Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          Qd8Hvf2u4x+YpA0X+NN9GX5aQkuVd68O7rA6yj5mGwg=
Subject key identifier:   3D:C3:6E:A8:2E:09:2B:53:B4:55:57:CD:77:85:F0:A3:DA:FD:CF:92
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       38E1A346996FD81B29A816C1DD6197F5E382278E
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:54 +0000
ROA not before:           Wed 05 Mar 2025 23:54:54 +0000
ROA not after:            Wed 04 Mar 2026 23:59:54 +0000
asID:                     262798
IP address blocks:        186.236.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e1:a3:46:99:6f:d8:1b:29:a8:16:c1:dd:61:97:f5:e3:82:27:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:54 2025 GMT
            Not After : Mar  4 23:59:54 2026 GMT
        Subject: CN=3DC36EA82E092B53B45557CD7785F0A3DAFDCF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:5b:50:a1:96:6e:4a:80:e9:06:44:cc:a4:
                    40:01:25:a7:6b:2c:18:c8:cc:fb:b1:82:a9:5a:b0:
                    1e:ee:2b:87:12:a0:9d:81:84:87:38:a7:b6:67:48:
                    2e:d1:25:23:01:e6:cc:e2:e3:f6:bc:ce:2e:fb:3d:
                    2d:4f:63:92:7b:02:22:d7:03:83:7f:fd:06:fd:01:
                    60:cf:ef:a4:7d:e5:26:b7:2f:7c:71:02:83:54:d1:
                    d6:54:f7:fb:e9:2c:23:2c:82:cc:3c:27:e1:44:61:
                    b5:f2:9a:33:5c:96:5e:53:d3:2e:f2:8a:33:06:65:
                    26:6a:fb:3f:10:17:e6:88:5e:24:cc:8f:0b:aa:38:
                    3a:c7:33:a8:7f:80:ae:47:9f:60:d1:cf:88:fd:db:
                    5c:09:bb:77:7d:f7:07:3e:f1:d7:ed:c3:a7:37:3d:
                    b4:ec:11:25:3e:45:fd:cf:98:db:ba:f1:8f:f2:75:
                    e6:8e:03:3d:1a:d6:d8:c1:50:cb:f2:6b:8b:be:e8:
                    0c:2a:7a:61:ed:9b:e0:3e:ce:fa:0e:67:c7:7a:87:
                    d7:fa:94:ae:8f:66:62:4b:36:7e:6f:23:cc:75:48:
                    7e:9e:63:c0:c8:95:b3:af:39:93:30:be:eb:24:02:
                    85:62:0e:b1:65:7e:f1:be:69:9f:1a:e5:23:93:54:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C3:6E:A8:2E:09:2B:53:B4:55:57:CD:77:85:F0:A3:DA:FD:CF:92
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:52:00:21:31:7f:d4:10:a2:b5:60:25:ef:3b:27:8e:51:
         7a:4d:11:31:cd:b6:2d:46:3f:7b:02:79:c3:4a:35:16:d7:91:
         8d:64:2a:42:d5:c1:c8:b5:b9:d4:68:ae:00:3f:df:5d:78:3d:
         5a:fd:1e:ef:49:0b:91:dc:9e:c8:1f:4e:2b:db:52:3c:36:7f:
         74:59:20:c4:c7:dc:46:a0:6f:52:39:56:1f:bf:00:fb:ab:a9:
         26:6a:0d:71:36:18:e7:df:02:44:34:95:6c:94:67:c4:25:cd:
         b8:da:29:68:2a:01:62:39:6a:1e:91:33:11:62:d5:7f:4b:49:
         2b:74:06:9f:c7:2d:cc:47:c2:11:f2:6f:be:f9:f8:14:e9:cd:
         48:f2:c0:b4:54:ec:8e:3e:02:2d:14:18:49:90:bc:9c:20:af:
         ad:2f:d4:fa:26:6b:5b:ce:27:08:25:41:e2:fd:30:b8:8b:d1:
         32:ab:b0:dc:7a:76:17:f2:1f:2a:45:c1:69:b5:78:15:a5:ec:
         b0:4b:b0:8a:e0:04:f7:06:49:57:e8:b6:53:29:ab:23:86:e9:
         42:e8:ab:0a:b7:23:41:82:fd:d4:a3:d9:01:4e:5f:d7:f3:5c:
         81:c4:8f:11:77:81:7f:ea:d2:02:70:b0:4f:82:a5:f5:98:f5:
         a0:0b:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:15:42 2025 by rpki-client