Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          susMRv6C46130DNpvzA1grhFvw4NcgkEodUDh+8cMro=
Subject key identifier:   E0:F9:AB:82:98:0F:A8:28:F8:46:C9:7E:23:B3:01:C9:57:B9:32:29
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       0E7B5E2149F26CC6B615A0818FA77F0A03A5F4F7
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:08 +0000
ROA not before:           Wed 03 Apr 2024 23:03:08 +0000
ROA not after:            Wed 02 Apr 2025 23:08:08 +0000
asID:                     262798
IP address blocks:        186.236.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:5e:21:49:f2:6c:c6:b6:15:a0:81:8f:a7:7f:0a:03:a5:f4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:08 2024 GMT
            Not After : Apr  2 23:08:08 2025 GMT
        Subject: CN=E0F9AB82980FA828F846C97E23B301C957B93229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:ed:0c:ea:ec:ed:1a:c5:27:cb:d7:80:51:
                    d2:00:d6:93:5b:e2:22:31:a6:a8:d2:30:a5:a3:5d:
                    6b:4b:4a:56:86:42:76:08:e2:68:c5:ca:fd:0d:e1:
                    6a:71:13:c5:ab:ba:ac:b6:7a:ae:c1:0c:05:8a:cc:
                    bf:bb:d0:bb:cf:61:b7:03:07:44:cf:4a:7d:82:1d:
                    b2:b4:b5:00:1d:ba:ad:00:3d:8a:fd:d3:40:a6:d9:
                    05:3d:26:c3:e1:ff:0f:55:5d:1e:b1:97:3b:a0:b0:
                    a8:fb:2d:a0:55:22:88:a1:2f:b1:fb:ff:ce:ad:bc:
                    1f:a5:a0:7e:c0:a3:d1:e7:df:4c:d7:58:69:cf:23:
                    52:95:7a:4c:5b:25:b6:32:1f:b4:ad:82:83:37:34:
                    e5:32:30:3b:3f:a3:07:d3:a3:d3:cf:0f:f6:b3:74:
                    b8:67:d3:d2:2e:79:87:1e:89:71:16:43:6e:c4:78:
                    e8:d3:f7:89:79:3e:df:50:7d:56:47:e1:a8:2a:f3:
                    cb:d5:bc:f7:54:fd:b1:d2:31:f7:c0:4c:7e:72:e4:
                    de:78:ba:77:5b:ec:6a:b7:21:53:71:85:2b:be:10:
                    ee:6e:f3:d6:14:22:95:98:40:31:ba:76:45:c2:83:
                    b8:cb:57:92:7d:ce:d3:ba:47:40:90:22:41:fb:04:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F9:AB:82:98:0F:A8:28:F8:46:C9:7E:23:B3:01:C9:57:B9:32:29
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35302e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:c4:c0:76:7e:63:1f:ca:d9:5d:20:8d:22:49:d8:19:eb:
         1d:d6:3f:f3:2f:3f:61:6e:c9:b2:a2:65:0c:49:fb:07:c6:c2:
         11:b9:94:bd:d8:e6:e9:97:0e:7e:bf:58:32:35:e5:4d:01:d1:
         c7:08:33:f5:12:a0:66:24:99:23:76:00:e2:8f:46:5e:b4:db:
         dd:29:69:c7:63:3e:b4:dc:53:46:60:aa:56:b9:06:6f:21:ee:
         3a:6f:49:58:8d:e8:e4:e1:6e:1f:c7:13:bd:f6:bd:ce:ae:62:
         0b:32:09:1d:12:2a:89:bd:1e:9c:76:7c:23:aa:2d:82:19:86:
         1c:23:ab:38:06:21:94:c6:5d:39:a0:2b:50:d4:dd:a3:e1:f2:
         96:09:d3:61:2f:7d:19:46:9f:df:9f:09:21:2b:65:fb:00:48:
         71:ad:1d:aa:b4:87:89:62:80:19:26:3f:fe:d0:ed:e7:5f:64:
         9e:43:30:b0:f9:8a:7b:cd:f6:73:2c:0d:46:f3:e9:ef:8b:7d:
         66:28:8a:e2:7d:8a:f5:a6:62:9b:c7:54:8d:2f:dc:15:b8:87:
         a1:f0:64:66:e5:3a:1c:bf:12:5d:eb:77:7d:ed:62:f2:0b:f1:
         6d:3c:bd:da:b6:f8:0c:6c:d6:5a:1a:9f:a0:da:a3:3a:22:43:
         65:7c:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org