Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa (raw, json)
Hash identifier:          oqq0Fr9RhomaL8Y5fmjpsnpMGam9CR5HfOk9LXtsAIE=
Subject key identifier:   C3:B8:E4:1E:71:9A:48:27:8A:34:3D:36:67:1D:20:33:DD:6C:EF:44
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       76B1BF816046D048096758A33774B4DDC6D241F7
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:03 +0000
ROA not before:           Wed 03 Apr 2024 23:03:03 +0000
ROA not after:            Wed 02 Apr 2025 23:08:03 +0000
asID:                     262798
IP address blocks:        186.236.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b1:bf:81:60:46:d0:48:09:67:58:a3:37:74:b4:dd:c6:d2:41:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:03 2024 GMT
            Not After : Apr  2 23:08:03 2025 GMT
        Subject: CN=C3B8E41E719A48278A343D36671D2033DD6CEF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:0c:a5:17:e4:99:99:d7:fb:e1:d2:77:2c:
                    80:c9:64:5b:8c:58:c7:50:4a:84:81:31:f1:f4:ed:
                    d3:cc:95:d3:7b:9c:9b:24:54:b5:77:fc:29:38:b1:
                    f5:b9:6a:3d:87:77:92:4c:42:e6:3e:b3:9f:42:2f:
                    1b:7e:f6:a3:7e:91:ee:d8:53:55:d8:0f:2e:c2:e2:
                    04:84:48:5e:15:bd:05:e9:c3:8f:96:fe:fe:5e:a9:
                    b3:a0:6f:e9:90:dd:70:57:5e:27:da:0b:59:7f:cf:
                    01:b2:d0:aa:11:a9:17:2f:f7:53:bb:ce:f4:a0:cf:
                    e6:f9:1b:08:a6:3c:40:9e:6f:e4:58:8a:05:f7:e1:
                    2f:bf:13:af:27:99:cc:17:0c:ba:36:3d:2a:55:83:
                    10:15:7e:3b:19:26:46:7f:82:21:41:4d:ba:f7:d9:
                    80:0e:ab:7c:b0:1b:74:b3:9c:1f:8e:10:7b:4e:84:
                    76:8d:2e:d0:28:d7:0a:32:bc:0d:7c:e5:bd:85:50:
                    91:94:b4:52:02:dd:c1:ca:77:d4:62:98:5d:3e:04:
                    59:5f:35:42:ad:1f:ba:21:35:bd:4c:9f:5f:a8:51:
                    1c:6f:af:ef:a1:35:c1:24:6c:25:e3:f1:ae:d4:5c:
                    48:1e:44:17:de:4c:b3:8d:98:10:14:df:1a:3a:83:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:E4:1E:71:9A:48:27:8A:34:3D:36:67:1D:20:33:DD:6C:EF:44
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32302d3230203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:38:4b:da:58:37:28:03:40:d4:c8:8f:3c:30:75:fd:f5:6b:
         b9:53:4e:35:97:24:de:37:a8:52:a9:c8:e0:13:7c:09:d8:90:
         49:85:4c:24:d6:f3:98:7c:48:8a:cf:7a:c0:40:b5:3b:08:4d:
         f2:d4:3d:d2:ad:de:d9:da:ac:51:cc:d2:c1:e7:d0:62:a8:63:
         a2:bb:61:ad:54:d7:61:ed:e4:83:e8:56:97:b7:97:3b:70:58:
         62:f3:62:7e:2d:6d:8d:d4:c0:5c:6e:9b:dd:5f:66:5b:ec:92:
         80:28:df:8c:4f:ff:19:1c:a4:b0:f7:33:22:73:1b:7d:ca:ef:
         4f:bd:77:ef:e0:7f:91:24:2b:17:e7:11:74:7b:ee:10:53:0d:
         37:25:49:b0:77:27:cb:2c:88:2e:80:47:75:3a:98:b5:52:7d:
         6a:94:5e:06:37:5a:32:b3:b6:37:81:5d:28:70:24:46:65:61:
         f0:ad:5e:32:be:93:93:d0:0c:f3:e3:60:82:61:29:56:95:7c:
         1e:e4:02:ee:a5:74:dc:3d:f1:83:fb:cb:8e:25:fc:e8:37:6e:
         d1:36:ad:dc:de:5f:46:86:14:1d:b7:ac:78:77:4c:8b:33:9f:
         a2:85:c6:87:ea:2f:4f:58:8c:bb:a6:cb:c2:7a:a5:19:1f:fa:
         06:2a:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org