Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e35382e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          jgExGW1x5Zw0Emb9jdnDsYYr39ieY8ICzTb3s2IxMh4=
Subject key identifier:   25:17:B8:88:34:0E:13:96:CB:59:B9:C9:8A:CE:2A:7A:F0:87:CC:F6
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       535546FF256FA0B3DC7BF862D19036ECE0B88B6D
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:57 +0000
ROA not before:           Wed 05 Mar 2025 23:54:57 +0000
ROA not after:            Wed 04 Mar 2026 23:59:57 +0000
asID:                     262798
IP address blocks:        186.236.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:46:ff:25:6f:a0:b3:dc:7b:f8:62:d1:90:36:ec:e0:b8:8b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:57 2025 GMT
            Not After : Mar  4 23:59:57 2026 GMT
        Subject: CN=2517B888340E1396CB59B9C98ACE2A7AF087CCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:89:ae:3d:b4:8f:a0:2c:5c:4f:c9:c3:e0:
                    f2:b6:c7:0f:01:ae:c0:7e:4c:b3:5e:9e:d2:b5:89:
                    9e:35:17:f0:67:e4:ee:03:2a:b7:58:34:64:5d:44:
                    d6:7d:0b:d0:5e:ec:3b:f3:48:01:e7:c7:1a:38:c5:
                    e1:96:91:e6:81:0a:c9:f1:bb:d9:e7:82:e3:2c:f1:
                    f0:cd:99:8c:9c:31:30:a5:ab:1c:b0:02:d7:91:d0:
                    79:02:c2:24:f6:ed:ba:bd:74:04:33:37:2d:2b:bf:
                    44:35:08:15:f2:95:f2:88:6f:ab:9c:60:7d:57:4a:
                    81:81:ff:7d:bb:1a:2e:a7:87:25:5d:36:a0:f1:14:
                    13:29:9e:71:64:5f:07:65:c2:2e:18:79:c7:e5:42:
                    07:37:84:c6:e4:fe:52:2d:fb:50:20:c9:91:b2:d4:
                    3a:b9:87:b4:df:aa:db:5a:68:36:98:48:6e:e8:95:
                    5f:72:0f:40:10:b9:80:2f:86:d5:43:97:92:ad:47:
                    c8:db:e4:ed:20:ca:be:26:0f:27:0a:12:25:f9:f8:
                    44:d8:bf:88:d1:a5:05:3f:7c:4f:8f:24:9a:2b:53:
                    1f:b6:ac:2d:b2:15:bb:5e:d4:c1:73:dd:49:b5:e1:
                    66:22:58:91:9e:38:4f:4f:c1:36:3b:2e:ce:06:9b:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:B8:88:34:0E:13:96:CB:59:B9:C9:8A:CE:2A:7A:F0:87:CC:F6
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e35382e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:5a:6c:f5:7d:41:8f:d7:c1:ca:a4:5e:cf:36:bc:37:23:
         bb:09:2f:ff:90:6f:22:2f:3b:6e:3f:c2:a4:47:3a:f8:b1:91:
         50:ad:8a:56:34:3e:b4:06:5c:ff:cd:96:41:0b:1d:7c:fa:04:
         df:23:27:73:39:eb:85:30:8c:3b:3e:04:e8:26:7b:8c:70:6c:
         88:85:91:f5:d3:d9:f2:5d:a9:8b:81:6f:c5:0b:01:3e:c7:2a:
         f8:cb:ad:54:68:b3:f3:26:70:32:cb:64:01:ea:e6:7d:2b:a3:
         06:65:5c:84:57:31:f3:ae:21:34:fe:54:d7:2a:bd:9b:9b:b9:
         54:bc:a7:7c:72:6a:6a:e9:49:e8:06:64:c7:f3:e5:20:0c:61:
         f5:1f:15:5d:00:e4:91:a9:7f:3f:c9:88:46:0e:ec:33:b4:6f:
         13:67:90:36:aa:87:5a:ad:7d:b2:a8:4b:83:b8:42:85:2b:3d:
         94:2c:f3:4e:73:e9:9c:5d:de:45:1b:e0:52:6f:00:22:7a:39:
         c3:14:ca:a2:7f:91:76:07:c9:10:06:ef:29:ae:98:f7:22:05:
         8b:61:5d:4b:44:5e:eb:0b:e1:0b:58:d6:28:3e:c4:3c:ae:16:
         3d:8b:af:65:fe:52:7d:54:fd:d0:dc:61:79:6d:bf:2b:35:ef:
         e2:01:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net