Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          5K2eCxwr94HulU1caUahm3xjeK8hbJl/if8+ZDcUZg0=
Subject key identifier:   75:86:70:B2:41:FC:29:D4:88:D0:2E:9F:02:A2:77:27:22:AF:1C:59
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       5B7ABD2472E64B4AD9A4740B85FA5DA4A42E2F71
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:58 +0000
ROA not before:           Wed 05 Mar 2025 23:54:58 +0000
ROA not after:            Wed 04 Mar 2026 23:59:58 +0000
asID:                     262798
IP address blocks:        186.236.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:bd:24:72:e6:4b:4a:d9:a4:74:0b:85:fa:5d:a4:a4:2e:2f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:58 2025 GMT
            Not After : Mar  4 23:59:58 2026 GMT
        Subject: CN=758670B241FC29D488D02E9F02A2772722AF1C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9e:7e:0b:e8:c1:70:e4:bd:9d:cf:e5:c7:c6:
                    36:fd:55:43:96:f6:bf:5d:31:43:e6:3e:d6:b2:10:
                    55:0c:3e:4f:94:84:7c:dd:20:be:33:4e:67:90:dc:
                    22:28:32:a6:9f:50:e7:92:d9:1e:3e:55:44:a6:19:
                    f0:ee:51:e9:4d:fc:7d:b4:e1:7a:6b:e9:09:b2:41:
                    86:a0:9c:eb:e0:9d:62:e6:80:9a:ab:ce:a3:c3:cf:
                    9f:fe:4b:cb:36:ad:ef:fb:be:d8:eb:5e:0d:6f:ac:
                    fe:e5:6f:94:fa:66:88:59:8d:5f:4a:e1:c2:b8:d8:
                    c3:18:ee:d9:5b:da:26:5d:83:54:4c:22:7a:d4:84:
                    95:b0:ff:52:ca:fa:82:b7:6a:3b:97:fc:ad:ff:2e:
                    0f:d3:4e:60:69:b9:4a:62:31:67:08:7c:ab:44:4e:
                    08:e2:94:c8:b7:c0:f0:75:e9:01:24:c2:8b:be:b4:
                    80:ad:36:24:72:cd:23:ca:6c:f3:ab:7d:11:ab:e2:
                    6b:9f:3e:74:2a:48:b0:3f:ba:52:7e:d9:1a:a8:eb:
                    15:15:83:54:d8:d9:1a:64:91:e1:cf:c6:4f:60:5f:
                    b6:10:87:dd:a6:10:3f:0f:f9:ca:5d:2e:07:b4:89:
                    53:cc:a6:e4:ea:ac:5a:91:a0:48:c7:5e:c3:f5:39:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:70:B2:41:FC:29:D4:88:D0:2E:9F:02:A2:77:27:22:AF:1C:59
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:73:9f:50:bd:54:0b:93:da:ff:77:cb:e7:18:60:02:e3:
         a8:b0:5d:b5:d7:c9:aa:f1:54:c8:7c:09:3e:c3:7e:51:b2:4f:
         36:8b:d8:15:46:90:30:93:fd:82:22:78:6e:43:fe:dd:8c:15:
         1d:71:43:a6:e1:3e:84:72:c9:3e:0e:1f:69:ef:a0:00:93:a6:
         65:6b:cf:1a:d1:56:cf:35:32:f0:86:00:8a:93:c3:5e:43:11:
         8e:6f:ca:f9:1a:bd:5d:00:02:07:0a:5f:ae:f5:a2:de:25:f6:
         00:5e:c8:43:05:02:14:84:39:c4:f5:d8:3b:a6:8a:f1:0a:38:
         46:62:44:dd:a0:71:49:69:68:48:69:52:57:27:a5:6e:8e:83:
         d6:5f:79:50:0b:e3:05:33:b9:28:3b:f4:8c:1b:ca:96:7d:79:
         b9:da:c7:4f:3a:ee:be:42:39:20:a5:37:26:cb:b7:2a:f9:eb:
         cc:46:d0:2b:2c:c5:ce:a1:76:a3:62:60:a7:05:a7:b7:c5:c9:
         63:4f:03:6b:f2:61:66:31:bc:1d:f3:06:b2:4d:94:f3:a2:3f:
         74:60:61:3d:94:41:d7:c7:20:cd:72:e9:2b:9e:7c:a3:b2:ef:
         c2:06:0a:a9:14:0b:81:da:3f:32:70:77:da:82:16:46:53:a4:
         27:c4:81:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW3q9JHLmS0rZpHQLhfpdpKQuL3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNTAzMDUyMzU0NThaFw0yNjAzMDQyMzU5NThaMDMxMTAvBgNV
BAMTKDc1ODY3MEIyNDFGQzI5RDQ4OEQwMkU5RjAyQTI3NzI3MjJBRjFDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0nn4L6MFw5L2dz+XHxjb9VUOW
9r9dMUPmPtayEFUMPk+UhHzdIL4zTmeQ3CIoMqafUOeS2R4+VUSmGfDuUelN/H20
4Xpr6QmyQYagnOvgnWLmgJqrzqPDz5/+S8s2re/7vtjrXg1vrP7lb5T6ZohZjV9K
4cK42MMY7tlb2iZdg1RMInrUhJWw/1LK+oK3ajuX/K3/Lg/TTmBpuUpiMWcIfKtE
TgjilMi3wPB16QEkwou+tICtNiRyzSPKbPOrfRGr4mufPnQqSLA/ulJ+2Rqo6xUV
g1TY2RpkkeHPxk9gX7YQh92mED8P+cpdLge0iVPMpuTqrFqRoEjHXsP1Od5XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdYZwskH8KdSI0C6fAqJ3JyKvHFkwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG67DowDQYJKoZIhvcNAQELBQADggEBAF+Sc59Q
vVQLk9r/d8vnGGAC46iwXbXXyarxVMh8CT7DflGyTzaL2BVGkDCT/YIieG5D/t2M
FR1xQ6bhPoRyyT4OH2nvoACTpmVrzxrRVs81MvCGAIqTw15DEY5vyvkavV0AAgcK
X671ot4l9gBeyEMFAhSEOcT12DumivEKOEZiRN2gcUlpaEhpUlcnpW6Og9ZfeVAL
4wUzuSg79IwbypZ9ebnax0867r5COSClNybLtyr568xG0Cssxc6hdqNiYKcFp7fF
yWNPA2vyYWYxvB3zBrJNlPOiP3RgYT2UQdfHIM1y6SuefKOy78IGCqkUC4HaPzJw
d9qCFkZTpCfEge4=
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:53:53 2025 by rpki-client