Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35322e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          ugBRgmvC3ISFDksZLWmwRRnuXxmiIEgRe4SJkXeCP+0=
Subject key identifier:   A2:C8:AB:3C:93:EA:46:CD:73:AD:60:EE:A8:0F:C7:27:62:AA:22:FB
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       2CE4CB13567D72F5C9CAD5572EEFD9F46EEDD4AE
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:08 +0000
ROA not before:           Wed 03 Apr 2024 23:03:08 +0000
ROA not after:            Wed 02 Apr 2025 23:08:08 +0000
asID:                     262798
IP address blocks:        186.236.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e4:cb:13:56:7d:72:f5:c9:ca:d5:57:2e:ef:d9:f4:6e:ed:d4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:08 2024 GMT
            Not After : Apr  2 23:08:08 2025 GMT
        Subject: CN=A2C8AB3C93EA46CD73AD60EEA80FC72762AA22FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:67:26:36:59:84:78:ea:0a:99:9c:a6:67:
                    65:0a:ef:ba:84:7e:bb:65:c3:16:9a:4e:d6:4e:19:
                    fe:51:78:0c:ec:b2:cf:f7:4f:90:72:c0:63:26:2f:
                    c8:47:fe:2c:34:ee:9c:71:78:d3:90:6d:6b:22:55:
                    06:1d:70:de:d8:26:8c:c3:e6:0b:1f:9a:ff:2a:6d:
                    0a:c5:4d:2d:04:aa:77:7c:76:26:d5:54:d9:f8:c9:
                    d0:99:90:a4:83:81:0c:d6:ef:0f:9d:74:d5:b6:f1:
                    50:ff:13:7a:ef:83:62:31:50:b1:40:29:14:3b:00:
                    0a:96:67:17:d7:ff:2a:6a:16:ab:99:dc:23:c2:98:
                    5a:df:09:2d:57:bc:0d:6d:42:4b:30:b3:a7:22:cd:
                    b8:0a:b1:63:8c:1f:a0:28:44:54:d8:ac:83:94:5c:
                    e4:06:a4:10:b1:2e:d9:7e:4d:ab:9a:4a:3e:d7:83:
                    1b:93:74:00:e7:06:73:34:f4:a9:00:89:74:a6:af:
                    1a:7c:de:a9:a0:4d:09:17:be:57:20:7d:25:e2:cd:
                    bd:9c:a1:1e:f7:71:2c:27:2b:af:fb:79:38:63:8a:
                    66:9a:14:4a:33:65:32:d4:b8:ec:fa:eb:1a:8f:51:
                    7b:d3:6a:1c:f8:0e:7d:71:03:30:82:57:21:e4:8e:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C8:AB:3C:93:EA:46:CD:73:AD:60:EE:A8:0F:C7:27:62:AA:22:FB
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:c9:27:d0:d5:4b:5b:cc:0b:c0:a7:4a:ad:db:bc:1c:90:c2:
         2a:b7:9b:0b:06:65:d7:ca:3c:31:bb:02:1b:5d:2c:71:73:34:
         14:12:8a:57:c7:c2:6d:ad:c3:96:69:db:74:d7:89:4f:59:58:
         5d:e2:a7:b7:d1:19:17:90:a2:2a:2f:6c:f2:62:17:43:f0:2f:
         83:93:3f:f7:6d:6d:d5:1c:c8:7c:b6:27:b9:dd:4d:4a:ea:3b:
         c8:ec:ed:dd:a3:89:4a:6b:73:0f:c4:75:78:4a:8a:18:c5:1a:
         ec:af:e8:9d:11:f6:d3:51:40:22:d4:c3:90:b4:ad:d5:ca:ab:
         f0:85:ac:39:77:c1:6d:ac:f6:38:e0:3a:ab:eb:d9:e1:96:a0:
         f7:39:3b:66:a0:4d:fa:b5:73:4a:f3:71:87:43:28:3c:18:79:
         28:36:ac:da:a6:05:92:31:e4:be:7f:58:cb:24:1b:28:a1:39:
         82:eb:b5:f6:ab:db:53:58:dc:d1:a4:c7:3a:72:64:2f:a6:ad:
         21:ab:eb:d8:e2:2f:e4:31:11:3a:0f:44:53:39:d8:5e:52:62:
         54:ed:ef:88:37:8b:0d:01:4b:a9:af:72:7b:74:6a:6e:0b:75:
         83:58:d7:27:fe:d1:15:fe:9d:3b:21:03:99:7b:54:70:e2:bb:
         bc:95:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org