Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          DpugJ7GpLSKPDoZ5I0wS+GYdwKWzgmBbtTChS5h65ao=
Subject key identifier:   80:C4:F2:68:E1:F6:3B:B0:92:06:81:91:06:5C:40:33:F6:8E:EC:0C
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       1AD2B491C9E9645F1FA42FDC04064AAD79C460F3
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:55 +0000
ROA not before:           Wed 05 Mar 2025 23:54:55 +0000
ROA not after:            Wed 04 Mar 2026 23:59:55 +0000
asID:                     262798
IP address blocks:        186.236.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d2:b4:91:c9:e9:64:5f:1f:a4:2f:dc:04:06:4a:ad:79:c4:60:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:55 2025 GMT
            Not After : Mar  4 23:59:55 2026 GMT
        Subject: CN=80C4F268E1F63BB092068191065C4033F68EEC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:51:a4:23:e9:f3:16:e1:47:94:ee:9a:73:
                    fb:c6:6a:06:a4:06:11:cb:9a:8a:98:e3:bc:3d:8f:
                    74:e4:04:56:fb:8b:8d:25:d4:c9:c4:52:51:2b:9b:
                    85:e4:61:a5:67:b3:da:df:2a:fe:92:22:84:1b:1c:
                    27:36:a8:df:da:37:bd:16:79:cc:28:ca:97:bd:55:
                    24:d0:c9:42:4e:55:90:e1:49:e5:3c:8f:a3:64:49:
                    2c:b0:6b:f0:aa:a1:c0:e4:45:d5:1c:05:54:f3:8c:
                    94:00:27:1c:53:cc:cf:20:f9:e8:2d:81:b2:f9:4c:
                    d9:f4:18:49:9a:70:92:b6:4c:f6:77:8b:5b:6b:f2:
                    20:3b:a5:5b:4c:1a:18:17:18:a0:9d:88:68:d8:44:
                    54:47:c2:b4:d5:c6:f8:f6:fb:f7:74:3d:fd:e5:a2:
                    39:f0:47:a1:a4:c7:ca:10:7f:24:cb:ac:0e:e8:8a:
                    23:8f:61:87:cd:2b:86:62:73:86:27:63:33:25:da:
                    92:96:43:90:d7:46:79:ff:a6:cd:32:47:dd:8b:8b:
                    b2:69:7d:3d:b5:37:22:70:c8:8c:a2:81:da:97:57:
                    12:fa:d7:99:a1:0a:34:78:78:06:da:76:e4:62:b7:
                    5d:9c:73:31:f9:8d:47:9e:6b:03:82:ea:c6:4e:72:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:F2:68:E1:F6:3B:B0:92:06:81:91:06:5C:40:33:F6:8E:EC:0C
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e34382e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:78:74:37:f5:87:7f:f6:75:0f:49:a8:72:98:48:d2:ab:48:
         41:f8:eb:f5:70:2d:03:9a:5d:30:98:24:6e:dc:b3:1d:18:af:
         e0:81:3c:b3:cc:d2:1f:f0:d1:ca:e0:36:58:2a:99:da:94:be:
         0a:9a:c3:96:d5:3d:18:f0:89:fb:94:e2:42:7a:08:69:0b:02:
         48:c9:62:8a:44:ae:7f:89:63:e6:37:0d:19:48:cb:8a:79:97:
         37:0c:75:15:10:82:2e:b2:d5:db:d9:7c:91:79:16:5f:e8:87:
         75:34:93:c7:33:68:83:fb:15:6d:9f:dd:81:8c:5f:11:17:46:
         3b:16:aa:f1:04:f0:0b:eb:0a:91:32:00:12:aa:68:8c:d8:f9:
         85:4b:49:ef:54:05:cc:32:8d:76:5b:b8:63:d3:da:a4:11:32:
         f7:9d:e0:ea:20:a0:57:08:ee:f7:0e:54:15:8b:fa:56:2b:ac:
         1d:9a:3b:65:cd:86:60:8b:1a:06:e8:a3:e9:60:d3:9e:9e:0c:
         72:80:ca:53:5c:08:9b:d3:82:a9:21:1d:f4:02:4b:71:34:75:
         e7:ec:63:5f:6d:dd:7b:aa:0d:27:d2:6f:1d:68:1f:4e:9a:85:
         dd:40:87:e6:40:8b:61:16:a0:b3:76:a3:76:16:09:10:9e:02:
         d2:01:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net