Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32312d3231203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32312d3231203d3e20323632373938.roa (raw, json)
Hash identifier:          WMCqrwkYvjExvnbNcqajNZAo1i/Tb0POH4bWarU5OwQ=
Subject key identifier:   DB:20:46:79:37:AC:4B:06:B6:18:C0:4F:EB:AD:49:45:7D:C4:E3:5D
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       205CFB3A96701D54028462AD7740376D9BB1B5C5
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32312d3231203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:04 +0000
ROA not before:           Wed 03 Apr 2024 23:03:04 +0000
ROA not after:            Wed 02 Apr 2025 23:08:04 +0000
asID:                     262798
IP address blocks:        186.236.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5c:fb:3a:96:70:1d:54:02:84:62:ad:77:40:37:6d:9b:b1:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:04 2024 GMT
            Not After : Apr  2 23:08:04 2025 GMT
        Subject: CN=DB20467937AC4B06B618C04FEBAD49457DC4E35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:05:35:d4:f1:af:bb:30:5f:55:5c:09:64:
                    5c:ac:bb:83:55:de:c6:ce:f0:83:af:d0:ba:50:54:
                    ff:91:a3:2d:3c:2b:f7:53:a0:8d:26:31:5e:5f:4d:
                    51:dd:a3:4d:a9:0b:d7:9c:bd:60:23:d8:81:70:b8:
                    ec:dd:74:2c:ca:84:c1:64:1f:56:a2:fe:cb:f2:d4:
                    fa:c1:b2:3e:c7:cf:fd:cd:c9:35:7c:9a:e9:bd:ba:
                    08:f0:bf:10:11:9f:fa:f3:f7:d9:dc:b1:bf:7f:1f:
                    c2:25:40:cf:a9:44:48:06:22:5b:f6:7e:56:56:8a:
                    c7:09:6b:aa:18:3f:d4:23:47:d4:e6:72:60:91:a9:
                    94:4a:1d:40:fd:a1:77:28:a6:fc:0a:d9:36:06:8b:
                    09:aa:13:cc:63:dd:f9:67:45:99:0f:be:54:e2:ad:
                    0b:01:67:20:d8:32:b9:60:ad:5f:97:41:44:f9:a6:
                    a4:89:6a:87:29:55:99:02:c2:a4:6d:7e:ea:75:a9:
                    89:20:67:c4:56:38:4b:c6:cc:b9:5e:d0:f0:24:78:
                    37:37:d7:36:88:86:88:78:3b:62:ee:cd:b8:8d:34:
                    eb:c8:a9:e9:47:ff:aa:35:41:71:c1:70:5d:42:97:
                    e8:2e:86:b0:66:da:92:a0:69:7c:69:f9:ee:84:89:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:46:79:37:AC:4B:06:B6:18:C0:4F:EB:AD:49:45:7D:C4:E3:5D
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32312d3231203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:ca:11:c2:26:e0:01:8a:29:07:cc:3d:7e:58:e7:7f:ee:
         b9:af:02:93:47:00:96:a6:7e:7a:fd:95:4c:19:4c:33:82:50:
         19:e2:6e:b9:f8:a1:7c:e8:db:cf:1b:df:49:ad:c1:b0:e6:fa:
         e1:b9:fe:39:8d:31:48:d3:6e:70:ea:ba:1f:6d:54:78:04:9d:
         f5:a6:ce:55:ef:bd:82:35:4b:85:72:9f:6e:b1:d7:31:36:41:
         c2:31:65:b2:0f:ca:c2:21:d6:9f:c4:ef:97:23:f4:5c:e0:7a:
         d2:dd:fa:7d:af:5f:a5:33:40:d3:24:46:fd:77:f9:5c:c7:37:
         7a:b6:d3:88:78:d4:4f:95:89:54:9f:f5:4c:02:83:8a:62:b7:
         15:ee:fc:63:02:e6:16:a4:ea:8e:94:72:c0:45:a2:36:3f:8c:
         f2:ac:eb:50:b3:01:64:7c:e8:21:29:c0:2d:ef:be:84:c3:8e:
         55:29:0c:ba:ea:82:a3:95:cd:ad:1a:e5:ca:87:d9:1f:d2:77:
         eb:b4:2b:1f:68:c3:e8:73:1b:a1:03:6f:9f:3d:71:ff:cc:c2:
         bc:fb:5b:8f:ca:8b:19:7d:a1:66:79:14:3e:12:0b:f3:42:dd:
         d6:62:82:66:77:58:9f:6a:b4:f1:2f:18:2e:2b:53:67:70:42:
         f6:9c:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org