Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
File:                     3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa (raw, json)
Hash identifier:          QKuJBd+avCu7v4hQRK0E/hvgvAWPIqRE32qE8qUE+Js=
Subject key identifier:   05:4D:84:C3:36:50:F6:49:0D:1F:E0:F9:1A:33:C3:FE:1B:49:2E:27
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       040A895080B14720107298648FB044C8D3375BDD
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     264493
IP address blocks:        131.255.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0a:89:50:80:b1:47:20:10:72:98:64:8f:b0:44:c8:d3:37:5b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=054D84C33650F6490D1FE0F91A33C3FE1B492E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:a6:f7:a0:ea:f3:f0:32:21:73:0d:c2:fb:
                    5c:9e:c6:47:95:9a:bc:9e:f2:aa:0c:f1:dd:f3:42:
                    a0:ce:15:b3:f7:ce:73:26:83:db:52:52:b1:ac:01:
                    9c:4c:85:e1:30:8d:d8:ab:af:77:2d:f0:a1:fd:b5:
                    ee:0a:4e:63:27:e9:60:d7:0b:44:60:d9:f6:1d:1b:
                    a2:e7:d9:f8:19:d1:45:f3:ab:29:06:4e:84:29:e3:
                    86:1b:58:3e:09:64:bb:55:28:b0:df:06:ef:41:d5:
                    12:fd:6b:aa:54:2f:93:72:b7:17:83:ba:0e:22:c4:
                    dd:0b:72:ef:07:f9:51:81:15:d4:32:ed:c7:b3:3b:
                    b2:d3:39:ec:d1:b1:91:b4:70:f1:02:e2:50:a3:4d:
                    6a:a4:b7:01:d6:38:99:e1:b3:2f:af:8d:24:ce:91:
                    89:7e:46:24:80:c1:c3:b2:09:e3:1b:1a:39:07:9e:
                    48:91:94:a7:1e:07:45:5e:7f:84:f7:63:d3:c7:e8:
                    ed:8c:b5:97:26:8b:f3:aa:73:83:ce:0c:73:90:d1:
                    22:de:df:50:69:68:c8:3b:f4:e7:5f:bf:bd:6e:91:
                    b4:20:2a:14:f6:32:45:c7:3b:b0:14:df:7d:b4:1b:
                    52:8d:73:c5:0b:19:6d:63:be:9c:80:cf:e3:b5:c4:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4D:84:C3:36:50:F6:49:0D:1F:E0:F9:1A:33:C3:FE:1B:49:2E:27
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:89:73:ff:93:c1:6c:4b:c6:bf:32:67:b5:86:01:76:37:
         7a:f8:a1:67:ab:2d:05:bd:90:51:d5:e4:f5:0f:5c:81:26:33:
         98:75:d5:f3:d6:5e:03:df:39:a6:25:31:d3:74:f1:60:43:bc:
         a4:69:bc:c6:2a:c3:10:da:f1:51:9b:ad:8f:eb:65:4a:e2:13:
         1f:37:b4:c9:8d:5c:ef:c8:1d:f7:b1:17:59:20:16:42:79:05:
         d4:39:f0:3b:7a:29:74:9f:30:49:bf:d5:40:a9:0a:dd:8d:e1:
         6d:a6:7b:fb:ea:3a:f3:8c:05:b2:d6:e4:c6:4c:94:62:4d:74:
         8c:89:31:ed:cf:13:a9:a5:97:7f:cf:63:9a:26:97:04:ff:bd:
         b6:02:15:00:f8:c0:dc:d2:17:36:71:42:a7:e6:8c:1c:5a:f2:
         8c:0f:4d:62:98:3d:ea:6a:af:4b:d5:48:0b:cd:fa:ba:0f:b6:
         bd:7e:89:1b:a1:9c:c9:70:79:f0:87:46:7c:f6:c6:12:83:f1:
         54:c4:ae:e8:53:c4:13:e3:0f:dc:a1:1c:0e:3b:a2:f6:b0:67:
         fa:9e:ab:85:c1:4b:ad:91:7b:9d:ee:b5:58:bb:7b:b6:2a:a4:
         11:ad:c2:f6:a5:a4:07:02:fd:de:0d:a2:e1:dc:c8:83:a4:c6:
         ef:35:dd:7d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBAqJUICxRyAQcphkj7BEyNM3W90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERGNzVEMTFBODVGNTAyMzc0N0IyMEU5NzM5OTRFQzUz
RDIzQTY4RTAeFw0yNDExMDcyMDQ5NTBaFw0yNTExMDYyMDU0NTBaMDMxMTAvBgNV
BAMTKDA1NEQ4NEMzMzY1MEY2NDkwRDFGRTBGOTFBMzNDM0ZFMUI0OTJFMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxqb3oOrz8DIhcw3C+1yexkeV
mrye8qoM8d3zQqDOFbP3znMmg9tSUrGsAZxMheEwjdirr3ct8KH9te4KTmMn6WDX
C0Rg2fYdG6Ln2fgZ0UXzqykGToQp44YbWD4JZLtVKLDfBu9B1RL9a6pUL5NytxeD
ug4ixN0Lcu8H+VGBFdQy7cezO7LTOezRsZG0cPEC4lCjTWqktwHWOJnhsy+vjSTO
kYl+RiSAwcOyCeMbGjkHnkiRlKceB0Vef4T3Y9PH6O2MtZcmi/Oqc4PODHOQ0SLe
31BpaMg79Odfv71ukbQgKhT2MkXHO7AU3320G1KNc8ULGW1jvpyAz+O1xKURAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBU2EwzZQ9kkNH+D5GjPD/htJLicwHwYDVR0j
BBgwFoAU3fddEahfUCN0eyDpc5lOxT0jpo4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC9EREY3NUQxMUE4NUY1MDIzNzQ3QjIwRTk3Mzk5NEVDNTNEMjNBNjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RERjc1RDExQTg1RjUwMjM3
NDdCMjBFOTczOTk0RUM1M0QyM0E2OEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/nDANBgkqhkiG9w0BAQsFAAOCAQEALC2J
c/+TwWxLxr8yZ7WGAXY3evihZ6stBb2QUdXk9Q9cgSYzmHXV89ZeA985piUx03Tx
YEO8pGm8xirDENrxUZutj+tlSuITHze0yY1c78gd97EXWSAWQnkF1DnwO3opdJ8w
Sb/VQKkK3Y3hbaZ7++o684wFstbkxkyUYk10jIkx7c8TqaWXf89jmiaXBP+9tgIV
APjA3NIXNnFCp+aMHFryjA9NYpg96mqvS9VIC836ug+2vX6JG6GcyXB58IdGfPbG
EoPxVMSu6FPEE+MP3KEcDjui9rBn+p6rhcFLrZF7ne61WLt7tiqkEa3C9qWkBwL9
3g2i4dzIg6TG7zXdfQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org