Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          skrJmINcB6nTbroBOq5YQ5LYqf418bER6XJfElheI68=
Subject key identifier:   2E:F1:25:89:D7:2B:7E:15:20:34:95:0C:A4:83:8A:45:1C:47:44:E6
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       508A313052E43D2A4C53D9F83CF837C96EE9D6EC
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:04 +0000
ROA not before:           Wed 03 Apr 2024 23:03:04 +0000
ROA not after:            Wed 02 Apr 2025 23:08:04 +0000
asID:                     262798
IP address blocks:        186.236.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8a:31:30:52:e4:3d:2a:4c:53:d9:f8:3c:f8:37:c9:6e:e9:d6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:04 2024 GMT
            Not After : Apr  2 23:08:04 2025 GMT
        Subject: CN=2EF12589D72B7E152034950CA4838A451C4744E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:bd:4f:47:b9:a7:cf:f9:a5:29:df:ac:ff:
                    d2:a7:f4:6a:d1:8c:dd:28:30:41:dd:26:4e:bb:37:
                    88:57:62:67:11:de:76:74:8a:6b:4f:16:c1:c0:e6:
                    f1:ed:0c:c2:ca:25:d9:dc:ba:b8:62:b8:9f:f0:99:
                    ac:a2:51:34:a5:19:b8:e2:7e:6a:bc:ed:f8:35:55:
                    3d:c0:21:36:89:b4:be:9d:0c:19:8c:9b:0b:37:cf:
                    bb:fe:9f:4f:22:18:da:c9:6e:e8:7e:37:75:86:39:
                    75:c6:61:a7:5e:e7:fe:52:34:3e:6d:33:56:28:bb:
                    67:86:bd:23:63:23:0b:54:3b:e9:67:a4:69:ef:a4:
                    d3:1a:46:20:32:8a:76:54:ed:1b:4c:ec:bb:db:51:
                    1d:42:0f:bc:80:f7:a2:80:a8:06:6e:ec:a6:c8:e3:
                    1a:db:a0:e6:3f:bd:c2:13:b2:79:00:31:2e:42:2f:
                    ef:cf:7a:0d:c8:4b:8f:73:02:1b:8c:d9:5d:6c:da:
                    ad:cc:2c:b6:e0:88:ce:6a:bb:2f:0e:45:56:45:7a:
                    7d:33:7a:b2:37:d3:86:00:16:3b:2a:8b:1f:7e:58:
                    9f:1e:60:2a:24:ce:f4:ae:f8:f5:bd:0e:1c:78:10:
                    9d:9d:3e:fe:9e:04:46:20:0b:ab:41:8a:c7:3a:9a:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:25:89:D7:2B:7E:15:20:34:95:0C:A4:83:8A:45:1C:47:44:E6
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36322e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:73:a1:44:73:68:39:72:4d:a6:9b:31:b5:c4:59:de:f8:
         3b:68:24:bb:11:a7:e7:e8:47:5d:1d:2e:d4:96:b7:c8:ae:1e:
         31:ce:52:9c:7c:c4:ce:d9:36:7a:c1:8f:17:8f:e4:1f:48:c4:
         1e:95:2e:00:ac:79:cd:3f:9a:4f:d6:6b:da:be:45:df:04:69:
         55:2f:9f:48:07:ad:fd:22:51:41:8f:0e:df:83:94:85:28:d2:
         93:2b:e2:39:60:18:3a:d3:1a:9a:66:bb:1a:96:2d:c9:88:a3:
         ed:b3:2b:51:30:b5:d6:4e:68:6f:2a:54:2e:41:7d:39:c8:8f:
         f7:3a:ce:df:83:6a:a8:eb:75:78:44:0a:a3:f9:c9:e9:5c:04:
         8b:e0:44:c3:f0:92:41:97:d0:7c:ba:6b:de:08:2f:df:69:e1:
         4e:9c:0d:e3:2c:95:fa:3b:43:d1:2e:c8:3a:1b:c8:c9:ac:e4:
         ee:cd:23:5e:58:f0:73:42:c1:c6:2e:cc:22:d3:ff:d5:47:2c:
         8e:82:b2:c3:a7:7c:1e:4b:3d:1b:e3:82:06:80:35:49:25:38:
         26:d6:e9:45:c5:4e:41:51:c4:24:16:15:85:3f:ae:57:d3:a5:
         9f:e2:23:77:45:c6:4e:35:d7:9a:7e:54:50:8c:fc:f8:91:fb:
         9e:1b:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org