Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa
File:                     3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa (raw, json)
Hash identifier:          16o8AE47le6QxKh+2EOqI4779gJVkdZ4D0iCLe3IGxk=
Subject key identifier:   AB:CA:35:21:03:63:E5:6F:86:5A:D6:77:F6:CC:A7:BB:2D:57:26:6E
Certificate issuer:       /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
Certificate serial:       439DB3C5F36E271EA37B5572DDCE28F95C1C6729
Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa
Signing time:             Wed 03 Apr 2024 18:32:24 +0000
ROA not before:           Wed 03 Apr 2024 18:27:24 +0000
ROA not after:            Wed 02 Apr 2025 18:32:24 +0000
asID:                     263512
IP address blocks:        191.243.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl
                          rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9d:b3:c5:f3:6e:27:1e:a3:7b:55:72:dd:ce:28:f9:5c:1c:67:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2
        Validity
            Not Before: Apr  3 18:27:24 2024 GMT
            Not After : Apr  2 18:32:24 2025 GMT
        Subject: CN=ABCA35210363E56F865AD677F6CCA7BB2D57266E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:db:0a:fc:0c:4c:ed:d4:9b:3b:9c:5e:03:
                    38:a6:6f:cd:34:e1:13:2d:9f:63:5e:be:93:a2:4a:
                    5a:a8:c9:44:3f:d3:63:c9:04:8a:74:9d:9b:7f:61:
                    a1:4c:7f:01:fc:5f:3a:fd:a4:f2:ed:b7:fc:88:a6:
                    b1:d9:61:8b:ce:3a:29:11:4b:45:af:b8:fd:31:48:
                    92:81:5d:c7:86:5a:35:23:47:d3:d3:1d:78:dc:65:
                    d3:53:db:ba:9f:12:18:cc:79:64:c8:75:da:5b:83:
                    17:7f:cc:0b:b2:7f:a2:9a:96:d1:52:85:63:d0:33:
                    1b:69:71:a3:7d:f9:6e:3b:55:29:9d:8a:f8:31:89:
                    11:d6:ea:89:f7:f7:cc:02:9b:cb:b2:b6:25:5a:8a:
                    49:45:61:1e:8f:aa:3f:27:11:3e:39:a1:44:60:81:
                    5f:c8:ee:1f:5d:4e:1a:b3:3b:6d:7e:ef:ee:55:fe:
                    6b:74:75:95:e1:62:79:c2:20:d7:3a:1f:9e:36:a7:
                    17:e8:d0:a4:5b:a8:7a:b4:bd:79:87:82:19:55:fe:
                    c9:c9:88:ca:da:d9:44:bf:70:37:66:76:46:8e:05:
                    b2:cc:7d:b9:0d:05:7c:ea:3f:6f:2b:b0:49:72:43:
                    12:ab:02:78:e8:1e:82:b3:af:b3:47:07:02:7a:33:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:35:21:03:63:E5:6F:86:5A:D6:77:F6:CC:A7:BB:2D:57:26:6E
            X509v3 Authority Key Identifier:
                keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230302e302f32332d3233203d3e20323633353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:35:82:26:e8:31:eb:9c:b4:10:1c:dd:90:a0:17:1c:58:92:
         7c:03:da:66:14:6a:ce:00:dc:16:a4:34:5a:f2:0c:f0:77:eb:
         c8:37:32:ed:b6:05:dd:ac:1b:3f:ea:f1:e4:19:cd:71:f5:00:
         c4:b7:9f:e6:7d:69:6f:8a:b5:d9:a0:a0:93:3e:55:5b:21:50:
         a6:f5:5c:aa:14:cb:d6:4b:cf:26:7c:b2:6a:54:b5:49:b6:e2:
         23:bf:79:69:79:8b:e1:bb:9b:d1:d0:1c:2a:1d:fe:0c:e4:92:
         13:d1:d1:f1:12:2b:e2:c3:f5:8b:5a:36:54:cd:61:e5:db:f6:
         25:4c:97:f3:99:11:f7:bb:e0:71:b9:a3:fa:28:c0:57:14:31:
         41:49:29:6f:bd:b8:7a:10:23:68:51:2f:cf:e3:8b:1e:ed:99:
         f7:21:8c:7b:34:df:94:1d:a6:38:e2:d8:b9:c8:df:9e:36:e3:
         e9:fc:8b:86:98:a0:91:62:49:91:c5:ab:b9:10:da:7d:05:60:
         99:87:a6:91:84:d0:b0:ff:e7:39:37:01:dc:3c:7c:1f:32:ce:
         c2:1e:22:ba:ec:eb:1b:0a:56:25:cd:5d:4f:5f:b2:ae:ba:e1:
         d5:0f:b9:ab:5b:eb:e7:90:a2:a2:b0:e2:f1:62:05:e5:64:f1:
         8c:82:5e:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ52zxfNuJx6je1Vy3c4o+VwcZykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx
MEU0NDRBMjAeFw0yNDA0MDMxODI3MjRaFw0yNTA0MDIxODMyMjRaMDMxMTAvBgNV
BAMTKEFCQ0EzNTIxMDM2M0U1NkY4NjVBRDY3N0Y2Q0NBN0JCMkQ1NzI2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvttsK/AxM7dSbO5xeAzimb800
4RMtn2NevpOiSlqoyUQ/02PJBIp0nZt/YaFMfwH8Xzr9pPLtt/yIprHZYYvOOikR
S0WvuP0xSJKBXceGWjUjR9PTHXjcZdNT27qfEhjMeWTIddpbgxd/zAuyf6KaltFS
hWPQMxtpcaN9+W47VSmdivgxiRHW6on398wCm8uytiVaiklFYR6Pqj8nET45oURg
gV/I7h9dThqzO21+7+5V/mt0dZXhYnnCINc6H542pxfo0KRbqHq0vXmHghlV/snJ
iMra2US/cDdmdkaOBbLMfbkNBXzqP28rsElyQxKrAnjoHoKzr7NHBwJ6M/NzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUq8o1IQNj5W+GWtZ39synuy1XJm4wHwYDVR0j
BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy
TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG
RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv
MzEzOTMxMmUzMjM0MzMyZTMyMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/zyDANBgkqhkiG9w0BAQsFAAOCAQEAYjWC
Jugx65y0EBzdkKAXHFiSfAPaZhRqzgDcFqQ0WvIM8HfryDcy7bYF3awbP+rx5BnN
cfUAxLef5n1pb4q12aCgkz5VWyFQpvVcqhTL1kvPJnyyalS1SbbiI795aXmL4bub
0dAcKh3+DOSSE9HR8RIr4sP1i1o2VM1h5dv2JUyX85kR97vgcbmj+ijAVxQxQUkp
b724ehAjaFEvz+OLHu2Z9yGMezTflB2mOOLYucjfnjbj6fyLhpigkWJJkcWruRDa
fQVgmYemkYTQsP/nOTcB3Dx8HzLOwh4iuuzrGwpWJc1dT1+yrrrh1Q+5q1vr55Ci
orDi8WIF5WTxjIJehQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org