Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa
File:                     3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa (raw, json)
Hash identifier:          3KM3gVogRPZ3CDHmjPMR9eB+o5n4+9QkWK6fxxW3yZU=
Subject key identifier:   01:90:BE:7E:EC:E2:5E:C8:D7:74:8A:09:FB:DC:EB:66:B4:A8:F8:53
Certificate issuer:       /CN=26482FC136F55A1EC85E625FA1203C2750189C48
Certificate serial:       63FDABD8C1BB29DBA8F24CC7C5824736C7FE12B7
Authority key identifier: 26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa
Signing time:             Thu 02 May 2024 15:16:24 +0000
ROA not before:           Thu 02 May 2024 15:11:24 +0000
ROA not after:            Thu 01 May 2025 15:16:24 +0000
asID:                     267423
IP address blocks:        181.191.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl
                          rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:ab:d8:c1:bb:29:db:a8:f2:4c:c7:c5:82:47:36:c7:fe:12:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26482FC136F55A1EC85E625FA1203C2750189C48
        Validity
            Not Before: May  2 15:11:24 2024 GMT
            Not After : May  1 15:16:24 2025 GMT
        Subject: CN=0190BE7EECE25EC8D7748A09FBDCEB66B4A8F853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:40:3e:5d:4f:ab:3f:b2:2b:ba:74:88:79:
                    93:d9:ce:6c:3f:0b:61:62:56:90:13:da:8d:3d:89:
                    02:61:60:5f:7a:74:9c:27:36:ea:35:62:4f:99:43:
                    a6:a1:8d:06:1e:81:1d:32:13:b0:29:a5:f7:18:55:
                    8e:62:9e:6f:4f:d2:da:3d:2c:fe:9a:94:68:f1:2e:
                    75:54:a8:54:84:e1:ec:28:58:fb:4e:32:9b:51:9a:
                    c4:92:22:42:6b:9a:c9:e7:7a:50:cc:77:5a:08:02:
                    39:fa:8a:d0:4c:16:00:e9:56:72:2e:5d:d2:32:f7:
                    82:38:0a:93:32:2c:5f:10:23:a2:81:54:f3:07:a2:
                    03:94:7d:f8:1f:36:b7:b0:b8:3a:cc:9e:ba:c5:20:
                    07:ec:27:3b:a3:1c:86:8d:04:c2:64:30:e3:9a:d9:
                    5a:41:3c:c2:e8:7d:7c:e0:ed:0f:da:ae:eb:b4:f8:
                    7d:2d:be:1c:f8:53:d2:59:e9:7f:43:cc:11:20:25:
                    00:f4:f5:ba:3c:f9:30:46:89:7d:14:17:e4:0e:39:
                    b7:b0:3a:96:fa:09:57:e5:3a:63:cd:8f:56:46:99:
                    2b:6d:c9:d2:49:73:a0:02:69:16:ef:94:43:64:0d:
                    be:ca:44:72:56:18:d5:9f:96:4b:53:2c:da:d6:02:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:BE:7E:EC:E2:5E:C8:D7:74:8A:09:FB:DC:EB:66:B4:A8:F8:53
            X509v3 Authority Key Identifier:
                keyid:26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:33:16:9c:72:e3:fc:03:c8:dc:6c:ef:90:9f:1f:3a:0b:0f:
         f0:42:de:ed:7a:e7:6e:dc:93:1d:34:63:18:8b:85:bf:15:3a:
         a9:0c:0a:ca:a4:6a:08:80:33:3a:b7:bf:68:3c:a0:39:2d:56:
         a2:9a:b4:d7:15:a9:de:6a:83:07:2e:56:85:e9:3b:d2:c5:98:
         83:c9:93:51:ff:5d:da:c5:10:4d:00:bd:45:ea:ad:fe:06:53:
         c3:62:be:90:a9:2c:52:6b:55:96:6b:b0:78:d2:65:a2:c1:33:
         24:83:da:2a:b1:b5:61:76:0f:bd:ee:41:cf:d4:02:a8:c5:d7:
         b5:48:15:34:62:d1:1d:f4:06:cb:8a:2b:cb:3c:f9:64:82:f1:
         59:9b:00:16:01:89:f5:af:ac:fd:6d:50:f6:43:c4:a6:da:c1:
         d1:dc:55:a4:c5:55:b5:54:45:a6:e2:d8:0b:79:b9:4b:d1:55:
         13:68:9d:0d:09:07:dc:86:0e:48:27:6b:86:23:bf:ee:f7:48:
         ba:5b:24:76:3e:91:db:97:28:d1:ab:f4:0c:2e:cd:32:e8:08:
         e4:1b:e5:3e:5b:47:01:37:5e:f2:a3:40:f0:40:81:0c:f5:1e:
         b9:5f:ce:9d:05:1d:75:6d:5d:d2:68:63:c3:a7:cd:a9:b5:04:
         69:57:29:d2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY/2r2MG7Kduo8kzHxYJHNsf+ErcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY0ODJGQzEzNkY1NUExRUM4NUU2MjVGQTEyMDNDMjc1
MDE4OUM0ODAeFw0yNDA1MDIxNTExMjRaFw0yNTA1MDExNTE2MjRaMDMxMTAvBgNV
BAMTKDAxOTBCRTdFRUNFMjVFQzhENzc0OEEwOUZCRENFQjY2QjRBOEY4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMeUA+XU+rP7IrunSIeZPZzmw/
C2FiVpAT2o09iQJhYF96dJwnNuo1Yk+ZQ6ahjQYegR0yE7AppfcYVY5inm9P0to9
LP6alGjxLnVUqFSE4ewoWPtOMptRmsSSIkJrmsnnelDMd1oIAjn6itBMFgDpVnIu
XdIy94I4CpMyLF8QI6KBVPMHogOUffgfNrewuDrMnrrFIAfsJzujHIaNBMJkMOOa
2VpBPMLofXzg7Q/aruu0+H0tvhz4U9JZ6X9DzBEgJQD09bo8+TBGiX0UF+QOObew
Opb6CVflOmPNj1ZGmSttydJJc6ACaRbvlENkDb7KRHJWGNWflktTLNrWAsJ/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAZC+fuziXsjXdIoJ+9zrZrSo+FMwHwYDVR0j
BBgwFoAUJkgvwTb1Wh7IXmJfoSA8J1AYnEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkFQUUJjWk43VVVhVVNkRjlDWDh2Q0NIeGdia3FrbXZCWk5VaTFhcHFn
TDIvMC8yNjQ4MkZDMTM2RjU1QTFFQzg1RTYyNUZBMTIwM0MyNzUwMTg5QzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NDgyRkMxMzZGNTVBMUVD
ODVFNjI1RkExMjAzQzI3NTAxODlDNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZBUFFCY1pON1VVYVVTZEY5Q1g4dkNDSHhnYmtxa212QlpOVWkxYXBxZ0wyLzAv
MzEzODMxMmUzMTM5MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNzM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/dDANBgkqhkiG9w0BAQsFAAOCAQEAuDMW
nHLj/API3GzvkJ8fOgsP8ELe7XrnbtyTHTRjGIuFvxU6qQwKyqRqCIAzOre/aDyg
OS1Wopq01xWp3mqDBy5Whek70sWYg8mTUf9d2sUQTQC9Reqt/gZTw2K+kKksUmtV
lmuweNJlosEzJIPaKrG1YXYPve5Bz9QCqMXXtUgVNGLRHfQGy4oryzz5ZILxWZsA
FgGJ9a+s/W1Q9kPEptrB0dxVpMVVtVRFpuLYC3m5S9FVE2idDQkH3IYOSCdrhiO/
7vdIulskdj6R25co0av0DC7NMugI5BvlPltHATde8qNA8ECBDPUeuV/OnQUddW1d
0mhjw6fNqbUEaVcp0g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:11 2024 by rpki-client on console-fra.rpki-client.org