Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          i37VDRQpolQH0xFR40CYlqGHCHnaSABW3RBnbJG+PvQ=
Subject key identifier:   31:7E:13:5B:11:24:79:72:63:22:AA:A5:DC:C7:BF:D1:F5:75:E7:24
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       5264BCC19B8E3B24F4255CC2666C7AE286B9D297
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:04 +0000
ROA not before:           Wed 03 Apr 2024 23:03:04 +0000
ROA not after:            Wed 02 Apr 2025 23:08:04 +0000
asID:                     262798
IP address blocks:        186.236.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:64:bc:c1:9b:8e:3b:24:f4:25:5c:c2:66:6c:7a:e2:86:b9:d2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:04 2024 GMT
            Not After : Apr  2 23:08:04 2025 GMT
        Subject: CN=317E135B112479726322AAA5DCC7BFD1F575E724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:54:2e:d4:4e:74:b4:a5:4f:6f:29:9c:1f:
                    ee:5d:13:e9:2f:bd:83:ca:23:2b:0e:dd:f0:ed:ab:
                    2e:eb:e0:3b:cf:fb:32:4a:a5:12:28:28:8a:dd:2c:
                    ee:ad:f0:af:5b:7b:65:39:b2:53:aa:d1:3f:55:c7:
                    88:78:80:35:82:a6:5a:9e:b6:22:d0:a2:db:d5:ae:
                    a0:62:46:0c:0a:7c:f5:a5:a7:f5:29:4d:c3:36:8b:
                    1b:2e:96:bc:1d:7e:c5:d7:57:65:79:49:b7:bd:33:
                    8e:7e:09:42:01:f5:b2:a9:67:55:dc:2d:2d:35:10:
                    ee:91:13:44:93:3e:9d:ba:42:74:02:2e:39:86:e6:
                    71:8f:80:56:0b:d5:f7:86:aa:a5:b1:4c:22:ca:46:
                    16:84:b3:aa:1b:f2:1c:f9:87:ec:26:69:3a:4f:55:
                    1b:3a:68:b5:bc:ba:f0:7e:ce:79:4c:2f:2b:3f:e4:
                    ad:07:0e:17:b2:f2:a5:4e:76:74:da:7f:06:a4:73:
                    c2:3a:4f:f2:28:39:2e:06:df:a1:0c:b7:a5:f7:cf:
                    67:82:b9:d7:82:88:39:b6:83:74:b2:f3:31:8d:c8:
                    a0:88:cb:01:ac:69:e4:82:79:a9:c9:6f:64:64:33:
                    c5:22:42:2e:0d:7d:f8:d3:52:01:d9:96:34:62:85:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:13:5B:11:24:79:72:63:22:AA:A5:DC:C7:BF:D1:F5:75:E7:24
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:bd:cf:e3:51:f4:68:3d:cd:bb:0b:5e:ca:e3:09:fb:48:
         a7:59:df:ec:f9:a8:d4:a5:de:92:15:34:90:13:a9:57:88:ab:
         0d:21:ac:b3:00:41:34:b3:47:bd:f1:8b:73:08:93:c2:2d:62:
         cd:ae:c1:2e:f4:86:c6:cf:01:35:6b:2b:e3:f7:ef:2e:8e:08:
         db:1b:0b:d6:76:2c:16:e3:92:40:ab:5e:26:30:d8:90:c8:d1:
         c1:06:14:2c:35:80:92:ca:e8:cc:27:fa:18:d3:37:4b:e9:34:
         f2:38:c0:ef:0a:90:10:73:2b:21:3d:c0:ea:b7:66:a3:c9:50:
         49:4c:39:2c:33:41:1b:fa:4f:7e:8c:5e:16:d8:13:e8:79:29:
         8f:16:a0:3d:00:77:69:5a:14:35:5f:ed:a7:06:de:47:fa:1f:
         4d:0e:8f:2b:c9:1f:3a:90:7d:3a:a9:2c:d7:ed:1f:b8:9a:bc:
         4e:bd:4f:9a:1e:d5:d3:ca:3d:b1:b7:a0:57:c2:2f:5d:2c:a9:
         9a:61:39:8e:76:bf:aa:47:9f:6b:f6:0a:07:84:78:ac:52:93:
         67:05:b5:d9:da:bd:70:50:72:7a:07:32:f2:d3:7f:5c:bc:1a:
         e0:11:88:17:a6:52:cd:8e:f2:88:14:d5:40:07:86:4e:8e:94:
         0a:99:c3:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUmS8wZuOOyT0JVzCZmx64oa50pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNDA0MDMyMzAzMDRaFw0yNTA0MDIyMzA4MDRaMDMxMTAvBgNV
BAMTKDMxN0UxMzVCMTEyNDc5NzI2MzIyQUFBNURDQzdCRkQxRjU3NUU3MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsS1Qu1E50tKVPbymcH+5dE+kv
vYPKIysO3fDtqy7r4DvP+zJKpRIoKIrdLO6t8K9be2U5slOq0T9Vx4h4gDWCplqe
tiLQotvVrqBiRgwKfPWlp/UpTcM2ixsulrwdfsXXV2V5Sbe9M45+CUIB9bKpZ1Xc
LS01EO6RE0STPp26QnQCLjmG5nGPgFYL1feGqqWxTCLKRhaEs6ob8hz5h+wmaTpP
VRs6aLW8uvB+znlMLys/5K0HDhey8qVOdnTafwakc8I6T/IoOS4G36EMt6X3z2eC
udeCiDm2g3Sy8zGNyKCIywGsaeSCeanJb2RkM8UiQi4NffjTUgHZljRihY+jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMX4TWxEkeXJjIqql3Me/0fV15yQwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67DwwDQYJKoZIhvcNAQELBQADggEBAF82vc/j
UfRoPc27C17K4wn7SKdZ3+z5qNSl3pIVNJATqVeIqw0hrLMAQTSzR73xi3MIk8It
Ys2uwS70hsbPATVrK+P37y6OCNsbC9Z2LBbjkkCrXiYw2JDI0cEGFCw1gJLK6Mwn
+hjTN0vpNPI4wO8KkBBzKyE9wOq3ZqPJUElMOSwzQRv6T36MXhbYE+h5KY8WoD0A
d2laFDVf7acG3kf6H00OjyvJHzqQfTqpLNftH7iavE69T5oe1dPKPbG3oFfCL10s
qZphOY52v6pHn2v2CgeEeKxSk2cFtdnavXBQcnoHMvLTf1y8GuARiBemUs2O8ogU
1UAHhk6OlAqZw/o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org