Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa
File:                     3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa (raw, json)
Hash identifier:          M9pXzfqaGI4CMPdVS8T7PmDtL2tlBjfRIHOBRQvtI+M=
Subject key identifier:   9E:ED:34:FA:36:7D:5E:0F:9B:75:2B:E6:3F:02:09:29:86:BA:86:70
Certificate issuer:       /CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
Certificate serial:       7FC1AE63C57BB07FE541D0909D03C205B8C90C9B
Authority key identifier: F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa
Signing time:             Fri 17 May 2024 14:38:45 +0000
ROA not before:           Fri 17 May 2024 14:33:45 +0000
ROA not after:            Fri 16 May 2025 14:38:45 +0000
asID:                     265173
IP address blocks:        167.249.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl
                          rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c1:ae:63:c5:7b:b0:7f:e5:41:d0:90:9d:03:c2:05:b8:c9:0c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA
        Validity
            Not Before: May 17 14:33:45 2024 GMT
            Not After : May 16 14:38:45 2025 GMT
        Subject: CN=9EED34FA367D5E0F9B752BE63F02092986BA8670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:0a:35:09:62:a7:e3:37:aa:fa:c5:90:07:
                    73:9a:9f:2b:ac:e7:11:4b:7c:97:16:35:c2:41:9e:
                    ce:84:95:72:49:6f:be:46:dd:f4:13:0d:e8:4f:de:
                    c2:80:56:e7:52:f1:77:98:55:23:2c:78:bc:35:dd:
                    b4:55:61:a6:0f:8a:d1:8c:3d:f3:dc:8b:f2:ea:09:
                    e5:9b:9c:45:af:7f:6b:09:89:ab:eb:5a:78:86:1d:
                    d8:d9:8a:1b:42:eb:9a:b9:16:e6:68:ec:0e:e8:98:
                    3c:2e:2d:1a:a8:c1:52:d9:ec:f4:c6:b8:0b:b4:43:
                    ae:2e:fa:60:79:2c:aa:51:7f:71:98:62:e8:50:ba:
                    ff:ee:dc:ee:15:ce:73:8c:4b:2c:eb:c3:e9:07:60:
                    43:35:cc:c4:37:79:17:ec:17:2c:c6:b7:43:64:26:
                    f8:f8:d9:4d:b6:4e:75:ac:c4:86:90:5d:88:a4:c8:
                    42:51:0a:25:f5:0b:f0:fe:9d:3b:0b:0a:3b:eb:5f:
                    49:4b:c9:f3:01:5f:ba:ba:38:55:8d:11:9d:7c:5b:
                    ed:f4:1a:49:c2:d1:ea:fb:d1:66:9e:66:ac:77:69:
                    3a:5a:36:d1:28:bf:9a:f3:13:79:a9:74:a7:61:e9:
                    ba:78:c7:d8:af:f3:8b:0c:43:c2:71:a9:0d:03:cf:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:ED:34:FA:36:7D:5E:0F:9B:75:2B:E6:3F:02:09:29:86:BA:86:70
            X509v3 Authority Key Identifier:
                keyid:F3:0F:D2:44:C9:8A:98:EC:9B:A0:BD:ED:7B:EF:20:DD:31:ED:58:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F30FD244C98A98EC9BA0BDED7BEF20DD31ED58CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HBhfvKgHpMehEX7DSnqKWzZh6TBWSa5ysDQKSYU3auqE/0/3136372e3234392e3234372e302f32342d3234203d3e20323635313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:41:61:c8:84:87:f3:f4:2d:f1:98:1b:dc:26:7e:22:2f:b2:
         54:1b:dc:6d:53:1f:d9:fc:f9:0f:71:ea:5f:ff:20:5e:76:b9:
         d5:31:fc:7b:dd:16:c7:e4:94:c0:9c:2c:1d:30:32:37:2a:73:
         35:76:9e:d4:97:90:e1:d8:a2:82:8e:e6:b9:59:8f:ef:c2:d7:
         b9:6f:00:fc:28:f9:28:9f:8b:12:15:06:bb:ff:f2:0f:9e:aa:
         d3:c8:25:3f:99:70:f4:a5:78:6d:d9:fd:29:45:33:7f:03:0e:
         f5:84:93:c3:35:97:43:c9:5e:02:c6:1c:a6:ee:82:62:79:b2:
         db:0d:cc:0e:6b:dc:43:82:f0:1e:ee:d3:8b:cc:e1:cf:44:64:
         54:eb:bf:33:52:62:3f:9e:f0:00:5b:dc:2a:82:a9:33:ec:65:
         ab:2b:9d:c3:2e:2b:67:d0:31:79:84:2b:bc:d0:b3:30:6c:f8:
         34:1c:d2:10:00:ac:d7:1b:59:de:20:ec:b2:dd:be:3b:cd:91:
         a5:07:73:62:ec:b2:ae:de:4a:7a:6e:0e:57:1b:00:ca:8f:95:
         fe:3b:6f:8f:3b:5b:3e:82:ee:c0:ab:c1:f6:ac:b8:17:df:1d:
         f0:dc:62:97:4e:be:e0:77:08:e1:5b:6c:0a:67:ae:ac:97:8b:
         ff:b6:2d:d9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf8GuY8V7sH/lQdCQnQPCBbjJDJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMwRkQyNDRDOThBOThFQzlCQTBCREVEN0JFRjIwREQz
MUVENThDQTAeFw0yNDA1MTcxNDMzNDVaFw0yNTA1MTYxNDM4NDVaMDMxMTAvBgNV
BAMTKDlFRUQzNEZBMzY3RDVFMEY5Qjc1MkJFNjNGMDIwOTI5ODZCQTg2NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcewo1CWKn4zeq+sWQB3Oanyus
5xFLfJcWNcJBns6ElXJJb75G3fQTDehP3sKAVudS8XeYVSMseLw13bRVYaYPitGM
PfPci/LqCeWbnEWvf2sJiavrWniGHdjZihtC65q5FuZo7A7omDwuLRqowVLZ7PTG
uAu0Q64u+mB5LKpRf3GYYuhQuv/u3O4VznOMSyzrw+kHYEM1zMQ3eRfsFyzGt0Nk
Jvj42U22TnWsxIaQXYikyEJRCiX1C/D+nTsLCjvrX0lLyfMBX7q6OFWNEZ18W+30
GknC0er70WaeZqx3aTpaNtEov5rzE3mpdKdh6bp4x9iv84sMQ8JxqQ0DzycJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnu00+jZ9Xg+bdSvmPwIJKYa6hnAwHwYDVR0j
BBgwFoAU8w/SRMmKmOyboL3te+8g3THtWMowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEJoZnZLZ0hwTWVoRVg3RFNucUtXelpoNlRCV1NhNXlzRFFLU1lVM2F1
cUUvMC9GMzBGRDI0NEM5OEE5OEVDOUJBMEJERUQ3QkVGMjBERDMxRUQ1OENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMEZEMjQ0Qzk4QTk4RUM5
QkEwQkRFRDdCRUYyMEREMzFFRDU4Q0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hCaGZ2S2dIcE1laEVYN0RTbnFLV3paaDZUQldTYTV5c0RRS1NZVTNhdXFFLzAv
MzEzNjM3MmUzMjM0MzkyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf59zANBgkqhkiG9w0BAQsFAAOCAQEAiEFh
yISH8/Qt8Zgb3CZ+Ii+yVBvcbVMf2fz5D3HqX/8gXna51TH8e90Wx+SUwJwsHTAy
NypzNXae1JeQ4diigo7muVmP78LXuW8A/Cj5KJ+LEhUGu//yD56q08glP5lw9KV4
bdn9KUUzfwMO9YSTwzWXQ8leAsYcpu6CYnmy2w3MDmvcQ4LwHu7Ti8zhz0RkVOu/
M1JiP57wAFvcKoKpM+xlqyudwy4rZ9AxeYQrvNCzMGz4NBzSEACs1xtZ3iDsst2+
O82RpQdzYuyyrt5Kem4OVxsAyo+V/jtvjztbPoLuwKvB9qy4F98d8Nxil06+4HcI
4VtsCmeurJeL/7Yt2Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org