Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          +luCSAlVJGhVRJtBed5VeRZK2e0ip0cv6IuRajfKwmQ=
Subject key identifier:   29:7F:40:8C:DE:DD:A0:3D:B4:1F:C6:2C:04:E6:91:44:6E:31:A8:72
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       162AA528EF0187FFE707FABF24664042939E7113
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa
Signing time:             Thu 17 Apr 2025 13:22:22 +0000
ROA not before:           Thu 17 Apr 2025 13:17:22 +0000
ROA not after:            Thu 16 Apr 2026 13:22:22 +0000
asID:                     263482
IP address blocks:        191.242.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 06:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:a5:28:ef:01:87:ff:e7:07:fa:bf:24:66:40:42:93:9e:71:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Apr 17 13:17:22 2025 GMT
            Not After : Apr 16 13:22:22 2026 GMT
        Subject: CN=297F408CDEDDA03DB41FC62C04E691446E31A872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:eb:2e:20:38:35:1a:fd:9b:a9:b5:1f:5a:
                    84:d5:36:9e:c4:5e:8e:34:35:66:22:35:7b:7b:4f:
                    ac:96:ca:04:49:7b:bc:5e:5b:c2:74:15:40:03:23:
                    bc:29:f2:4f:1f:36:ef:70:c1:7f:10:af:da:9b:a2:
                    ff:e1:16:fd:27:37:fc:df:74:7c:cd:19:ef:51:76:
                    8a:17:85:90:5d:96:e3:6c:9d:54:92:b6:76:0a:0b:
                    f8:e3:23:ec:f6:db:6b:9c:37:e9:8b:bc:df:50:35:
                    74:65:75:44:97:fc:0c:0e:6b:a2:4a:4b:87:55:b7:
                    0f:39:65:63:35:b3:32:18:27:5c:bf:14:b5:8b:b3:
                    37:89:f4:47:c9:49:59:be:a9:c0:98:88:5c:ca:8e:
                    23:f7:57:94:80:7f:9b:74:75:8a:29:3f:09:ea:76:
                    e8:07:f1:a8:5b:e1:db:16:dc:9e:0b:0d:52:11:90:
                    5d:c1:1d:77:fa:1b:27:8d:9b:8f:ed:80:9d:2e:b8:
                    f0:83:b0:c7:91:73:6b:5e:a5:43:12:57:64:7c:e9:
                    cb:4b:ae:f7:44:f8:28:99:b0:41:56:93:1a:3b:f6:
                    88:c9:ca:3a:8f:5c:a6:65:2c:d1:ab:dd:be:32:fc:
                    8f:c6:03:cd:82:b8:81:9e:94:bb:e1:23:26:8f:ec:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7F:40:8C:DE:DD:A0:3D:B4:1F:C6:2C:04:E6:91:44:6E:31:A8:72
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:de:ba:a2:1e:44:ea:ab:eb:86:9c:11:38:cb:d2:e4:16:
         c2:96:02:1c:b7:8b:ae:89:17:3f:24:8a:67:da:c1:55:80:d7:
         ab:0b:55:ef:64:d6:2b:0a:9c:86:ea:de:f7:db:0d:5b:90:35:
         ce:25:1f:ed:ab:9c:95:f0:cf:12:e4:cc:16:e8:a0:4d:2a:76:
         1e:97:6b:ec:4a:1d:de:98:3d:e8:fe:00:3f:29:7c:4f:07:51:
         16:d9:ec:c4:c5:71:d7:74:4d:cc:1a:24:e5:25:79:37:05:ec:
         d1:7d:74:1a:5e:26:62:14:54:c2:41:c0:50:84:51:db:cc:a0:
         ae:fe:2d:7c:f0:63:0c:09:d7:c7:c7:e9:a1:71:2f:b5:5f:b6:
         08:b3:25:96:73:88:d4:8a:ba:d9:9c:37:6a:59:44:93:f6:80:
         7c:11:ce:42:70:59:33:e8:a5:40:21:2c:5b:57:ba:ba:99:10:
         c6:c7:34:33:c7:71:54:bf:5a:7a:cd:d6:18:ca:8b:36:3a:81:
         a5:11:ed:c6:3c:d4:3b:11:cf:ef:3c:d7:ab:84:50:0e:a8:22:
         6f:08:7d:0c:b3:b3:d7:c1:e4:73:df:c0:91:20:7b:8a:34:17:
         81:85:98:97:d4:53:68:f3:83:a5:5a:71:7e:c4:ad:32:19:da:
         57:9f:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:08 2025 by rpki-client on console.sobornost.net