Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          UeC2tswNiBCnMh5ehrMWK8el6aYeolN04P8qaWB26iw=
Subject key identifier:   BD:32:8C:A2:16:F2:2C:11:4C:8A:50:92:96:D4:B2:4F:67:5A:8E:E2
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       2FD2C4F68E978322BF6770A3503740AE93411B60
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:05 +0000
ROA not before:           Wed 03 Apr 2024 23:03:05 +0000
ROA not after:            Wed 02 Apr 2025 23:08:05 +0000
asID:                     262798
IP address blocks:        186.236.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d2:c4:f6:8e:97:83:22:bf:67:70:a3:50:37:40:ae:93:41:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:05 2024 GMT
            Not After : Apr  2 23:08:05 2025 GMT
        Subject: CN=BD328CA216F22C114C8A509296D4B24F675A8EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:cd:e9:16:c0:c8:1b:70:cb:a8:25:e1:05:
                    c7:7f:ad:a3:31:89:9d:5c:53:da:f8:eb:8e:f5:7e:
                    c1:47:6c:9f:cb:2d:8e:74:9c:aa:d2:9b:da:27:bf:
                    a9:47:bc:07:a3:f1:08:08:35:e9:22:c5:88:bf:f2:
                    f7:bd:79:85:4d:6f:be:66:94:38:f2:ee:a5:75:40:
                    7a:8c:10:7b:9f:f0:23:e8:cf:f8:21:a8:9b:a7:e6:
                    ec:01:28:47:eb:aa:60:2b:4d:10:b7:c5:bd:67:2d:
                    8f:bb:a9:fd:5d:dd:0e:82:77:e2:e1:ec:ae:96:fb:
                    95:a0:bc:bf:04:73:3d:e5:58:b3:74:b2:1d:bc:c0:
                    0e:38:0e:55:89:cf:cf:02:70:f9:37:10:1a:ab:1c:
                    a0:bd:c9:83:e0:1a:e6:44:70:fc:df:ec:36:7e:0c:
                    57:29:99:96:0e:a0:41:e6:70:7f:96:ef:ff:2d:14:
                    74:cf:f3:d2:ee:5c:05:5e:e6:13:0d:04:ba:34:4a:
                    17:7d:ce:14:c0:70:3f:b0:ec:5c:c8:c1:da:68:32:
                    e8:a8:43:b9:59:e0:51:c2:43:ee:7b:fa:5d:56:53:
                    91:8d:aa:7d:ab:84:9d:90:0d:03:6b:f4:39:59:81:
                    ef:b9:b5:43:b6:cf:df:1f:c0:0d:4a:c4:43:7f:be:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:32:8C:A2:16:F2:2C:11:4C:8A:50:92:96:D4:B2:4F:67:5A:8E:E2
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:47:fb:b3:22:54:b6:47:c0:74:df:4b:8f:7e:31:f6:3b:
         8a:a9:1a:cc:51:44:cf:1c:c2:e7:5a:f4:99:54:55:8a:28:6d:
         57:ef:26:c6:b8:0c:10:fb:af:d1:4d:9e:f5:33:23:0c:74:86:
         bb:f1:a7:04:53:80:06:22:de:92:6f:aa:ab:99:0f:34:44:8b:
         f2:e0:4b:26:6e:13:e5:66:80:be:8c:ed:e5:f7:64:75:df:99:
         85:39:0e:1d:b1:f7:00:fb:82:32:8d:c4:2a:64:26:c2:b1:bd:
         e0:07:86:b2:94:d2:c3:9a:34:df:b8:18:3d:d5:97:43:8e:6c:
         f9:b5:4c:73:9f:c2:d7:3c:a0:a2:bf:17:d8:db:6d:e8:e8:e5:
         10:8d:5a:93:f5:e9:7a:e0:d1:af:3f:5a:0f:29:31:8a:5d:a4:
         76:22:b9:dc:0e:5f:4a:d4:e2:92:4a:47:7f:06:66:43:c9:65:
         f3:a5:08:9d:51:a6:50:81:64:7f:f8:78:89:0c:d2:53:33:66:
         9f:99:4e:2a:64:4c:85:7d:ca:0f:27:50:54:1f:95:5e:4b:13:
         70:8b:ff:d7:4d:3d:91:4e:dd:12:3b:2a:bf:a4:46:2f:66:f7:
         c7:b8:88:35:88:16:48:91:94:2e:ea:f7:82:45:33:ef:c4:85:
         a4:7e:34:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL9LE9o6XgyK/Z3CjUDdArpNBG2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNDA0MDMyMzAzMDVaFw0yNTA0MDIyMzA4MDVaMDMxMTAvBgNV
BAMTKEJEMzI4Q0EyMTZGMjJDMTE0QzhBNTA5Mjk2RDRCMjRGNjc1QThFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEE83pFsDIG3DLqCXhBcd/raMx
iZ1cU9r46471fsFHbJ/LLY50nKrSm9onv6lHvAej8QgINekixYi/8ve9eYVNb75m
lDjy7qV1QHqMEHuf8CPoz/ghqJun5uwBKEfrqmArTRC3xb1nLY+7qf1d3Q6Cd+Lh
7K6W+5WgvL8Ecz3lWLN0sh28wA44DlWJz88CcPk3EBqrHKC9yYPgGuZEcPzf7DZ+
DFcpmZYOoEHmcH+W7/8tFHTP89LuXAVe5hMNBLo0Shd9zhTAcD+w7FzIwdpoMuio
Q7lZ4FHCQ+57+l1WU5GNqn2rhJ2QDQNr9DlZge+5tUO2z98fwA1KxEN/vmkBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvTKMohbyLBFMilCSltSyT2dajuIwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG67DowDQYJKoZIhvcNAQELBQADggEBAEkLR/uz
IlS2R8B030uPfjH2O4qpGsxRRM8cwuda9JlUVYoobVfvJsa4DBD7r9FNnvUzIwx0
hrvxpwRTgAYi3pJvqquZDzREi/LgSyZuE+VmgL6M7eX3ZHXfmYU5Dh2x9wD7gjKN
xCpkJsKxveAHhrKU0sOaNN+4GD3Vl0OObPm1THOfwtc8oKK/F9jbbejo5RCNWpP1
6Xrg0a8/Wg8pMYpdpHYiudwOX0rU4pJKR38GZkPJZfOlCJ1RplCBZH/4eIkM0lMz
Zp+ZTipkTIV9yg8nUFQflV5LE3CL/9dNPZFO3RI7Kr+kRi9m98e4iDWIFkiRlC7q
94JFM+/EhaR+NNI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org