Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          Lq33j0nwbCzizkfK4ucoMHpApBuyKxtyssZQZqdA8SQ=
Subject key identifier:   FA:78:35:06:2C:6C:BD:6D:79:B0:E0:30:BC:AD:2E:82:F4:E3:FA:DA
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       4D5A8BFE450E327511C129E640F126B61501A6DC
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:32 +0000
ROA not before:           Mon 31 Mar 2025 17:08:32 +0000
ROA not after:            Mon 30 Mar 2026 17:13:32 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5a:8b:fe:45:0e:32:75:11:c1:29:e6:40:f1:26:b6:15:01:a6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:32 2025 GMT
            Not After : Mar 30 17:13:32 2026 GMT
        Subject: CN=FA7835062C6CBD6D79B0E030BCAD2E82F4E3FADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:6b:1c:3b:15:15:9c:7e:2c:14:df:d5:f3:
                    cc:2d:82:e1:6e:fc:fc:1c:b7:73:99:12:fc:10:e0:
                    5a:01:e1:12:0a:1b:79:7c:27:57:bb:7b:ed:8d:a6:
                    62:33:14:eb:8e:6b:a8:ac:74:19:c1:7b:0c:52:7f:
                    1f:3c:f1:44:a1:2d:d7:00:57:5f:e0:24:21:26:6c:
                    f1:68:0f:70:53:56:92:31:81:44:79:81:4c:b0:d3:
                    ae:df:4d:06:57:b3:2f:3b:85:98:43:af:7d:2d:ea:
                    39:90:2f:f9:ab:7c:ba:09:f4:7d:ee:7f:50:34:6d:
                    38:d2:f3:58:5e:85:4f:cc:61:fe:7c:03:a6:23:9d:
                    2f:42:23:3d:2e:29:a3:62:fd:8c:4c:e6:51:24:2b:
                    be:57:76:66:c8:6e:40:5a:96:fc:d3:31:67:d0:48:
                    80:c8:8b:47:ee:c5:57:66:f9:54:fd:6e:93:41:65:
                    25:9c:48:bd:ff:bb:ea:e7:33:29:25:51:70:73:38:
                    c4:89:e8:d3:d9:c3:01:e9:34:a2:c9:a7:ef:75:d0:
                    51:67:54:7b:80:16:be:eb:03:fe:62:dd:8b:a1:34:
                    18:8d:b5:92:f1:fa:ec:6a:c1:23:34:f1:3c:a6:ae:
                    e6:e2:4d:3b:20:95:ff:fe:10:0e:ef:cf:65:de:4f:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:35:06:2C:6C:BD:6D:79:B0:E0:30:BC:AD:2E:82:F4:E3:FA:DA
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:c6:f5:a3:25:6f:2f:92:ab:e2:31:16:e8:f8:4f:09:eb:
         9f:f8:ba:0e:9c:b5:6a:c3:a1:28:e7:f7:bb:12:05:a5:3d:5f:
         c4:92:06:d4:e0:3c:95:10:d2:ea:0a:bb:f2:56:bc:2c:28:16:
         20:51:6f:81:1a:cc:29:2c:d3:9c:43:32:87:82:ae:65:dd:e6:
         4a:d3:e9:be:d6:a2:d4:d1:fa:9b:9b:c7:37:f5:1a:84:26:21:
         a3:7a:be:36:4f:61:ae:83:80:52:ab:c2:5a:89:3a:c4:1d:31:
         7e:ff:1e:d7:d8:15:87:19:e0:87:74:d1:de:96:8f:e2:26:c0:
         2d:d6:e7:9f:4c:26:92:c1:10:cc:a7:12:09:f9:6d:1f:bf:52:
         a3:f0:47:f8:81:b1:bf:34:c3:f3:db:64:d7:38:49:41:30:d9:
         4e:a5:63:b3:df:ae:c6:ea:bc:37:5c:82:f3:13:3c:86:8d:fa:
         a9:3b:0a:99:d1:66:f0:0f:6b:25:3b:08:3b:08:8f:a8:23:ea:
         f3:c7:02:53:93:2b:67:da:d6:b1:c2:d5:d7:15:b6:a8:2d:76:
         2d:42:4e:50:da:0b:d0:cb:c7:da:01:81:39:11:b9:39:2c:da:
         ee:13:ba:c0:67:8b:9f:5e:05:0b:9f:de:2f:35:5e:a2:18:51:
         2e:b2:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net