Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/3138312e3233332e39352e302f32342d3234203d3e20323731343431.roa
File:                     3138312e3233332e39352e302f32342d3234203d3e20323731343431.roa (raw, json)
Hash identifier:          i75LhAWVO2qYptNoV3adFcI5LJWKAl+q/PZ7bTVOLuE=
Subject key identifier:   BD:4D:65:BD:A7:6F:BA:71:0D:B5:CA:AD:A2:93:F8:EB:E1:45:6E:D3
Certificate issuer:       /CN=03D348CD504673CC24A6139BE73024EECBC0A420
Certificate serial:       3DE817A21AE074F47531C66CC2BEE0F59370C9F3
Authority key identifier: 03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/3138312e3233332e39352e302f32342d3234203d3e20323731343431.roa
Signing time:             Thu 04 Apr 2024 13:41:59 +0000
ROA not before:           Thu 04 Apr 2024 13:36:59 +0000
ROA not after:            Thu 03 Apr 2025 13:41:59 +0000
asID:                     271441
IP address blocks:        181.233.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl
                          rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e8:17:a2:1a:e0:74:f4:75:31:c6:6c:c2:be:e0:f5:93:70:c9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03D348CD504673CC24A6139BE73024EECBC0A420
        Validity
            Not Before: Apr  4 13:36:59 2024 GMT
            Not After : Apr  3 13:41:59 2025 GMT
        Subject: CN=BD4D65BDA76FBA710DB5CAADA293F8EBE1456ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:fb:d0:80:de:17:7c:52:43:ef:1e:6d:14:
                    8e:d3:0d:f9:9e:bd:ab:87:f0:e9:93:a8:97:9b:8c:
                    da:d4:a7:56:a0:fe:25:9c:cd:8c:d1:3d:03:32:bc:
                    7a:11:6d:7a:1f:2e:86:42:35:42:53:30:b3:b6:3c:
                    00:ea:44:78:74:6d:8a:29:2c:fc:79:92:f6:ce:a1:
                    47:07:a7:e6:aa:57:1b:e8:8d:50:ca:35:69:88:b8:
                    2f:30:2a:79:a5:99:89:7b:68:13:f5:ef:6c:8b:e2:
                    7b:8b:df:dd:c0:02:6a:41:24:aa:01:e7:c6:9f:95:
                    19:19:f7:6d:a5:4f:50:ce:fa:3e:07:96:95:9d:8d:
                    22:47:0b:f4:85:a5:90:33:da:62:73:23:e1:0e:fd:
                    4e:d2:f3:9e:8a:5b:a0:52:b9:c0:a7:67:11:f3:2f:
                    0c:e3:c4:82:b0:9d:16:93:5a:92:f2:0d:53:05:b9:
                    65:73:1e:c5:e7:ca:fe:42:1f:5a:3a:57:cf:51:79:
                    1e:98:92:c8:3c:22:b6:25:10:31:2e:92:73:79:ad:
                    58:d9:06:8c:ad:43:3c:42:33:0d:e9:79:7a:7b:cd:
                    61:93:a1:5c:49:97:35:97:8b:11:40:ba:b4:68:c4:
                    40:11:e8:93:24:ab:b9:7d:81:e2:72:c2:68:d2:4b:
                    63:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4D:65:BD:A7:6F:BA:71:0D:B5:CA:AD:A2:93:F8:EB:E1:45:6E:D3
            X509v3 Authority Key Identifier:
                keyid:03:D3:48:CD:50:46:73:CC:24:A6:13:9B:E7:30:24:EE:CB:C0:A4:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/03D348CD504673CC24A6139BE73024EECBC0A420.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03D348CD504673CC24A6139BE73024EECBC0A420.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FeywamAHtTsbtFhzLP8A1es3tq9ZLpGaxSwmc8Yw4uhN/1/3138312e3233332e39352e302f32342d3234203d3e20323731343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:bb:67:cc:5d:05:04:a5:e4:07:18:56:ab:fd:45:6b:45:
         c5:99:bd:2b:d6:70:cc:4f:12:7e:e2:7c:ba:07:70:1b:65:a7:
         71:0b:74:a5:6e:47:37:2d:a1:99:5c:f7:4a:0e:b4:34:e3:63:
         e0:49:27:c8:e2:78:09:14:e7:4f:83:ac:5c:9f:d8:56:ee:09:
         01:30:10:48:7c:fa:ce:a4:0a:f2:95:b6:f0:42:f4:c2:ca:52:
         8b:c0:a5:8b:5f:76:db:29:6d:bc:0a:f6:0d:d5:5f:d6:34:12:
         8f:bd:3f:20:1b:1a:13:75:fa:a8:67:fa:cb:14:a9:52:48:ff:
         8a:4f:ce:30:7b:3e:41:9a:d0:71:76:f7:7b:7a:76:d3:d4:7e:
         e6:08:a5:9e:8f:75:71:f5:90:78:00:5b:d0:75:b2:b8:5a:a1:
         b8:27:b5:1f:33:a7:c1:5c:da:cb:8e:b8:5e:62:9a:72:6e:da:
         e9:ec:97:e9:51:b1:d8:93:80:69:13:3f:94:ae:b9:ca:9e:09:
         34:98:ef:59:46:2f:6e:97:13:21:c8:6a:89:6d:42:52:b9:b6:
         17:24:54:29:a9:b9:19:ae:ff:eb:00:61:01:31:1a:56:1f:ae:
         0d:ba:b9:8e:ac:53:ad:c5:b2:a7:00:f4:17:7f:06:07:c7:80:
         cd:4c:87:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPegXohrgdPR1McZswr7g9ZNwyfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEMzQ4Q0Q1MDQ2NzNDQzI0QTYxMzlCRTczMDI0RUVD
QkMwQTQyMDAeFw0yNDA0MDQxMzM2NTlaFw0yNTA0MDMxMzQxNTlaMDMxMTAvBgNV
BAMTKEJENEQ2NUJEQTc2RkJBNzEwREI1Q0FBREEyOTNGOEVCRTE0NTZFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLvvQgN4XfFJD7x5tFI7TDfme
vauH8OmTqJebjNrUp1ag/iWczYzRPQMyvHoRbXofLoZCNUJTMLO2PADqRHh0bYop
LPx5kvbOoUcHp+aqVxvojVDKNWmIuC8wKnmlmYl7aBP172yL4nuL393AAmpBJKoB
58aflRkZ922lT1DO+j4HlpWdjSJHC/SFpZAz2mJzI+EO/U7S856KW6BSucCnZxHz
LwzjxIKwnRaTWpLyDVMFuWVzHsXnyv5CH1o6V89ReR6Yksg8IrYlEDEuknN5rVjZ
BoytQzxCMw3peXp7zWGToVxJlzWXixFAurRoxEAR6JMkq7l9geJywmjSS2MPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvU1lvadvunENtcqtopP46+FFbtMwHwYDVR0j
BBgwFoAUA9NIzVBGc8wkphOb5zAk7svApCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmV5d2FtQUh0VHNidEZoekxQOEExZXMzdHE5WkxwR2F4U3dtYzhZdzR1
aE4vMS8wM0QzNDhDRDUwNDY3M0NDMjRBNjEzOUJFNzMwMjRFRUNCQzBBNDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzRDM0OENENTA0NjczQ0My
NEE2MTM5QkU3MzAyNEVFQ0JDMEE0MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZleXdhbUFIdFRzYnRGaHpMUDhBMWVzM3RxOVpMcEdheFN3bWM4WXc0dWhOLzEv
MzEzODMxMmUzMjMzMzMyZTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16V8wDQYJKoZIhvcNAQELBQADggEBAGFLu2fM
XQUEpeQHGFar/UVrRcWZvSvWcMxPEn7ifLoHcBtlp3ELdKVuRzctoZlc90oOtDTj
Y+BJJ8jieAkU50+DrFyf2FbuCQEwEEh8+s6kCvKVtvBC9MLKUovApYtfdtspbbwK
9g3VX9Y0Eo+9PyAbGhN1+qhn+ssUqVJI/4pPzjB7PkGa0HF293t6dtPUfuYIpZ6P
dXH1kHgAW9B1srhaobgntR8zp8Fc2suOuF5imnJu2unsl+lRsdiTgGkTP5Suucqe
CTSY71lGL26XEyHIaoltQlK5thckVCmpuRmu/+sAYQExGlYfrg26uY6sU63FsqcA
9Bd/BgfHgM1Mh1s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:37 2024 by rpki-client on console-fra.rpki-client.org