Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          q1viAa39vaxFSE1yqtK6yk224kBDBQ411MhycjLIs5o=
Subject key identifier:   8A:FA:A1:0A:2F:3C:64:A2:2B:93:CC:C1:2E:D4:7A:73:48:D7:C3:84
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       675F4F5D26EDD29961C1565FEFF80AA9EADAD124
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:30 +0000
ROA not before:           Mon 31 Mar 2025 17:08:30 +0000
ROA not after:            Mon 30 Mar 2026 17:13:30 +0000
asID:                     263482
IP address blocks:        191.242.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5f:4f:5d:26:ed:d2:99:61:c1:56:5f:ef:f8:0a:a9:ea:da:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:30 2025 GMT
            Not After : Mar 30 17:13:30 2026 GMT
        Subject: CN=8AFAA10A2F3C64A22B93CCC12ED47A7348D7C384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:6b:60:71:3e:bc:5a:7e:9b:15:77:94:22:9f:
                    03:05:2c:9e:8c:59:06:55:8e:eb:24:a7:ba:cd:51:
                    ab:9a:97:0b:6c:5b:a8:7b:60:7c:6b:92:7c:0d:ca:
                    b7:82:b8:c7:7f:d3:1c:5f:fe:4f:e8:98:ca:fd:ee:
                    28:a0:cd:e3:f7:99:98:57:e2:18:26:2d:eb:ad:5b:
                    26:4d:f4:b5:a6:3e:16:9c:33:93:40:d9:38:bc:e0:
                    07:91:f8:6e:e0:73:fa:43:a3:da:45:f6:bd:1c:59:
                    6f:4d:6f:3a:0c:5b:76:23:c2:14:9e:39:f9:61:e5:
                    9d:e6:87:fd:42:7e:c4:94:5f:30:7b:9d:d4:8b:10:
                    74:3c:ed:13:12:c7:ef:e3:b9:b9:ab:ec:55:79:ba:
                    0d:59:ac:92:55:19:41:78:38:c5:cb:31:80:4a:cb:
                    ad:0e:a9:60:42:91:67:81:f8:6f:9a:41:d7:42:3c:
                    be:73:b7:b8:81:ae:e6:b0:ac:8d:bb:e4:19:31:c9:
                    0e:95:1e:0c:8b:92:6d:4e:3d:e8:cf:e4:ca:9f:36:
                    a3:31:22:8d:14:f1:aa:da:7a:1b:a1:a9:18:e5:bb:
                    3d:f0:f2:cb:77:21:dc:22:af:67:f9:c7:25:38:d9:
                    17:23:73:6a:14:93:7e:23:92:79:ba:5f:29:0c:09:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FA:A1:0A:2F:3C:64:A2:2B:93:CC:C1:2E:D4:7A:73:48:D7:C3:84
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:ac:b8:02:eb:6e:00:0f:00:44:cc:00:2f:f5:92:9d:40:
         4b:fa:0e:a8:52:b2:c3:1c:4a:e0:bb:e2:50:98:12:9a:30:4f:
         28:06:81:f4:b4:cc:5b:66:c9:da:7b:2e:b6:03:ae:de:0d:03:
         a2:b4:c4:b7:2c:84:8a:e4:ed:03:40:93:92:8a:67:77:d5:fc:
         63:e5:1f:1d:ef:2f:91:b7:7d:b1:e0:4f:26:6b:7e:b3:1c:03:
         93:f5:78:da:6a:e4:b3:9f:19:c6:76:a6:24:58:96:aa:cf:0b:
         38:c4:d6:c1:cd:66:ef:cd:5e:5e:f3:63:23:23:d9:17:50:5d:
         77:0c:a8:42:1a:4f:54:79:c9:ec:bd:c0:ce:c1:e2:a4:49:39:
         c7:6c:01:fb:c8:90:e6:9f:7b:ca:12:1c:bd:22:e8:13:5d:d3:
         5a:87:b6:23:81:81:12:1b:ae:af:cd:3e:3d:25:23:7a:04:42:
         52:59:cb:09:5a:08:e6:4d:07:42:0f:8e:22:a5:6f:c1:57:b5:
         ee:0a:ba:c7:8d:61:a7:6d:b7:bb:9e:c8:c0:4a:ab:7c:2a:fe:
         15:2b:e7:e7:31:2b:ca:b8:49:72:51:d1:0a:3a:48:da:00:f8:
         d9:22:78:5f:3c:9d:8c:b4:32:e7:bc:f2:6d:7f:06:42:92:38:
         5d:92:a6:bb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ19PXSbt0plhwVZf7/gKqera0SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBEQkQzQTBCNTREMTlFMTM1QkE1M0IzMUM0NTg4NDJD
ODlENDlGMzAeFw0yNTAzMzExNzA4MzBaFw0yNjAzMzAxNzEzMzBaMDMxMTAvBgNV
BAMTKDhBRkFBMTBBMkYzQzY0QTIyQjkzQ0NDMTJFRDQ3QTczNDhEN0MzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+a2BxPrxafpsVd5QinwMFLJ6M
WQZVjuskp7rNUaualwtsW6h7YHxrknwNyreCuMd/0xxf/k/omMr97iigzeP3mZhX
4hgmLeutWyZN9LWmPhacM5NA2Ti84AeR+G7gc/pDo9pF9r0cWW9NbzoMW3YjwhSe
Oflh5Z3mh/1CfsSUXzB7ndSLEHQ87RMSx+/jubmr7FV5ug1ZrJJVGUF4OMXLMYBK
y60OqWBCkWeB+G+aQddCPL5zt7iBruawrI275BkxyQ6VHgyLkm1OPejP5MqfNqMx
Io0U8araehuhqRjluz3w8st3Idwir2f5xyU42Rcjc2oUk34jknm6XykMCf6PAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUivqhCi88ZKIrk8zBLtR6c0jXw4QwHwYDVR0j
BBgwFoAUINvToLVNGeE1ulOzHEWIQsidSfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8yMERCRDNBMEI1NEQxOUUxMzVCQTUzQjMxQzQ1ODg0MkM4OUQ0OUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwREJEM0EwQjU0RDE5RTEz
NUJBNTNCMzFDNDU4ODQyQzg5RDQ5RjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/y2DANBgkqhkiG9w0BAQsFAAOCAQEAnwis
uALrbgAPAETMAC/1kp1AS/oOqFKywxxK4LviUJgSmjBPKAaB9LTMW2bJ2nsutgOu
3g0DorTEtyyEiuTtA0CTkopnd9X8Y+UfHe8vkbd9seBPJmt+sxwDk/V42mrks58Z
xnamJFiWqs8LOMTWwc1m781eXvNjIyPZF1BddwyoQhpPVHnJ7L3AzsHipEk5x2wB
+8iQ5p97yhIcvSLoE13TWoe2I4GBEhuur80+PSUjegRCUlnLCVoI5k0HQg+OIqVv
wVe17gq6x41hp223u57IwEqrfCr+FSvn5zEryrhJclHRCjpI2gD42SJ4XzydjLQy
57zybX8GQpI4XZKmuw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:21:38 2025 by rpki-client