Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232332e302f32342d3234203d3e20323633353538.roa
File:                     3138362e3233372e3232332e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          wdtDyCymATVMGMe5oNHEYPIjIUwISThkLeQfmZg9tX4=
Subject key identifier:   D0:93:1D:4D:3B:5D:47:4F:89:06:B9:F5:CC:79:23:1D:99:A2:FF:AB
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       02C46AD2993AA45C221A97A3268C7B659788903F
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232332e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        186.237.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c4:6a:d2:99:3a:a4:5c:22:1a:97:a3:26:8c:7b:65:97:88:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=D0931D4D3B5D474F8906B9F5CC79231D99A2FFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:65:79:33:d5:03:c1:e7:4d:f9:65:4b:7a:
                    66:33:92:b6:32:a4:7f:d9:8f:79:99:d0:2b:f8:17:
                    0d:6e:d3:31:58:5d:60:f2:91:df:fc:d0:7b:85:76:
                    99:f3:a6:f5:85:80:01:9e:4c:2d:6e:5e:4b:22:2d:
                    a5:7c:2f:eb:70:87:d2:a3:6f:65:1d:ce:b1:30:5e:
                    2d:7a:b8:68:17:43:7d:af:17:9b:c5:6f:62:de:a3:
                    34:b8:0a:f0:9e:65:1f:02:c0:b6:d4:6b:85:59:d6:
                    02:a0:cf:df:6f:e9:70:b1:eb:38:9b:88:5c:53:05:
                    92:34:af:5f:c7:b3:6b:b6:56:b8:48:bd:5b:8e:ba:
                    bd:81:a2:20:17:c6:71:d6:90:d3:57:a6:e5:ab:2d:
                    35:ae:28:b7:53:59:46:ad:80:0e:b4:50:b6:77:e1:
                    89:3a:f6:97:90:70:ff:5d:4a:52:40:51:17:24:e9:
                    36:ee:e2:a8:cf:01:b8:23:b6:53:0e:6c:e6:17:0b:
                    f8:64:59:7d:19:48:a9:6c:e0:01:72:57:f3:5b:54:
                    41:1b:8d:19:bb:d5:54:8d:d4:d5:d9:cb:f5:76:78:
                    d4:27:7a:53:0b:69:41:df:bb:ff:ad:6a:46:9c:ec:
                    7b:5f:41:b7:3a:d3:9b:eb:54:36:d8:f5:6c:52:a9:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:1D:4D:3B:5D:47:4F:89:06:B9:F5:CC:79:23:1D:99:A2:FF:AB
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3138362e3233372e3232332e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:df:d6:67:aa:d0:cd:3e:ce:6b:46:d0:1b:62:08:2c:3e:
         b8:b4:77:49:f7:9f:82:57:a9:4b:fd:f4:14:30:8b:4d:28:32:
         23:64:3f:c5:8b:d0:0c:46:fd:b1:df:fd:ca:4e:9f:fc:44:8d:
         14:9f:53:90:bc:b1:5e:68:64:22:66:19:86:6b:b6:d7:da:ca:
         d8:c4:c9:10:97:ac:02:73:f5:a6:d3:61:37:02:50:88:0a:5c:
         c6:aa:2f:dc:88:26:ba:59:4b:7c:f2:3f:88:8d:ae:77:24:1b:
         ef:a2:6e:4b:4d:90:b8:8f:62:00:6b:12:16:20:c8:16:e9:6f:
         ea:32:1b:b9:46:16:27:bc:58:05:f7:c1:d0:78:74:65:5c:3c:
         c5:c8:e4:56:0a:d6:ba:22:6d:b5:7a:0d:02:a4:92:3b:9e:cc:
         fc:27:4f:ca:f2:01:39:97:91:24:f2:33:bb:c6:9c:da:e9:35:
         5a:52:83:1b:c2:a4:22:91:32:cf:61:a7:8d:d3:6e:ce:8a:49:
         44:8f:59:ae:ef:ce:b7:8f:c6:d3:3e:cb:f8:84:14:13:db:34:
         c3:be:7d:83:a3:27:b8:b2:b0:59:b3:f9:0e:70:66:27:8f:40:
         03:16:7b:3b:28:f7:ed:31:6b:1a:6c:a8:be:33:c4:6f:ba:d4:
         43:c4:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:32 2024 by rpki-client on console-fra.rpki-client.org