Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          wnLrb2ZRU4f1nAdWCE5nqDu8GbU394Cvbygl/9hffRc=
Subject key identifier:   D4:95:8F:07:00:37:FB:BD:4A:84:49:33:94:A6:98:2E:F6:DD:C6:DC
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       23968680A28E1385C1F7C244436C02EBC5EB7E22
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:52 +0000
ROA not before:           Wed 05 Mar 2025 23:54:52 +0000
ROA not after:            Wed 04 Mar 2026 23:59:52 +0000
asID:                     262798
IP address blocks:        186.236.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:96:86:80:a2:8e:13:85:c1:f7:c2:44:43:6c:02:eb:c5:eb:7e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:52 2025 GMT
            Not After : Mar  4 23:59:52 2026 GMT
        Subject: CN=D4958F070037FBBD4A84493394A6982EF6DDC6DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:5c:f4:5b:fb:d5:78:21:72:6a:f1:ee:0c:
                    c4:54:13:34:f2:b0:86:d6:c7:78:46:f0:bc:5d:26:
                    ff:15:23:02:67:7d:f9:69:16:cc:45:a0:3b:b7:db:
                    90:b9:ea:3c:bd:16:df:04:c4:a5:f5:b9:56:e8:ee:
                    43:9a:90:97:90:9d:fe:04:74:8f:8b:f9:bf:13:ac:
                    07:7a:37:2f:c1:39:1b:a5:45:91:6c:55:6c:14:0e:
                    5f:2a:21:ce:97:2e:c7:9c:80:d9:a7:a1:97:82:bc:
                    38:62:dc:ba:cd:da:96:3a:03:f4:de:00:fb:47:2f:
                    1e:e2:47:5f:02:1c:8a:58:7e:5f:df:43:58:3f:ee:
                    e4:8f:bd:69:a9:a2:0b:ff:50:8f:a6:5f:ef:1f:75:
                    ee:9e:6c:77:83:89:01:81:e7:fb:e6:2d:c9:bd:6c:
                    d8:d3:e2:a2:6f:2e:dd:ec:66:6a:03:08:7c:dc:be:
                    3c:a8:ff:a5:81:ec:04:12:2e:65:54:d0:48:15:75:
                    cc:8e:06:d9:7f:be:da:ad:2b:e1:87:fb:22:d2:b1:
                    9f:24:e1:1a:02:a4:f8:08:ea:39:15:c3:e5:78:86:
                    c8:52:ec:48:41:51:a2:03:56:75:bc:da:e9:89:9a:
                    4d:f4:7a:6a:a3:36:cf:7d:3c:49:a1:eb:1c:68:96:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:8F:07:00:37:FB:BD:4A:84:49:33:94:A6:98:2E:F6:DD:C6:DC
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:40:c0:2b:4f:7c:1b:c0:b0:ee:be:57:e4:b6:79:74:51:
         48:e8:c7:34:10:91:0f:c3:41:53:02:39:55:e0:b3:a3:59:83:
         7a:9c:37:25:ab:29:1d:f3:56:58:6b:3a:1b:80:a5:7a:ac:71:
         94:24:da:4a:3c:1c:93:5c:a3:55:67:df:65:59:fe:70:85:3e:
         17:c4:9b:3d:00:98:aa:62:9c:5e:0d:4d:88:1d:df:37:c8:09:
         75:05:35:8c:c8:2e:48:4d:0b:0d:82:e8:c1:c4:40:27:f3:b5:
         b8:79:45:92:65:b6:c6:79:9f:6a:a7:bc:61:e9:4c:aa:21:8d:
         10:c0:73:96:5d:c5:26:53:40:5d:ba:46:01:7e:01:07:86:d0:
         db:ae:11:d8:86:2a:3d:b2:90:f6:e1:4c:f5:69:ac:f6:20:69:
         c4:d2:d3:5a:c1:97:b2:bc:81:d0:92:c8:67:43:4b:8e:1b:1e:
         87:93:5c:68:05:ce:ad:2c:cd:2e:92:29:39:20:41:3b:93:40:
         df:a3:5e:75:88:fc:4a:03:92:b4:94:7f:a1:81:91:30:17:75:
         40:db:ec:0e:ae:bc:e7:7b:0f:d1:79:a3:51:77:1e:24:ec:3a:
         90:72:56:75:fd:00:64:88:51:ac:0b:52:6a:a1:8a:b3:93:cc:
         8f:3f:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:06:42 2025 by rpki-client