Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa
File:                     3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa (raw, json)
Hash identifier:          98uev8TMqAJHIibaFIh1eUowNPW7cDkVI8tjO4GzGWo=
Subject key identifier:   AB:F8:C4:4B:D7:F2:12:0D:9D:C9:87:F6:86:9F:2F:6F:C0:13:47:49
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       4365E279F3C4D6AB5AEBFBE12F28D39968E8E7A1
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:58 +0000
ROA not before:           Wed 05 Mar 2025 23:54:58 +0000
ROA not after:            Wed 04 Mar 2026 23:59:58 +0000
asID:                     262798
IP address blocks:        186.236.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:65:e2:79:f3:c4:d6:ab:5a:eb:fb:e1:2f:28:d3:99:68:e8:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:58 2025 GMT
            Not After : Mar  4 23:59:58 2026 GMT
        Subject: CN=ABF8C44BD7F2120D9DC987F6869F2F6FC0134749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:03:19:ed:11:16:85:a3:d9:21:39:f1:bc:
                    2e:3b:19:09:0c:a3:ac:7f:3e:57:54:bb:69:5b:5d:
                    48:36:87:bd:fa:a7:34:f1:36:d6:a0:dc:7c:0f:b0:
                    88:28:2c:65:4b:fa:3d:9b:bf:1d:87:25:14:f7:97:
                    74:ff:7b:4e:81:d6:aa:8f:ba:e7:c5:06:75:9b:74:
                    ca:78:2e:6a:aa:5a:17:34:e8:a5:b6:cd:19:32:43:
                    3c:0f:87:14:0b:ed:f5:ba:8e:31:7d:32:8b:3f:f1:
                    f5:d6:06:b3:19:0f:b8:4b:37:83:9e:2f:39:32:03:
                    fd:ed:5f:ab:ae:de:f2:98:12:c9:20:44:2b:18:bf:
                    5e:9e:22:5d:c9:0b:63:45:cf:96:2e:76:9b:ce:06:
                    e6:14:ee:19:d1:61:9e:bc:6d:da:b8:cc:ab:2c:ba:
                    ca:68:f6:c0:c4:d9:0f:db:ec:85:7d:53:4d:fb:12:
                    55:85:f0:fc:2f:69:a4:ca:cb:49:87:34:68:ed:ba:
                    3a:20:c4:8a:40:75:0a:8f:b3:72:b7:2b:2d:7d:64:
                    ec:a3:c5:be:e6:c5:84:7f:4d:f2:2e:a8:f4:57:58:
                    0f:20:fd:40:cb:27:c0:5d:1e:eb:8d:2a:48:f2:ce:
                    cd:e7:f8:c4:b4:cb:46:09:05:ac:c7:58:a4:36:1d:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:C4:4B:D7:F2:12:0D:9D:C9:87:F6:86:9F:2F:6F:C0:13:47:49
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35362e302f32332d3233203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:db:88:39:8b:b9:c5:18:98:d5:3a:82:ae:47:ce:6b:5e:b4:
         33:9b:84:f1:21:2d:95:47:c7:4b:19:68:56:04:d7:39:5d:95:
         4c:9d:b7:8c:7d:72:04:25:2d:76:2d:28:39:69:c9:0a:2e:25:
         67:87:3c:e4:10:ba:e0:29:25:8b:8c:d1:05:d8:8d:52:c2:12:
         bb:e1:33:3c:8e:da:23:df:e9:27:b3:a3:7c:5f:10:31:c7:86:
         ba:b1:79:e3:c1:3e:28:42:06:6a:e1:6c:6b:f4:c9:41:d1:d1:
         4b:80:aa:cc:ba:6c:b1:4a:04:ec:87:55:60:88:5c:44:f3:77:
         b3:1b:a2:8c:00:16:99:52:ed:2d:01:f4:ea:74:c2:2b:cf:f3:
         91:df:e3:e5:88:15:27:cf:fd:41:b1:df:31:96:b4:3e:7f:e9:
         ab:e3:74:b2:e5:68:b9:ae:53:30:81:a7:30:b2:a6:a6:c6:62:
         5b:b4:3d:e6:8e:27:d9:e6:24:70:aa:e2:38:ef:bb:48:44:a6:
         64:fe:98:8b:da:a4:99:e8:d0:4c:00:03:c3:bb:ce:76:aa:e9:
         8d:1c:7f:a5:d4:00:a8:9f:90:f9:9d:ab:32:6d:5f:bc:a5:9f:
         42:9d:f4:5f:87:3e:57:e5:1a:9e:8e:47:af:33:58:27:e2:be:
         ff:5f:23:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ2XiefPE1qta6/vhLyjTmWjo56EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNTAzMDUyMzU0NThaFw0yNjAzMDQyMzU5NThaMDMxMTAvBgNV
BAMTKEFCRjhDNDRCRDdGMjEyMEQ5REM5ODdGNjg2OUYyRjZGQzAxMzQ3NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEwMZ7REWhaPZITnxvC47GQkM
o6x/PldUu2lbXUg2h736pzTxNtag3HwPsIgoLGVL+j2bvx2HJRT3l3T/e06B1qqP
uufFBnWbdMp4LmqqWhc06KW2zRkyQzwPhxQL7fW6jjF9Mos/8fXWBrMZD7hLN4Oe
LzkyA/3tX6uu3vKYEskgRCsYv16eIl3JC2NFz5YudpvOBuYU7hnRYZ68bdq4zKss
uspo9sDE2Q/b7IV9U037ElWF8PwvaaTKy0mHNGjtujogxIpAdQqPs3K3Ky19ZOyj
xb7mxYR/TfIuqPRXWA8g/UDLJ8BdHuuNKkjyzs3n+MS0y0YJBazHWKQ2HaWVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq/jES9fyEg2dyYf2hp8vb8ATR0kwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzODM2MmUzMjMzMzYyZTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG67DgwDQYJKoZIhvcNAQELBQADggEBAHLbiDmL
ucUYmNU6gq5HzmtetDObhPEhLZVHx0sZaFYE1zldlUydt4x9cgQlLXYtKDlpyQou
JWeHPOQQuuApJYuM0QXYjVLCErvhMzyO2iPf6Sezo3xfEDHHhrqxeePBPihCBmrh
bGv0yUHR0UuAqsy6bLFKBOyHVWCIXETzd7MboowAFplS7S0B9Op0wivP85Hf4+WI
FSfP/UGx3zGWtD5/6avjdLLlaLmuUzCBpzCypqbGYlu0PeaOJ9nmJHCq4jjvu0hE
pmT+mIvapJno0EwAA8O7znaq6Y0cf6XUAKifkPmdqzJtX7yln0Kd9F+HPlflGp6O
R68zWCfivv9fIzo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net