Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          SSkj68DGnAE2TCIVeNkVSjm2b44cCTMCHHhSeQT4tRg=
Subject key identifier:   8E:1E:4D:EE:4F:9A:9F:8F:9E:8C:9B:9C:03:80:8B:45:BE:F6:D2:98
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       134BDA57A463963CC944265482134705AA2F9375
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa
Signing time:             Mon 31 Mar 2025 17:13:33 +0000
ROA not before:           Mon 31 Mar 2025 17:08:33 +0000
ROA not after:            Mon 30 Mar 2026 17:13:33 +0000
asID:                     263482
IP address blocks:        191.242.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 12:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:da:57:a4:63:96:3c:c9:44:26:54:82:13:47:05:aa:2f:93:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Mar 31 17:08:33 2025 GMT
            Not After : Mar 30 17:13:33 2026 GMT
        Subject: CN=8E1E4DEE4F9A9F8F9E8C9B9C03808B45BEF6D298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:df:e9:d7:fe:8d:8f:3d:37:b0:fe:0f:4c:
                    55:b6:e0:a4:ca:dc:71:84:e8:c0:b7:4d:8f:cb:99:
                    88:a5:a7:ec:ed:6a:94:7f:1f:70:56:d7:86:4c:13:
                    78:37:f4:37:76:44:4f:41:22:3a:cd:9f:5d:75:4b:
                    6e:7f:2a:66:91:f2:81:51:9f:71:1b:0c:52:b5:09:
                    77:f6:ac:6b:cf:a7:c1:44:33:ad:c7:53:ee:4a:47:
                    68:bb:3c:43:fe:9b:02:a3:13:cf:31:4a:7e:a4:37:
                    a4:58:cb:34:29:81:1d:3d:78:3a:e9:51:4b:2a:64:
                    a8:c0:f1:b9:d6:b7:95:15:9a:db:ee:00:51:30:ac:
                    17:dd:6f:ba:9a:5f:66:ae:0c:71:c1:02:9e:d2:03:
                    f8:86:1a:64:24:44:36:16:d9:e8:ae:7b:60:a6:67:
                    79:d2:eb:e1:d8:ce:1d:38:74:82:5e:b6:63:33:2b:
                    2d:82:99:88:8a:4b:e3:9e:b8:04:69:5b:52:8a:b3:
                    3d:7c:95:0b:44:dd:56:da:0c:a1:dc:1a:c1:77:ae:
                    d7:e6:49:d0:19:bb:95:c8:01:1c:91:24:8d:9c:90:
                    1e:74:23:38:7d:f5:e2:5e:6b:84:19:6a:31:f2:5a:
                    33:98:48:a2:eb:b5:de:7b:b6:5e:5c:67:ab:ab:ad:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1E:4D:EE:4F:9A:9F:8F:9E:8C:9B:9C:03:80:8B:45:BE:F6:D2:98
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:49:08:30:84:42:9b:3e:e8:31:10:fa:37:c6:00:2e:7f:80:
         e7:53:bc:e3:50:bd:a8:fc:37:26:86:9d:50:68:ac:81:db:82:
         a7:69:8b:3b:47:ac:96:39:5b:6f:e3:0d:14:c9:b5:73:65:d8:
         6e:ff:7f:b7:c9:af:d2:30:66:cb:9f:d2:56:b8:77:79:dc:33:
         9a:c2:b4:e9:bd:cd:f0:18:e7:86:d5:2c:24:06:48:8a:8e:2f:
         6c:9d:7b:5d:c5:52:0d:5d:b4:72:7e:54:f1:c1:c9:41:8e:9e:
         1d:60:03:68:99:95:49:73:1f:85:0f:0a:5c:63:c9:77:0f:31:
         15:00:49:f1:70:49:db:fd:32:c0:38:43:08:83:12:00:e9:7b:
         0d:35:8d:80:8c:33:0a:95:95:2f:5d:f1:12:6c:b2:95:a1:21:
         62:30:36:ab:8f:38:8a:6b:02:27:57:f4:61:81:7a:7d:93:b0:
         ba:4d:53:5f:9c:96:e1:80:87:75:66:2d:68:81:53:61:eb:b5:
         42:04:92:69:1f:72:71:ff:e5:d0:05:b6:d0:7b:bc:82:f4:84:
         86:1c:24:f9:73:98:78:df:13:0b:61:c0:89:75:03:bf:b8:f1:
         18:16:5a:2a:5f:ae:3c:70:85:34:a4:73:43:55:32:50:c0:5d:
         6a:43:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:21 2025 by rpki-client on console.sobornost.net