Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          LRudLzB2T2v0PnUlyoAz0dCIY5nL6vGvCvDEW4zCraQ=
Subject key identifier:   8A:99:06:F6:AD:CC:D6:AE:43:96:22:FD:5A:00:02:23:13:9F:AD:CA
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       30E42FAE92DF4CAB81C3A9E5F19834C8003CC6F7
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:56 +0000
ROA not before:           Wed 05 Mar 2025 23:54:56 +0000
ROA not after:            Wed 04 Mar 2026 23:59:56 +0000
asID:                     262798
IP address blocks:        186.236.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e4:2f:ae:92:df:4c:ab:81:c3:a9:e5:f1:98:34:c8:00:3c:c6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:56 2025 GMT
            Not After : Mar  4 23:59:56 2026 GMT
        Subject: CN=8A9906F6ADCCD6AE439622FD5A000223139FADCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:06:6e:d3:66:88:9a:18:4e:62:ac:06:1b:
                    b7:00:32:49:12:0b:9d:72:27:51:ef:46:f3:a1:59:
                    f4:65:4b:1d:1d:24:8f:da:c6:08:3e:de:4f:18:1b:
                    be:46:5f:7b:ea:a3:b8:8c:28:ca:01:20:4f:fe:14:
                    de:63:38:3b:ba:e5:56:6f:4f:af:6c:3d:c3:cc:08:
                    e3:32:18:a4:a9:d6:52:48:7c:36:fe:45:4d:ae:84:
                    1c:6c:04:3d:c9:fb:f5:a5:43:4e:e4:12:6f:78:30:
                    e1:2b:aa:d3:89:49:46:7e:b1:17:65:d9:d4:cd:5c:
                    28:7e:7c:65:aa:a4:a2:bf:c0:9c:25:fa:1b:3c:04:
                    b8:6b:5f:55:17:1f:7b:b6:03:22:7a:35:cb:1d:d9:
                    f4:b2:18:d4:02:68:89:60:87:40:49:20:d5:8e:97:
                    cb:41:07:d6:e1:10:37:1f:68:21:4c:e1:53:7f:12:
                    4d:c2:69:c8:59:68:a7:fd:b6:56:7e:bc:a7:da:18:
                    d4:af:eb:0e:28:a5:e1:ab:0e:11:56:be:b6:40:2c:
                    f6:91:48:53:be:c8:fa:69:b2:8c:b5:b8:68:c7:c7:
                    1b:e9:cd:fe:f4:f4:e7:38:70:3d:59:0f:94:7f:3b:
                    74:fe:8a:84:5e:ba:e5:f9:e2:5b:d4:3a:a6:76:c4:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:06:F6:AD:CC:D6:AE:43:96:22:FD:5A:00:02:23:13:9F:AD:CA
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35342e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:59:d7:24:9c:75:69:b2:14:f7:9f:cd:73:23:b0:6d:30:ab:
         7f:cf:b6:a3:e3:ed:4a:9f:d3:09:db:1c:b6:fa:9c:f2:6e:21:
         1a:60:a0:5e:f7:18:b5:31:b7:43:36:bb:93:79:af:5a:c8:07:
         fe:40:73:12:1e:d1:c5:2d:63:06:94:50:7c:39:30:48:62:cb:
         c6:c5:ac:ee:df:b1:33:29:ae:4c:a3:23:fd:04:04:f8:58:ec:
         59:e3:0a:84:3e:77:24:38:1d:e8:07:33:c8:44:9e:c0:8e:f4:
         77:5c:d0:7e:b8:ac:06:1a:61:2a:88:c2:b1:dd:22:90:66:b5:
         fb:af:59:25:6d:b2:86:9c:cd:b0:a3:d4:47:05:9f:29:76:78:
         6f:b3:f8:38:4b:d8:bd:d1:1c:57:6f:59:1a:b0:14:5f:c2:87:
         49:6e:9d:81:67:63:ca:1a:bb:d6:db:31:24:05:85:99:3a:83:
         d1:77:c2:c3:26:07:d4:10:55:8a:b7:78:44:d7:62:78:a7:6a:
         39:10:03:f6:de:a0:ab:c3:a2:dd:3e:0f:0c:b1:2b:20:30:df:
         74:6c:8d:6d:a7:24:95:33:dd:a9:80:a3:21:aa:0c:7c:f1:7e:
         bb:0e:9c:7c:aa:9d:65:a1:8e:ba:1e:ca:8a:db:bb:e3:d7:58:
         5b:13:fb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net