Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35322e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          rBsgJtm6WKcv3AsL/uxM1cHvHfq+WahaRyAq0mjSi2c=
Subject key identifier:   DB:A7:23:DE:82:0F:44:67:90:DB:07:6E:EE:5F:D3:AD:09:48:B2:D4
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       5604B37CD9B6814ECF6FA662FBDD9921EBB11A7A
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:07 +0000
ROA not before:           Wed 03 Apr 2024 23:03:07 +0000
ROA not after:            Wed 02 Apr 2025 23:08:07 +0000
asID:                     262798
IP address blocks:        186.236.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:b3:7c:d9:b6:81:4e:cf:6f:a6:62:fb:dd:99:21:eb:b1:1a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:07 2024 GMT
            Not After : Apr  2 23:08:07 2025 GMT
        Subject: CN=DBA723DE820F446790DB076EEE5FD3AD0948B2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:b2:eb:3e:f1:06:fc:10:63:fc:69:70:1d:
                    d9:f9:e3:72:70:c5:75:41:47:22:fd:ff:a4:9a:be:
                    4e:7a:3c:71:43:5b:a8:ba:bc:80:91:70:77:e4:fe:
                    60:b3:03:7b:38:5b:8c:09:6a:47:95:f7:90:50:f4:
                    aa:a7:05:25:dc:b5:41:b2:4a:b9:6b:45:18:16:01:
                    19:36:57:8d:18:9e:7f:fb:27:07:fa:84:a1:e6:49:
                    6b:69:49:00:b4:5e:4a:c0:5e:2c:d6:4f:22:30:a3:
                    5e:3b:db:fd:13:34:a2:e4:0f:c7:12:6d:92:5a:a8:
                    52:61:53:23:04:e0:cf:8a:68:cd:18:fe:96:eb:0b:
                    3c:c2:6d:d4:df:59:24:9f:f8:4b:51:5a:d6:e2:4b:
                    65:d6:17:5b:06:99:61:2c:2e:da:09:e1:fb:e6:4e:
                    e1:fe:9a:77:85:c6:22:f7:04:86:c5:1a:83:6d:09:
                    15:bf:5f:2e:54:3e:a4:cd:db:c3:55:37:41:45:e9:
                    78:97:42:22:81:d2:c5:ea:fa:5e:aa:57:95:36:8b:
                    75:dd:31:d3:7f:45:16:5a:29:7d:d4:30:f1:69:45:
                    d4:c9:f2:c5:da:f3:8a:00:83:be:81:65:27:9f:89:
                    86:9b:29:b4:15:46:83:76:1c:9b:3c:e1:9d:46:da:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A7:23:DE:82:0F:44:67:90:DB:07:6E:EE:5F:D3:AD:09:48:B2:D4
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35322e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:96:c2:ce:6e:8d:95:ab:2f:ab:c5:65:95:fd:b1:e3:ba:aa:
         af:23:c4:40:f7:f8:35:62:df:85:5e:0a:f8:2a:14:a2:c7:0a:
         e6:e7:87:5b:3e:fb:4b:f0:94:2a:f2:1f:ac:d6:a9:04:71:15:
         f4:a6:1b:f6:be:ca:6c:8f:eb:a8:3d:e0:ba:b9:a6:68:d1:0b:
         ca:29:c9:a8:9d:63:b1:09:8a:51:7b:d8:94:d5:b2:a3:e0:84:
         10:c1:ae:69:b9:60:43:78:bc:4f:92:a3:91:3d:52:88:11:ee:
         0a:56:2f:1d:e4:c9:86:f4:e9:da:10:1e:77:63:a0:18:e5:74:
         92:25:90:e6:da:b7:73:d2:98:18:60:a9:1d:29:20:48:34:fb:
         f6:ca:16:1a:01:64:30:7a:19:28:e0:86:d1:5e:a4:09:b3:85:
         69:73:af:a4:b6:a7:85:12:3b:7a:db:02:19:98:98:74:ee:25:
         c5:20:09:95:cf:8f:2c:fc:03:e9:89:e5:d9:5f:c1:fb:03:29:
         62:99:c5:48:3d:12:03:17:82:88:26:4c:bb:9d:53:8d:9b:49:
         da:34:5f:dc:60:6f:a4:c4:ad:8d:36:84:86:39:55:da:a2:1f:
         81:8d:95:8c:d5:cb:d6:f7:5b:6c:69:33:59:93:21:2f:b9:07:
         fd:79:81:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVgSzfNm2gU7Pb6Zi+92ZIeuxGnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNDA0MDMyMzAzMDdaFw0yNTA0MDIyMzA4MDdaMDMxMTAvBgNV
BAMTKERCQTcyM0RFODIwRjQ0Njc5MERCMDc2RUVFNUZEM0FEMDk0OEIyRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgrLrPvEG/BBj/GlwHdn543Jw
xXVBRyL9/6Savk56PHFDW6i6vICRcHfk/mCzA3s4W4wJakeV95BQ9KqnBSXctUGy
SrlrRRgWARk2V40Ynn/7Jwf6hKHmSWtpSQC0XkrAXizWTyIwo1472/0TNKLkD8cS
bZJaqFJhUyME4M+KaM0Y/pbrCzzCbdTfWSSf+EtRWtbiS2XWF1sGmWEsLtoJ4fvm
TuH+mneFxiL3BIbFGoNtCRW/Xy5UPqTN28NVN0FF6XiXQiKB0sXq+l6qV5U2i3Xd
MdN/RRZaKX3UMPFpRdTJ8sXa84oAg76BZSefiYabKbQVRoN2HJs84Z1G2jqhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU26cj3oIPRGeQ2wdu7l/TrQlIstQwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67DQwDQYJKoZIhvcNAQELBQADggEBAGKWws5u
jZWrL6vFZZX9seO6qq8jxED3+DVi34VeCvgqFKLHCubnh1s++0vwlCryH6zWqQRx
FfSmG/a+ymyP66g94Lq5pmjRC8opyaidY7EJilF72JTVsqPghBDBrmm5YEN4vE+S
o5E9UogR7gpWLx3kyYb06doQHndjoBjldJIlkObat3PSmBhgqR0pIEg0+/bKFhoB
ZDB6GSjghtFepAmzhWlzr6S2p4USO3rbAhmYmHTuJcUgCZXPjyz8A+mJ5dlfwfsD
KWKZxUg9EgMXgogmTLudU42bSdo0X9xgb6TErY02hIY5VdqiH4GNlYzVy9b3W2xp
M1mTIS+5B/15gbs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org