Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          jllgwvRdzO6Xj+iZ3DcDCHvQ9IrXiniRy9SzmAndoX4=
Subject key identifier:   40:90:76:F9:F1:E9:DA:27:01:B1:D7:D9:16:BB:5F:BC:F8:1E:2E:76
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       52CB85888F04BC126CAC6EDCBE37A59BB6B19CD2
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:07 +0000
ROA not before:           Wed 03 Apr 2024 23:03:07 +0000
ROA not after:            Wed 02 Apr 2025 23:08:07 +0000
asID:                     262798
IP address blocks:        186.236.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cb:85:88:8f:04:bc:12:6c:ac:6e:dc:be:37:a5:9b:b6:b1:9c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:07 2024 GMT
            Not After : Apr  2 23:08:07 2025 GMT
        Subject: CN=409076F9F1E9DA2701B1D7D916BB5FBCF81E2E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:35:00:80:71:46:84:2c:53:aa:59:35:74:af:
                    cd:cf:8c:59:d2:97:4a:61:29:d4:55:54:14:c7:a8:
                    86:8a:53:fd:6a:4a:e1:e5:f0:2b:f4:c5:53:ea:cf:
                    df:9e:c5:59:ca:cb:c2:b7:d8:9f:87:7f:1f:ab:d6:
                    44:b6:85:92:dd:47:a4:ba:dc:8e:63:7a:87:d8:54:
                    6d:da:5d:52:e6:e3:13:91:c7:e1:a9:a8:b3:9f:6e:
                    d0:24:f5:14:55:28:d8:28:c6:5b:d3:bb:c7:cb:2c:
                    d0:f8:8d:85:bf:bf:c7:21:6c:87:06:c0:0a:c9:76:
                    6e:49:39:68:e6:14:e4:78:6b:75:a6:cb:f5:24:15:
                    05:24:22:39:0a:83:29:3c:90:11:3b:84:95:1a:aa:
                    02:8f:60:fc:3f:ae:ce:60:87:59:58:47:99:45:fe:
                    84:b0:be:e7:de:10:4b:c3:d6:09:89:43:ec:bf:fc:
                    1a:46:34:34:c6:4e:5c:51:e2:9b:93:9c:76:da:61:
                    32:66:33:a3:a7:27:41:cd:2a:88:df:2e:c6:76:c4:
                    1a:c9:26:42:5d:57:cc:51:87:c8:6e:e2:67:82:0e:
                    ed:fa:65:be:57:f0:44:5d:fa:1a:68:5b:b1:13:92:
                    1f:44:20:8a:75:e7:69:b1:a1:31:ae:7a:f2:44:42:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:90:76:F9:F1:E9:DA:27:01:B1:D7:D9:16:BB:5F:BC:F8:1E:2E:76
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35312e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:60:2e:15:fb:78:49:49:a7:96:ba:db:3e:69:92:82:4d:2f:
         79:fd:8e:07:02:98:6c:27:55:db:25:13:e0:56:0e:c9:ec:01:
         7c:63:41:f9:ce:b2:a6:02:29:84:b7:f4:30:01:5b:d7:21:2d:
         e3:57:f9:7e:f7:a3:c8:7e:7b:46:5f:fb:86:f8:63:54:2c:af:
         c6:44:04:b9:f0:4d:35:81:21:ee:fe:a5:e7:ed:c6:24:90:ca:
         3a:c1:85:0f:2b:51:69:ec:42:67:0c:fe:e5:c9:06:90:63:e9:
         ed:d6:12:c2:07:bd:77:5f:fe:c0:ab:a4:53:d4:bf:e7:1a:37:
         5b:55:bc:0a:b5:ab:aa:a4:8e:63:8f:cb:b5:89:13:c6:f6:1e:
         e0:cf:f4:d5:97:db:67:e4:ad:7b:57:95:63:29:9f:4c:90:33:
         92:1e:fa:89:1b:13:ea:ea:07:5b:cd:53:85:20:ab:19:c6:d3:
         47:41:a7:1f:78:d2:e0:9c:15:52:4f:86:c7:4d:70:9b:68:c2:
         4c:ea:54:5f:80:24:fd:53:d1:09:81:91:49:cf:6e:34:78:89:
         70:4a:73:0e:2e:87:dd:a4:59:6f:dc:d3:3a:50:24:42:63:7e:
         30:cf:db:e9:ef:19:1c:7c:2c:8b:67:b1:2a:12:4b:d5:2a:d8:
         86:a7:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org