcoQXV6qOvDeaabY4RGdFZ/TV1GMhky2Nd+Jk=
Subject key identifier:   04:32:4C:96:03:3B:F4:64:0E:F4:78:65:70:0C:12:BB:A4:25:9D:20
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       34898572204A45589E9865C7C919DE7B2C04D64A
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35302e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 06 Mar 2025 02:41:59 +0000
ROA not before:           Thu 06 Mar 2025 02:36:59 +0000
ROA not after:            Thu 05 Mar 2026 02:41:59 +0000
asID:                     28368
IP address blocks:        186.225.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 21:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:89:85:72:20:4a:45:58:9e:98:65:c7:c9:19:de:7b:2c:04:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:59 2025 GMT
            Not After : Mar  5 02:41:59 2026 GMT
        Subject: CN=04324C96033BF4640EF47865700C12BBA4259D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:09:ed:68:2f:12:ec:14:47:45:be:72:0e:
                    91:08:25:8c:44:7f:22:d9:6a:eb:08:8c:d4:fa:6d:
                    a0:8c:d5:a5:af:74:3b:6d:75:e1:14:50:51:0c:5b:
                    8e:b8:64:5c:fa:2d:12:5f:8c:2d:4d:98:6f:24:99:
                    b6:23:82:28:93:81:f7:cc:2a:b3:59:32:d1:0c:d9:
                    11:0e:9b:cc:9c:ad:14:52:08:b4:a9:87:4e:a6:4f:
                    4b:c9:b6:37:a4:5b:c9:6a:37:65:7b:c1:83:b2:31:
                    d4:24:00:d1:55:d3:cf:b6:ef:4c:0c:4e:ad:bc:9c:
                    19:86:ba:55:a7:f4:dd:be:33:29:87:69:ff:85:24:
                    56:69:9b:5b:6e:2e:61:d7:51:d6:7f:f1:9d:fd:4b:
                    5a:f1:69:06:04:77:25:3f:6e:6e:a3:61:47:29:84:
                    3f:71:8b:49:40:91:fb:78:29:be:08:cf:fa:01:12:
                    da:95:9f:cb:a3:33:71:cd:6b:e7:2f:4b:21:f8:64:
                    4f:f0:e3:d2:c4:c5:95:f9:0d:1d:a4:39:51:3c:f8:
                    50:9f:7f:ea:89:15:03:d0:76:3c:b8:08:5c:ff:71:
                    1d:7c:8c:17:5a:5e:cb:92:54:53:86:e5:ad:1f:16:
                    57:0e:9d:ed:29:e9:a5:6d:0e:92:ee:40:63:b6:2d:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:32:4C:96:03:3B:F4:64:0E:F4:78:65:70:0C:12:BB:A4:25:9D:20
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3138362e3232352e35302e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:36:10:cb:36:9d:f1:e6:bf:b9:de:52:88:9c:30:e9:7d:
         99:f8:7d:73:c4:2b:5e:3e:f5:a0:4a:a9:07:8c:b4:c1:2f:17:
         d1:09:d0:88:da:73:92:53:8e:8c:bd:9f:b2:da:8f:bb:07:7d:
         d5:27:80:75:69:e5:16:90:49:8a:ac:6a:53:f0:33:09:82:c9:
         43:d3:ee:a0:fa:74:d4:47:ad:f5:ea:34:25:b0:6c:a7:76:88:
         ec:e1:78:8d:df:5c:03:68:2d:40:1c:4c:9f:dc:c2:d0:b8:fd:
         59:76:50:a4:3f:78:99:24:2c:e3:5f:c3:0c:fd:eb:d9:c3:cf:
         fb:3a:d6:93:c8:99:2b:f0:ae:28:0b:ca:5c:26:f3:b7:cf:96:
         95:7c:26:74:b7:29:d8:d8:a5:6e:fa:f2:51:ea:9d:ed:87:10:
         6b:1e:58:b5:1c:83:0b:61:ef:5c:9e:7c:d9:41:64:0e:28:2d:
         e2:e8:0d:75:d5:7d:69:64:8e:d4:11:22:27:81:dc:ff:30:4c:
         1f:23:cb:96:e3:4f:e2:0c:94:99:ba:7a:82:a4:ee:87:ce:e4:
         ff:99:32:3a:cd:0c:b7:f8:70:b2:53:d2:5a:6c:76:da:31:74:
         3e:b9:74:fa:1f:22:c1:35:8d:49:ed:87:c1:c4:a3:34:cf:14:
         5e:54:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:02 2025 by rpki-client on console.sobornost.net