Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          fla99QP124V0ARe+aSrMY8nKSvGCKrm8BpSOdv1TZjo=
Subject key identifier:   C6:40:6B:2D:3F:1C:CA:42:28:45:33:01:87:AA:2E:71:49:B0:98:3B
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       042AE776E7D6184B35EE77E0E2C9F426FEBE4474
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:08 +0000
ROA not before:           Wed 03 Apr 2024 23:03:08 +0000
ROA not after:            Wed 02 Apr 2025 23:08:08 +0000
asID:                     262798
IP address blocks:        186.236.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:e7:76:e7:d6:18:4b:35:ee:77:e0:e2:c9:f4:26:fe:be:44:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:08 2024 GMT
            Not After : Apr  2 23:08:08 2025 GMT
        Subject: CN=C6406B2D3F1CCA422845330187AA2E7149B0983B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:29:a4:02:39:e0:dc:d8:30:2a:ee:4b:93:
                    ef:0b:96:40:73:6a:f3:1d:69:c7:61:d1:32:00:fd:
                    96:3e:99:49:8a:2f:ce:8f:cd:5f:f2:16:e2:e9:a0:
                    8c:8c:be:93:70:ed:ea:4b:46:7f:42:a7:69:53:17:
                    ce:8e:64:b8:4a:7b:0e:97:e9:7d:9f:bc:ae:cf:ca:
                    f2:08:ac:ea:be:44:a0:c4:fb:24:75:e1:a7:7e:c4:
                    e4:55:aa:a2:c9:2e:0b:50:3f:5e:86:fe:83:0c:4f:
                    68:86:b4:5a:b0:bd:73:18:07:fb:f6:bc:6a:67:41:
                    ed:6f:be:08:da:fa:7b:b2:a0:90:e1:b9:a6:cd:60:
                    50:05:f1:ae:85:22:9c:31:79:0f:c8:a6:0b:c7:35:
                    73:4c:82:a0:36:35:4c:f0:ab:ad:70:06:e5:77:21:
                    00:0c:ff:14:d5:b6:71:66:d8:cd:b3:de:9d:57:63:
                    0e:11:62:52:b0:2c:56:b7:66:c7:b8:c3:b5:e3:32:
                    37:77:8d:16:20:38:33:66:ee:b7:41:f7:3d:ff:d4:
                    43:05:c1:13:82:ea:4b:b3:b4:72:f2:c0:62:54:83:
                    0b:28:57:68:f1:2f:6b:73:a2:7e:1d:e2:64:df:19:
                    df:b9:a9:c4:86:b2:1c:82:db:41:8c:23:24:a2:77:
                    5c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:40:6B:2D:3F:1C:CA:42:28:45:33:01:87:AA:2E:71:49:B0:98:3B
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36332e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:64:71:0d:30:d4:df:eb:19:6d:49:c0:94:b4:11:f2:e4:
         89:7f:f4:93:e3:17:68:f6:32:32:9c:ae:ce:06:ae:66:ef:dc:
         64:ea:9e:bf:2c:b9:3f:47:af:dc:f5:05:03:d7:44:54:77:03:
         b0:f7:2f:f8:ad:b8:f3:aa:a5:9f:0e:18:7a:4c:7a:a8:01:19:
         08:3e:69:1a:71:03:de:80:f4:8b:70:8d:09:44:9d:df:95:ea:
         55:76:be:a3:00:fa:94:75:78:23:05:05:58:13:45:79:e4:d8:
         64:a4:a8:58:33:bd:e0:9d:8f:0d:08:f6:3c:7e:58:13:da:68:
         96:13:68:74:21:0b:df:ce:e8:ce:77:96:0d:03:63:9c:ba:5e:
         e2:03:ab:f5:01:c6:ab:0b:81:87:1f:25:6a:56:94:5f:3b:dc:
         80:eb:32:10:cc:f6:5c:9f:22:45:47:8d:fe:22:ba:73:05:f6:
         3e:c9:83:06:7c:86:21:c2:55:3c:09:e6:48:c9:56:b9:a6:52:
         f0:3a:c8:12:49:89:fd:98:05:bf:2f:6e:96:9a:0d:69:04:24:
         a4:5a:c0:f3:4d:0e:7f:c8:b0:b1:4d:7f:fd:43:88:26:3e:db:
         c4:f1:28:ee:c7:b7:73:d4:e7:14:b9:5d:f9:a3:9c:05:23:35:
         cc:38:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org