Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          oV9aQxVRgeCnr/FS54gZk15u5H33F7QBkvB8b637rCI=
Subject key identifier:   FD:E0:A4:3D:7F:8F:9E:47:B6:7C:E0:88:73:0B:66:68:F4:8E:B7:7A
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       6B3E8ABE7DE1FBEC03CE7858E968D14DFA0DAA67
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:03 +0000
ROA not before:           Wed 03 Apr 2024 23:03:03 +0000
ROA not after:            Wed 02 Apr 2025 23:08:03 +0000
asID:                     262798
IP address blocks:        186.236.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3e:8a:be:7d:e1:fb:ec:03:ce:78:58:e9:68:d1:4d:fa:0d:aa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:03 2024 GMT
            Not After : Apr  2 23:08:03 2025 GMT
        Subject: CN=FDE0A43D7F8F9E47B67CE088730B6668F48EB77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:70:b1:d9:61:d7:8f:53:ad:05:8f:38:67:
                    e0:ca:78:55:40:d3:89:32:58:f5:ca:3c:fd:e1:d3:
                    d4:23:a3:85:b6:37:df:fb:2e:7a:75:41:6b:39:10:
                    01:41:5d:51:18:48:20:f8:50:3a:2c:2d:10:06:8c:
                    e3:4c:3a:0b:61:46:72:21:12:e5:0b:a6:73:74:15:
                    43:00:05:b8:85:f0:c5:e4:18:6c:c4:3f:91:d8:01:
                    c4:42:10:23:14:2c:fb:33:03:d7:e5:18:db:6b:4f:
                    ad:0a:98:f5:84:e2:f3:88:86:8d:e2:0b:69:13:5f:
                    cc:5e:02:e5:da:1f:42:cb:ed:d8:27:01:23:a5:c1:
                    4a:31:a8:74:a8:38:a1:da:24:3c:9f:29:92:1a:06:
                    85:fd:99:eb:7a:4b:11:fd:57:78:c6:1b:1a:64:c5:
                    c4:ab:a3:dc:67:ca:43:99:94:89:b5:72:35:ee:f4:
                    9e:e0:ba:a4:8f:35:57:b3:c7:c5:c3:27:8d:59:0b:
                    6d:2c:58:9f:0c:0d:83:b0:46:3c:63:c3:18:54:8c:
                    74:4d:65:38:51:60:67:d1:a2:6e:9a:6c:5e:86:dd:
                    0c:fa:58:34:34:95:bc:52:e2:8e:54:78:10:90:53:
                    59:d2:e2:32:f3:7d:d2:ae:a3:48:58:f8:22:d8:71:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:A4:3D:7F:8F:9E:47:B6:7C:E0:88:73:0B:66:68:F4:8E:B7:7A
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:5f:b0:2d:22:7a:80:2b:aa:4a:1a:72:bf:52:53:56:14:08:
         e1:54:fe:4a:ea:eb:d0:49:57:f1:bb:80:2b:59:7c:1c:6b:3b:
         35:67:bb:04:d3:9c:37:5c:52:46:70:f0:c9:43:5a:09:0f:eb:
         23:92:ab:b6:10:30:d5:d0:f3:e5:c0:3e:57:70:72:42:29:60:
         12:a1:0e:5c:da:a6:5b:50:00:29:66:43:75:74:42:30:83:b4:
         86:cb:9b:13:0e:89:11:1e:1f:55:58:8a:cf:3e:d6:cd:14:93:
         e2:a6:e6:56:58:c1:e8:6c:38:32:ec:a3:91:5c:a7:2c:72:27:
         20:34:bb:1d:5e:d8:6e:e9:7d:d4:b8:ca:5f:97:fe:aa:f8:15:
         41:99:46:90:17:36:05:aa:48:40:ac:a3:41:6e:5b:8a:e7:52:
         e2:5c:7b:3c:62:7a:fb:e7:12:a4:b9:56:c3:1a:5b:bd:e1:bc:
         7a:27:18:69:8f:fa:d0:5b:c3:b7:59:cc:42:dd:0d:06:18:08:
         6c:dc:6f:5d:a2:3e:58:14:c3:41:97:60:9d:d8:0c:34:5c:57:
         d3:f1:af:d9:2e:b0:c8:30:55:db:06:85:2b:83:8c:ab:1e:e6:
         21:b4:85:3a:c4:06:92:b8:dd:09:5e:19:4e:3c:89:2f:d1:1e:
         74:07:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org