Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          dF5pn73MPtT0kTemT9buqdbbJitovpV9wr6FpeesSyo=
Subject key identifier:   36:12:FF:71:9E:43:ED:BA:23:11:87:EF:99:D0:A8:18:4C:3D:36:57
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       785850D87C8059CDC3747A7DC20A7EF69E52A164
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
Signing time:             Wed 21 May 2025 18:42:23 +0000
ROA not before:           Wed 21 May 2025 18:37:23 +0000
ROA not after:            Wed 20 May 2026 18:42:23 +0000
asID:                     264011
IP address blocks:        143.0.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 12:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:58:50:d8:7c:80:59:cd:c3:74:7a:7d:c2:0a:7e:f6:9e:52:a1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: May 21 18:37:23 2025 GMT
            Not After : May 20 18:42:23 2026 GMT
        Subject: CN=3612FF719E43EDBA231187EF99D0A8184C3D3657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:60:2b:f6:89:5d:d3:ba:43:6a:94:a6:c3:
                    02:ed:f7:53:93:90:9f:41:c5:b5:e1:20:ed:c6:00:
                    3c:cc:8a:9b:ec:7a:49:e8:aa:00:f4:16:f9:12:81:
                    f6:84:99:6c:47:99:90:aa:28:7d:0b:d2:72:f6:86:
                    80:79:b3:d1:7e:e9:0d:a5:be:d1:c1:10:df:50:a6:
                    5e:4e:69:1a:78:20:c0:d1:8d:af:63:a9:78:2e:f4:
                    75:a2:35:a4:67:84:4c:6e:60:68:a1:8f:af:a7:52:
                    68:96:3c:5b:ab:0a:01:75:a2:c4:58:bd:c4:a1:46:
                    34:f5:85:18:e8:b9:74:4e:e6:c8:76:15:71:66:28:
                    73:fb:3c:d7:77:9d:e7:74:10:71:f3:5e:df:28:f1:
                    d2:61:9f:0f:79:6c:1b:6f:81:14:db:4f:83:fa:77:
                    03:de:67:40:7a:23:9b:e6:cd:ec:51:c7:41:fa:82:
                    b8:0e:b8:ea:cd:50:63:37:d1:85:c9:65:10:d4:5c:
                    18:41:df:c7:fc:c5:73:e2:1b:7e:68:22:fe:e6:eb:
                    cf:7a:1a:07:04:92:06:a6:37:fb:8b:fb:e5:0f:80:
                    77:3f:b4:83:6d:9e:1f:53:ed:f8:64:5a:88:db:1a:
                    4e:37:66:4b:4e:56:3c:81:e2:24:89:a7:fc:e2:eb:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:FF:71:9E:43:ED:BA:23:11:87:EF:99:D0:A8:18:4C:3D:36:57
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:0a:6d:dd:11:46:c2:14:3c:5c:0a:e2:89:db:6f:9d:66:47:
         2a:97:4e:be:f2:9f:df:58:c2:9c:c5:0e:71:68:e4:78:dd:11:
         9d:4e:0d:e2:6f:3c:f6:b8:72:16:ae:5e:59:e3:14:ab:2f:f2:
         c3:df:dd:45:f8:54:99:57:c9:5a:a0:48:7b:3e:49:14:5c:20:
         50:36:a4:3c:3c:1a:74:6b:88:48:4b:d6:dd:d9:31:10:23:42:
         64:9d:37:a3:da:ff:7e:3d:b5:2b:59:8b:e2:74:f7:47:f9:41:
         36:37:26:bc:78:ce:35:fb:1b:ed:38:72:4b:a4:dd:9e:35:ff:
         14:b7:26:6d:0f:c2:66:67:77:e7:7e:fc:ad:a9:27:8d:f6:40:
         13:0f:ee:8d:af:f3:40:4b:84:f5:e5:69:96:05:83:28:71:48:
         1b:3b:c0:e8:5c:94:9e:9c:ae:81:5c:34:b4:54:8e:bf:6c:1d:
         71:02:57:2d:f7:f4:99:31:1e:37:ba:0d:96:8b:a0:ae:8e:a8:
         40:89:e3:3f:93:66:d2:aa:d4:1a:76:f4:5a:cc:25:a9:6a:ac:
         df:b5:9f:a7:89:c9:00:97:fc:84:7f:58:63:9d:ec:d6:6a:3b:
         a2:2e:18:fd:58:3b:6a:ee:14:e8:e2:a5:93:b4:33:d3:b8:6a:
         d4:bf:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:09:45 2025 by rpki-client