Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa
File:                     3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          xwoTqddVnp16cgmS7BkYQRIB9lSu/6m81Un4Cz5nxFk=
Subject key identifier:   56:F9:B9:49:91:63:9F:6A:8D:DD:F5:71:8A:BF:DE:D8:A5:8A:74:B9
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       2F0E13FAB97EF787FD4358D476441D80330831EC
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 05 Mar 2025 23:59:54 +0000
ROA not before:           Wed 05 Mar 2025 23:54:54 +0000
ROA not after:            Wed 04 Mar 2026 23:59:54 +0000
asID:                     262798
IP address blocks:        186.236.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0e:13:fa:b9:7e:f7:87:fd:43:58:d4:76:44:1d:80:33:08:31:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Mar  5 23:54:54 2025 GMT
            Not After : Mar  4 23:59:54 2026 GMT
        Subject: CN=56F9B94991639F6A8DDDF5718ABFDED8A58A74B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:3d:fb:40:0f:d1:51:8b:92:fd:3c:18:dd:
                    45:e8:d5:4d:68:48:8a:4e:74:c5:12:ca:ef:33:7c:
                    86:ee:14:e4:1c:04:7d:2e:6c:70:a9:22:5b:ee:11:
                    58:9c:13:53:1b:3a:b8:75:d5:9a:c0:13:30:c1:39:
                    9c:70:e7:76:fd:55:e2:4b:fa:3d:e8:4c:10:19:99:
                    09:26:4d:52:8a:87:b6:08:a8:f1:95:8a:21:92:e5:
                    62:9c:18:b4:39:84:e0:8c:2f:22:50:1d:8c:d9:03:
                    f0:1a:0b:e0:c0:2e:6f:fa:08:93:86:d0:ed:e5:98:
                    f6:03:1d:c7:71:b1:6e:dd:c4:eb:6e:fb:7b:58:c3:
                    b1:a7:0e:be:58:61:94:aa:08:7e:84:a9:7b:63:79:
                    08:e8:e0:4d:7c:39:03:99:f2:73:f6:5b:71:57:bc:
                    4e:cc:cd:98:12:6d:70:f4:38:03:cf:75:6c:f9:11:
                    bc:6d:26:d0:27:c9:11:cb:9b:c5:92:08:79:fc:85:
                    4b:f2:cd:14:02:59:08:4f:f2:c3:b9:6e:13:07:89:
                    bc:dc:fa:b3:37:0f:f4:fa:37:82:9c:fb:7f:93:4e:
                    49:96:97:9b:b2:b8:14:80:44:0f:2b:a8:aa:ef:98:
                    7c:b7:5c:7e:56:af:0f:62:38:76:da:f3:17:26:31:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:B9:49:91:63:9F:6A:8D:DD:F5:71:8A:BF:DE:D8:A5:8A:74:B9
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3138362e3233362e36302e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:54:06:e4:64:23:16:66:34:f3:7c:e0:f6:be:25:fc:30:
         78:c5:90:01:55:23:89:d5:c6:4c:ff:d2:ed:3e:67:da:de:53:
         8f:6e:df:96:86:11:fa:4b:7b:17:71:88:b9:cc:1c:74:3c:3c:
         83:9b:c0:8f:ff:cf:f7:c2:2d:18:ce:e6:9c:07:5f:7d:31:e7:
         13:a1:a0:6b:7f:90:57:4e:4b:d8:24:1b:b8:2c:39:ac:0a:06:
         ed:94:c0:1f:c6:62:b1:31:e0:d3:27:5b:95:28:05:6e:07:70:
         7b:4b:d1:ad:43:0a:bf:11:ce:55:2e:9a:50:c5:f8:60:09:b4:
         f2:31:cb:fc:c5:66:77:2e:1a:14:93:68:9f:06:1f:95:3a:32:
         c5:89:64:73:3a:3d:3d:f8:dc:bd:da:2c:67:eb:e1:d5:f2:3b:
         34:f2:dc:7a:88:d5:a6:ab:83:2c:bf:36:dd:7c:87:70:28:11:
         6c:a3:03:8a:c8:dc:9f:c6:fa:2a:95:4c:ae:dc:9c:f6:6c:3e:
         9c:1f:00:dd:cc:b6:3e:db:c6:28:3b:ec:e2:b7:0f:ba:1a:ec:
         78:d9:4c:f2:7f:09:e3:f2:f1:67:c8:11:1b:67:ca:4e:6d:ea:
         bd:9b:5e:17:28:20:ce:aa:46:ce:51:b6:eb:bd:54:92:83:c7:
         76:97:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net