Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          IHGxkilcRB1Ms1Ovi18YNAdYHjZDlKbmmPpJ3BcIhn8=
Subject key identifier:   8B:1F:19:45:08:16:FA:D8:4B:38:96:17:DA:96:1E:DE:B0:BF:DD:25
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       642BCF8A4864DC563156B0C7F37E4740411EA421
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:05 +0000
ROA not before:           Wed 03 Apr 2024 23:03:05 +0000
ROA not after:            Wed 02 Apr 2025 23:08:05 +0000
asID:                     262798
IP address blocks:        186.236.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2b:cf:8a:48:64:dc:56:31:56:b0:c7:f3:7e:47:40:41:1e:a4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:05 2024 GMT
            Not After : Apr  2 23:08:05 2025 GMT
        Subject: CN=8B1F19450816FAD84B389617DA961EDEB0BFDD25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:27:ba:b4:e5:58:dd:30:59:27:ab:f6:8c:
                    a8:51:21:d2:2f:3d:58:df:4f:e4:56:07:70:8e:3d:
                    f4:57:c2:ed:a3:69:99:d1:a0:ba:5a:93:8c:5c:f6:
                    3a:26:d6:a3:87:5e:81:51:b5:b0:35:45:e2:a0:af:
                    b3:e1:af:33:30:e6:96:4b:11:e5:7e:eb:5b:98:f4:
                    5a:59:69:50:df:d0:fe:f2:97:99:c8:9c:4a:1a:2f:
                    4f:ef:13:ba:09:a7:f6:a6:ec:77:f5:c1:dd:f4:99:
                    e8:82:f0:15:64:67:5f:5b:cf:99:00:a6:f7:27:ef:
                    df:09:b1:a3:59:50:b2:81:bf:3e:0e:df:10:b0:9d:
                    64:cc:d8:72:a9:b7:c7:d6:16:25:2a:02:c5:ab:aa:
                    43:e9:73:c8:d5:1d:da:27:b1:6a:cc:e2:69:da:1c:
                    e5:c7:53:25:a1:d6:aa:ab:7b:de:d0:0f:e9:1e:f6:
                    a8:e7:78:ce:38:82:57:55:47:48:4c:d5:ee:b1:84:
                    7d:19:26:25:f7:0c:4d:c8:83:1e:6c:61:f1:1b:d7:
                    f0:d1:85:48:66:b5:f6:58:14:01:9c:a8:53:5c:33:
                    0d:15:57:2f:2f:a3:fc:33:78:7a:49:42:ef:22:e4:
                    aa:60:0c:42:cb:1c:56:f2:0a:69:c2:0b:f3:c7:16:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1F:19:45:08:16:FA:D8:4B:38:96:17:DA:96:1E:DE:B0:BF:DD:25
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:27:bc:92:1c:56:f8:51:d1:53:a0:ab:88:4a:f2:2b:ef:11:
         3b:38:0b:12:d4:da:ac:56:b2:b2:24:8f:02:29:dc:cd:51:42:
         b3:05:2c:84:e1:57:7a:3f:68:6e:c0:23:f9:38:a6:7e:7c:b3:
         51:18:79:30:1b:15:88:92:f0:b0:5a:8c:5e:7e:a1:51:cc:62:
         45:5e:28:2a:fe:fa:d7:79:8d:5c:b0:a4:65:35:9f:b4:f8:64:
         30:aa:1e:79:69:b8:07:20:1c:98:c8:34:5e:bc:fe:68:83:c0:
         a2:81:b6:30:2f:fb:8d:75:97:38:f0:ee:48:76:44:45:30:0a:
         f2:6d:61:d4:28:28:23:fd:6f:a2:32:3b:09:1e:44:62:ac:f7:
         92:46:58:96:ef:cf:63:47:58:d0:17:d5:04:74:f5:22:7e:80:
         46:0c:b0:98:a7:81:75:3a:fa:28:36:21:e7:5b:e6:97:86:66:
         af:8c:32:3f:cd:e7:2b:be:c7:09:5d:9a:d0:84:7c:35:5a:b3:
         22:f3:4b:8c:ed:8b:6b:e2:bd:70:f9:71:e3:4b:4d:21:ce:98:
         f5:68:ed:db:f7:a4:f8:1d:00:67:a9:c2:0c:3e:21:b5:8e:0a:
         0a:2a:68:15:8d:ad:32:2a:65:18:bf:52:60:c8:63:fe:85:be:
         80:f9:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org