Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          OvfjqzQWXIkIfp5iYsOTCWYLNB6tjka9+UQ4no2ri78=
Subject key identifier:   19:3A:3F:07:3B:C3:DF:28:28:27:27:C3:B0:31:3A:EC:4B:AD:1B:89
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       59E706A433312CBA26F8E138D3C5CCF8A62477FE
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:07 +0000
ROA not before:           Wed 03 Apr 2024 23:03:07 +0000
ROA not after:            Wed 02 Apr 2025 23:08:07 +0000
asID:                     262798
IP address blocks:        186.236.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e7:06:a4:33:31:2c:ba:26:f8:e1:38:d3:c5:cc:f8:a6:24:77:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:07 2024 GMT
            Not After : Apr  2 23:08:07 2025 GMT
        Subject: CN=193A3F073BC3DF28282727C3B0313AEC4BAD1B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:a2:6f:67:4b:55:a6:ab:7d:a6:07:6a:50:
                    31:04:88:c4:3c:3e:7f:a4:b1:7d:c6:79:8f:a3:31:
                    1a:43:51:b7:a4:8b:38:6c:ff:ae:67:b7:19:5d:d3:
                    df:0a:d8:86:57:d7:b9:20:95:b9:f7:18:ba:71:bc:
                    87:47:e1:0c:18:cf:4a:c6:94:6e:00:63:39:00:89:
                    73:d4:74:6e:29:a3:10:93:ad:73:2e:88:85:8a:25:
                    a0:e9:c0:d5:3e:92:cf:c3:8b:c9:1c:e2:ac:9d:6c:
                    e1:74:4c:82:a1:8f:3e:31:aa:6d:bc:f1:8f:94:c5:
                    7a:11:8e:32:38:99:e1:61:91:5a:43:b5:e7:78:d5:
                    4c:b8:a7:85:02:25:5e:e3:b1:70:e7:61:32:33:19:
                    6b:96:aa:f2:b6:44:7f:36:f0:c2:ae:b9:58:70:db:
                    e0:98:ac:b9:95:ee:e7:93:a0:12:9e:35:77:52:b4:
                    ee:03:0e:b1:4b:30:ca:2b:36:f0:98:48:08:9e:e5:
                    46:47:4e:61:e9:c1:a3:34:31:d6:29:e4:42:0f:ba:
                    fa:eb:f8:7c:23:9a:b1:3d:f5:5f:35:d1:b2:07:83:
                    de:63:b6:b9:91:48:f9:c7:99:5f:84:a4:54:51:65:
                    92:31:c4:4a:61:1c:1a:fd:5c:db:45:d7:16:68:c7:
                    19:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:3F:07:3B:C3:DF:28:28:27:27:C3:B0:31:3A:EC:4B:AD:1B:89
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34392e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:97:f1:cc:af:ef:59:e4:6b:65:33:77:6c:0f:11:4b:80:0d:
         2e:a9:57:dd:30:7e:96:fe:a1:8f:88:9f:b2:12:5d:44:7a:bb:
         e0:8c:c8:08:3e:17:21:a4:77:a3:f5:c5:1d:86:60:03:71:a8:
         1a:bd:e4:0b:b3:ff:81:74:29:c9:42:33:e4:33:03:9d:8e:e4:
         02:20:15:af:23:32:ca:7c:e2:b6:f0:7a:75:9d:a4:f3:f7:ed:
         14:6f:56:d7:50:26:67:bd:76:99:db:a5:48:a8:b7:d9:7f:5a:
         5a:81:4f:c9:db:b9:bc:c1:4e:cf:fc:9c:1e:ba:01:7f:71:2f:
         0d:9d:79:86:a8:08:82:4e:70:d2:b5:74:f3:4e:67:ac:c3:09:
         44:93:3a:d2:a9:c0:e8:1a:6e:c0:a0:2a:eb:e1:13:4c:a4:2d:
         07:a6:5d:01:8d:a0:6d:b1:dd:56:2b:d3:14:9a:62:95:b7:01:
         49:87:5a:6f:b7:9e:96:e5:21:17:eb:d8:ab:e2:33:39:2a:7e:
         1b:99:a9:ec:1f:83:49:b0:2a:ae:e5:d4:75:64:1a:5e:58:35:
         a6:20:d4:f9:90:26:af:2c:53:94:42:ce:c4:88:64:9b:1a:db:
         c2:1f:ea:a3:dd:46:6b:a4:43:40:3f:e1:45:2a:80:fa:89:54:
         fc:18:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:53 2024 by rpki-client on console-ams.rpki-client.org