Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
File:                     3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          4WbVgIvvpsfSPQRSStIuRD0eFItNpycpx914IrBt64c=
Subject key identifier:   91:AF:53:EE:90:87:85:ED:F6:17:46:6B:80:6F:F3:16:88:60:04:45
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       6E55E3990E0B65119E9BD71CFB03FFFD83B7EEB0
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        143.255.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:55:e3:99:0e:0b:65:11:9e:9b:d7:1c:fb:03:ff:fd:83:b7:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=91AF53EE908785EDF617466B806FF31688600445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:8d:40:91:94:69:97:81:3d:90:ae:4b:20:
                    40:88:a3:36:8a:68:54:fe:89:d3:4d:83:07:09:5b:
                    a4:e5:da:06:4b:9f:13:46:8d:86:2d:48:a9:0e:ac:
                    06:9a:73:41:97:2e:00:26:a4:ab:63:08:44:67:76:
                    0f:43:f4:f8:9a:9f:78:9e:92:57:6e:83:6c:e1:d9:
                    f8:bf:48:e1:49:d0:34:fb:b5:0f:a4:9b:42:de:8a:
                    ab:b7:36:7e:f0:3c:f9:50:e5:33:75:8b:43:0c:4f:
                    34:1e:fa:45:20:24:99:bf:1a:4b:8e:bd:e6:e7:0e:
                    db:bd:7b:c4:dd:2f:f7:79:a2:dd:4d:79:9e:aa:0a:
                    cf:01:5a:8a:e8:f9:c7:dd:03:79:9f:95:76:c7:99:
                    94:34:85:9f:8e:49:da:e0:c1:77:45:3c:91:db:59:
                    db:c9:af:d5:b0:2b:db:ad:b5:96:a8:e1:77:49:c8:
                    fc:b3:3d:e1:e7:b3:db:8b:a0:5c:01:c3:d9:b6:c0:
                    c3:56:99:32:38:5c:7e:9e:2f:2a:80:09:ef:73:6a:
                    ea:cf:03:f5:ab:46:36:59:54:7f:08:ea:f9:26:b4:
                    d5:dc:fb:e0:c9:e0:54:84:c1:d3:94:52:74:71:fa:
                    cb:ab:a5:b1:66:49:6b:8c:b8:f6:1d:e0:d7:39:24:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:53:EE:90:87:85:ED:F6:17:46:6B:80:6F:F3:16:88:60:04:45
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:6d:05:89:5b:6f:f6:ab:d0:4b:cb:5f:9e:3f:c3:dd:eb:f8:
         63:f5:34:cb:19:fc:c3:95:f9:51:b1:a2:47:99:14:6f:0f:c0:
         a9:e8:e6:44:b8:ac:0e:ee:9a:78:89:64:bb:e9:db:79:4c:08:
         cd:6c:18:ca:fe:51:c4:8c:32:00:9d:15:98:11:5a:5f:8f:5e:
         af:3c:86:8a:b4:6f:e9:5c:70:80:eb:d3:0f:9a:db:96:b6:f4:
         eb:21:06:5c:ed:05:af:dc:6c:81:ad:e6:6a:d2:95:85:39:3b:
         4e:06:dd:34:20:b4:0a:59:74:76:2e:3d:3b:b5:d6:95:1a:0e:
         e3:9e:a8:f5:01:42:d6:72:f7:02:de:47:cb:0a:82:fd:d8:0e:
         b3:b3:a5:ec:d3:e0:82:b1:2c:ed:ea:6a:2e:04:51:91:6a:da:
         cd:c5:0d:4a:c4:40:ad:1c:31:ec:98:8e:08:62:6f:85:f7:47:
         ec:66:7a:38:97:08:09:df:52:85:4a:ce:90:98:bf:d3:97:fc:
         11:53:ed:3b:60:72:93:45:fb:bc:26:9d:b5:a9:a0:09:bc:64:
         8b:51:1d:58:ef:dd:55:93:22:01:4e:86:f9:e0:54:6c:d5:e1:
         3e:d1:79:fd:7b:b6:1b:a6:9c:91:65:a4:6d:cd:44:e6:1f:e6:
         a2:87:8e:b9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUblXjmQ4LZRGem9cc+wP//YO37rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwNkVFM0ExOTcxQkRDQTg4NTY5N0FBMEYxNDAxOUEx
OEQ1NERBRjAeFw0yNDA0MDQwNzU1MjVaFw0yNTA0MDMwODAwMjVaMDMxMTAvBgNV
BAMTKDkxQUY1M0VFOTA4Nzg1RURGNjE3NDY2QjgwNkZGMzE2ODg2MDA0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/k41AkZRpl4E9kK5LIECIozaK
aFT+idNNgwcJW6Tl2gZLnxNGjYYtSKkOrAaac0GXLgAmpKtjCERndg9D9Pian3ie
kldug2zh2fi/SOFJ0DT7tQ+km0Leiqu3Nn7wPPlQ5TN1i0MMTzQe+kUgJJm/GkuO
vebnDtu9e8TdL/d5ot1NeZ6qCs8BWoro+cfdA3mflXbHmZQ0hZ+OSdrgwXdFPJHb
WdvJr9WwK9uttZao4XdJyPyzPeHns9uLoFwBw9m2wMNWmTI4XH6eLyqACe9zaurP
A/WrRjZZVH8I6vkmtNXc++DJ4FSEwdOUUnRx+surpbFmSWuMuPYd4Nc5JBbJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUka9T7pCHhe32F0ZrgG/zFohgBEUwHwYDVR0j
BBgwFoAUqQbuOhlxvcqIVpeqDxQBmhjVTa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt
YWcvMS9BOTA2RUUzQTE5NzFCRENBODg1Njk3QUEwRjE0MDE5QTE4RDU0REFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MDZFRTNBMTk3MUJEQ0E4
ODU2OTdBQTBGMTQwMTlBMThENTREQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBRFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI//xDANBgkqhkiG9w0BAQsFAAOCAQEATm0F
iVtv9qvQS8tfnj/D3ev4Y/U0yxn8w5X5UbGiR5kUbw/AqejmRLisDu6aeIlku+nb
eUwIzWwYyv5RxIwyAJ0VmBFaX49erzyGirRv6VxwgOvTD5rblrb06yEGXO0Fr9xs
ga3matKVhTk7TgbdNCC0Cll0di49O7XWlRoO456o9QFC1nL3At5HywqC/dgOs7Ol
7NPggrEs7epqLgRRkWrazcUNSsRArRwx7JiOCGJvhfdH7GZ6OJcICd9ShUrOkJi/
05f8EVPtO2Byk0X7vCadtamgCbxki1EdWO/dVZMiAU6G+eBUbNXhPtF5/Xu2G6ac
kWWkbc1E5h/mooeOuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:25 2024 by rpki-client on console-fra.rpki-client.org