Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          VcD14Xl1TxM2ixAuSFoQXfhtl0WRHzs70Bw7Z4GDfB8=
Subject key identifier:   02:05:3E:F1:79:40:99:9E:EF:5A:46:71:7D:12:EC:64:4A:7B:40:27
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       1F5279885930CF7AAC9079D450FE091C1D1AC973
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:53 +0000
ROA not before:           Wed 05 Mar 2025 23:54:53 +0000
ROA not after:            Wed 04 Mar 2026 23:59:53 +0000
asID:                     262798
IP address blocks:        186.236.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:79:88:59:30:cf:7a:ac:90:79:d4:50:fe:09:1c:1d:1a:c9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:53 2025 GMT
            Not After : Mar  4 23:59:53 2026 GMT
        Subject: CN=02053EF17940999EEF5A46717D12EC644A7B4027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:73:f1:69:b9:9b:a2:5a:76:2f:62:e8:df:
                    3e:33:c4:e6:75:96:ba:a4:4b:94:60:01:79:87:04:
                    19:af:f5:51:82:46:ca:ed:87:13:e1:24:b8:9b:b3:
                    b3:59:77:6b:c8:b0:8f:b6:88:12:0f:c3:b4:46:2b:
                    1d:63:16:5c:61:f9:38:f5:2f:fe:6a:d9:7f:94:92:
                    f4:ac:82:d1:99:ee:42:f1:41:85:0b:9d:dd:4a:52:
                    0e:12:73:cd:da:ec:da:e7:e5:a8:44:83:6f:1e:25:
                    15:22:4a:86:af:03:5d:22:1a:c5:99:dc:be:79:0a:
                    f8:b6:c1:17:87:a8:e0:58:bc:9b:a2:a1:1e:ec:25:
                    15:b4:e5:25:4b:ba:f9:e3:26:30:96:79:dc:03:99:
                    dd:6a:3b:19:cd:16:fd:c4:5d:99:69:1a:11:2e:65:
                    e8:8b:27:35:1f:54:b5:d8:35:f6:9c:15:f5:9a:9f:
                    1b:bd:a1:03:87:0e:f7:83:0b:b3:7c:07:21:21:7d:
                    be:c5:7d:b9:81:5a:c9:24:eb:37:0d:00:dd:86:8b:
                    80:4b:88:0e:eb:61:ed:1d:65:d6:f2:8d:1a:2d:be:
                    44:4f:c2:ba:17:4f:d6:5f:8c:5c:f5:02:de:8a:d5:
                    f8:9e:aa:39:68:56:1f:42:b5:68:27:81:e0:c6:4b:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:05:3E:F1:79:40:99:9E:EF:5A:46:71:7D:12:EC:64:4A:7B:40:27
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:d8:98:89:f6:4a:40:c0:b9:97:a4:54:5e:8a:62:af:3d:
         06:06:24:ac:d7:78:27:70:e6:b3:4b:2b:70:19:74:0c:f2:45:
         82:28:df:94:f6:f4:53:a6:4c:93:cb:40:c7:68:ff:75:0c:8b:
         89:03:43:dd:60:cb:82:32:13:de:3f:34:3c:72:4b:59:b3:9f:
         ce:81:3b:f8:0d:07:59:07:47:d8:69:3d:8a:3a:e5:89:fa:dc:
         f3:d7:94:e9:f6:4a:70:38:6e:be:de:5b:20:e8:c9:b5:d4:69:
         8c:7a:f7:4b:0c:00:5f:e2:74:d4:5e:99:af:0e:fb:31:27:fa:
         4b:66:90:ec:98:58:88:ef:53:23:60:d1:d9:a7:da:6b:b3:e6:
         ef:6e:90:fc:ce:58:e2:bf:17:46:cd:c5:b9:74:3f:61:ba:ac:
         45:43:a3:a7:21:10:9d:8f:ad:c9:bb:3b:ca:09:19:0f:7f:a8:
         5d:e9:1d:0e:fc:a4:19:ab:f0:63:cf:20:66:c2:6c:1c:22:f2:
         06:0f:7b:ff:26:3a:4d:46:b7:7d:5b:6e:b5:07:33:41:e3:f7:
         9f:52:7e:33:59:dc:b6:d6:b8:00:f8:e3:29:8d:7f:5b:9c:4b:
         33:59:fd:b7:a7:82:61:70:c7:6b:8c:d9:11:9d:67:2c:83:0c:
         92:55:44:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:34 2025 by rpki-client