Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e36302e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          ltmo2ayToasn3pqbbjqJzZdMvxMyMdXnRoPlMFPykXg=
Subject key identifier:   19:6E:A3:CD:F4:95:D1:67:D5:DC:1E:A5:02:5B:53:8F:F4:92:21:CA
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       22A196B763FFCE2CA31FBEE9590F4EDA1760F7B9
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:56 +0000
ROA not before:           Wed 05 Mar 2025 23:54:56 +0000
ROA not after:            Wed 04 Mar 2026 23:59:56 +0000
asID:                     262798
IP address blocks:        186.236.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a1:96:b7:63:ff:ce:2c:a3:1f:be:e9:59:0f:4e:da:17:60:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:56 2025 GMT
            Not After : Mar  4 23:59:56 2026 GMT
        Subject: CN=196EA3CDF495D167D5DC1EA5025B538FF49221CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:2a:5c:6b:d8:8c:29:13:3f:bf:6f:e8:6d:
                    87:fe:d9:30:ba:79:a9:02:e3:d3:c0:17:84:0f:15:
                    3b:a4:a9:5e:00:fc:c5:c9:14:27:38:d3:eb:22:6f:
                    9b:a8:2f:78:fb:ec:d3:e4:78:52:2f:4a:f0:be:ae:
                    e5:ce:ce:5d:ba:82:fa:aa:62:ec:2c:13:f8:59:30:
                    d9:77:28:90:48:ca:55:56:b3:64:6e:e4:2b:cd:2d:
                    fb:25:8a:ce:cd:bf:c5:50:6c:55:28:91:cd:05:83:
                    3a:bc:80:60:39:e3:a4:f5:73:3b:8e:90:0e:51:3b:
                    1e:64:18:e6:b1:af:6e:fd:17:61:17:2b:b8:ae:3a:
                    f3:5a:ca:04:e9:27:79:1d:c2:88:e6:75:ba:bd:47:
                    5e:a0:e7:e3:7b:4e:d4:3d:1a:c8:53:ff:5c:1d:dc:
                    dd:67:6e:0a:b6:ce:10:74:80:f2:26:a1:73:e9:76:
                    f9:15:a4:f9:74:bc:fa:c1:a2:ac:1b:4f:cf:9c:19:
                    82:8f:90:68:91:da:3c:0f:0f:9d:03:25:03:53:df:
                    d7:3d:aa:8f:c5:07:b7:63:d4:dd:4e:cd:69:51:b3:
                    1e:a6:16:88:5c:89:1b:3c:56:55:31:7a:e6:d3:0a:
                    e1:49:6f:df:8b:16:be:08:95:ca:cc:9a:6c:6d:cf:
                    b7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6E:A3:CD:F4:95:D1:67:D5:DC:1E:A5:02:5B:53:8F:F4:92:21:CA
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:25:1f:25:9b:f1:69:42:2d:c5:dd:35:fb:a3:ab:d9:54:
         d1:ee:df:3a:d1:97:1f:d7:f1:cb:e4:d4:9b:7e:28:cf:0b:4c:
         95:5a:23:53:27:ba:f6:c1:f5:b3:91:64:f6:aa:d0:f8:95:3e:
         c3:29:71:9e:d7:55:c6:15:8c:17:e6:8a:6e:4a:9c:e6:31:b4:
         35:91:6b:8a:19:e3:cb:06:be:fa:0b:81:bc:c1:a9:e9:b5:fa:
         81:e7:b6:ee:33:9d:c1:64:7f:4b:37:8d:79:c3:33:b2:65:18:
         a1:0e:f9:29:eb:76:af:ce:b4:a3:c2:9a:8f:36:ce:a3:5c:b3:
         97:d8:46:d2:0c:77:26:60:a8:9e:fc:73:cf:c7:1c:70:c4:4e:
         bc:cb:ab:88:63:ae:c2:4a:40:9a:b2:0e:01:d4:9f:a6:de:1f:
         6d:18:7f:84:92:63:36:24:33:12:f3:fc:dd:b7:d3:0f:e7:93:
         60:2a:e8:97:9e:e2:b8:ce:36:a1:bf:fd:24:5f:31:14:5b:a2:
         21:ae:48:c2:d5:c6:4d:eb:b7:26:6e:f2:30:cf:0d:18:b1:90:
         b9:e5:cd:72:98:ec:fe:16:77:be:b0:dc:70:49:89:c1:fe:bc:
         44:10:7a:e0:9e:59:a1:53:19:f5:62:58:19:7d:2b:6e:eb:cf:
         ee:d4:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:06:38 2025 by rpki-client