Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32332d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          ImEJCQZLzquG2jKP+gb/GaVP5Eqqdh+nNAgNMp9Qqi8=
Subject key identifier:   25:F6:31:4B:89:48:45:1F:3C:8D:FA:07:13:93:2C:A0:88:57:40:08
Certificate issuer:       /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial:       588DCAF3680166063C08F99CEE4EB86E8CAAFD7B
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3234203d3e20323633343832.roa
Signing time:             Fri 17 May 2024 18:51:52 +0000
ROA not before:           Fri 17 May 2024 18:46:52 +0000
ROA not after:            Fri 16 May 2025 18:51:52 +0000
asID:                     263482
IP address blocks:        191.242.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:ca:f3:68:01:66:06:3c:08:f9:9c:ee:4e:b8:6e:8c:aa:fd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
        Validity
            Not Before: May 17 18:46:52 2024 GMT
            Not After : May 16 18:51:52 2025 GMT
        Subject: CN=25F6314B8948451F3C8DFA0713932CA088574008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:5c:f4:b5:5c:96:88:83:36:c3:08:cc:2d:
                    b0:aa:e8:79:92:7a:fc:a6:79:48:32:34:3f:8d:73:
                    f9:e9:b7:85:41:13:08:25:dd:92:09:32:e0:6b:c4:
                    22:6a:ff:6f:36:a6:d5:46:19:9a:74:9e:e4:16:3e:
                    50:7e:3c:1d:a3:ad:aa:7b:e8:b5:86:4d:4e:8e:99:
                    eb:75:70:55:33:57:5d:fe:b2:7a:07:86:5f:bd:ac:
                    ec:68:95:e3:bc:b9:29:3f:63:42:8e:b1:a7:22:12:
                    c1:58:ff:b6:4f:07:0f:26:74:d7:99:97:01:92:ef:
                    7e:dc:f5:d0:ec:03:9b:2e:3a:34:2d:56:26:85:e3:
                    7a:9e:10:87:03:c4:1a:90:cb:1a:ba:14:6d:3d:94:
                    0c:5b:48:77:dd:9d:2d:6d:b8:79:aa:e0:c8:40:b3:
                    2b:e2:8a:e8:d9:b0:4a:e3:9d:8a:a5:74:52:c3:cc:
                    08:70:ac:07:94:b7:24:7b:f2:c5:b6:76:2e:31:37:
                    9a:ca:08:81:c4:63:f8:29:f0:c9:7f:9c:5d:79:3b:
                    03:79:3b:fb:ea:5f:17:3e:a7:a8:b5:78:bc:18:9b:
                    45:e5:11:ef:a4:0d:94:8f:48:aa:60:75:6b:36:bd:
                    36:cb:37:9b:20:aa:b1:7c:56:16:f6:f3:6a:aa:56:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:31:4B:89:48:45:1F:3C:8D:FA:07:13:93:2C:A0:88:57:40:08
            X509v3 Authority Key Identifier:
                keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/3139312e3234322e3231362e302f32332d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:05:c7:7b:82:f3:9d:f1:17:2f:bb:6f:6b:bd:da:fd:54:2e:
         d2:3c:bb:c9:f2:95:4d:f9:a4:5b:66:90:99:96:b8:55:be:88:
         0b:b3:fb:17:73:34:59:46:b0:7b:c0:fa:5b:6d:1e:c4:8d:3c:
         04:9e:cd:2a:57:22:50:16:4f:16:8c:95:6e:32:f0:fa:cd:51:
         de:84:27:b5:12:8f:5b:fa:18:bc:d9:07:1d:6d:09:7a:46:f0:
         7c:78:3f:b8:d9:b2:7e:71:85:41:a6:a5:90:67:c6:b3:57:07:
         d2:d0:06:47:50:a0:2c:5b:8a:d8:e3:0a:17:7b:7c:4f:be:88:
         c1:5f:2c:ef:1f:b3:a3:63:3b:c0:32:39:06:9f:50:48:44:5c:
         db:8b:52:76:0e:5c:96:30:5c:d6:dd:c0:f2:99:ec:4f:8f:d4:
         46:12:af:4f:83:92:8e:78:fb:c1:da:33:b2:c3:7d:59:ac:49:
         3f:29:ef:5a:32:78:57:45:05:ca:0e:ba:62:22:38:63:6b:e3:
         6f:66:60:35:15:7d:80:fb:63:59:0f:3c:32:b1:9d:da:a2:7d:
         5e:65:d6:d9:8e:21:7c:02:9b:4f:38:6c:2d:5b:2c:5a:a9:52:
         6f:2b:18:19:d5:b4:f4:93:11:c2:58:18:f1:63:3d:74:97:06:
         09:39:d8:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWI3K82gBZgY8CPmc7k64boyq/XswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOTRBRkY0QzU0MDI3RDU2NDAyQkZDMjdCN0ExRUUy
OUZDQkE1MjAeFw0yNDA1MTcxODQ2NTJaFw0yNTA1MTYxODUxNTJaMDMxMTAvBgNV
BAMTKDI1RjYzMTRCODk0ODQ1MUYzQzhERkEwNzEzOTMyQ0EwODg1NzQwMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzVz0tVyWiIM2wwjMLbCq6HmS
evymeUgyND+Nc/npt4VBEwgl3ZIJMuBrxCJq/282ptVGGZp0nuQWPlB+PB2jrap7
6LWGTU6Omet1cFUzV13+snoHhl+9rOxoleO8uSk/Y0KOsaciEsFY/7ZPBw8mdNeZ
lwGS737c9dDsA5suOjQtViaF43qeEIcDxBqQyxq6FG09lAxbSHfdnS1tuHmq4MhA
syviiujZsErjnYqldFLDzAhwrAeUtyR78sW2di4xN5rKCIHEY/gp8Ml/nF15OwN5
O/vqXxc+p6i1eLwYm0XlEe+kDZSPSKpgdWs2vTbLN5sgqrF8Vhb282qqVldBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJfYxS4lIRR88jfoHE5MsoIhXQAgwHwYDVR0j
BBgwFoAU+/lK/0xUAn1WQCv8J7eh7in8ulIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMS9GQkY5NEFGRjRDNTQwMjdENTY0MDJCRkMyN0I3QTFFRTI5RkNCQTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjk0QUZGNEM1NDAyN0Q1
NjQwMkJGQzI3QjdBMUVFMjlGQ0JBNTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzEv
MzEzOTMxMmUzMjM0MzIyZTMyMzEzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/y2DANBgkqhkiG9w0BAQsFAAOCAQEAEgXH
e4LznfEXL7tva73a/VQu0jy7yfKVTfmkW2aQmZa4Vb6IC7P7F3M0WUawe8D6W20e
xI08BJ7NKlciUBZPFoyVbjLw+s1R3oQntRKPW/oYvNkHHW0JekbwfHg/uNmyfnGF
QaalkGfGs1cH0tAGR1CgLFuK2OMKF3t8T76IwV8s7x+zo2M7wDI5Bp9QSERc24tS
dg5cljBc1t3A8pnsT4/URhKvT4OSjnj7wdozssN9WaxJPynvWjJ4V0UFyg66YiI4
Y2vjb2ZgNRV9gPtjWQ88MrGd2qJ9XmXW2Y4hfAKbTzhsLVssWqlSbysYGdW09JMR
wlgY8WM9dJcGCTnYwQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:59 2024 by rpki-client on console-fra.rpki-client.org