Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa
File:                     3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          0liIBWaIvwPHHD82mmnl5tkMnNDstOHI+ip03IypOzE=
Subject key identifier:   33:DD:42:06:CC:18:94:1C:08:C9:71:5D:FE:2F:8C:E0:75:05:D8:9D
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       579A197EE2E33B88C52C0613BFBED53F6509DAAC
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa
Signing time:             Wed 21 May 2025 18:42:22 +0000
ROA not before:           Wed 21 May 2025 18:37:22 +0000
ROA not after:            Wed 20 May 2026 18:42:22 +0000
asID:                     264011
IP address blocks:        143.0.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 23:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9a:19:7e:e2:e3:3b:88:c5:2c:06:13:bf:be:d5:3f:65:09:da:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: May 21 18:37:22 2025 GMT
            Not After : May 20 18:42:22 2026 GMT
        Subject: CN=33DD4206CC18941C08C9715DFE2F8CE07505D89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:10:af:6e:d1:7d:2e:2a:32:2b:05:af:50:
                    56:1c:95:d6:a7:b6:a1:0a:f3:f3:72:e7:8d:c2:0e:
                    10:29:4d:9b:fb:7a:0d:2e:cb:47:1d:de:71:9a:6b:
                    ed:28:e6:85:42:1a:cf:98:ec:65:c6:4d:59:78:f4:
                    51:a8:98:b1:04:a0:f1:c5:fa:4c:02:60:e1:1e:36:
                    fa:7a:6a:5b:a9:7b:6e:8b:7d:ec:96:ae:73:e1:77:
                    a9:c6:d0:bc:a5:e9:d9:5c:d6:14:bb:cf:70:58:39:
                    0d:5a:cf:85:53:4b:36:3e:1a:5f:83:cf:24:72:ab:
                    bd:64:7c:7b:84:f7:49:90:cf:ef:e4:fa:d3:df:11:
                    92:a3:1c:88:f9:e4:34:38:93:da:bd:02:cb:c0:0a:
                    0d:0d:ac:11:8a:39:ea:f5:22:14:e2:3d:aa:e0:4f:
                    28:ab:ba:bc:57:37:37:3f:8e:c2:c7:91:04:68:51:
                    2b:15:e4:45:d3:0f:99:35:e8:ae:4d:dd:91:4c:aa:
                    9e:63:7f:27:a2:bf:74:2a:d8:65:07:6a:30:52:68:
                    58:6c:8a:60:ee:00:77:c8:ef:a6:c2:8b:89:91:1f:
                    10:93:0d:1c:6a:c5:2d:b2:0a:1a:66:84:ec:0f:e7:
                    2a:75:de:20:d1:06:37:9a:a4:6e:06:74:64:84:5c:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DD:42:06:CC:18:94:1C:08:C9:71:5D:FE:2F:8C:E0:75:05:D8:9D
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:ef:d1:0a:88:f9:d6:7a:0d:cc:13:1d:b9:83:0e:01:7e:
         c6:ef:45:33:a8:de:02:a5:c5:4a:6d:58:eb:ae:fa:94:28:ce:
         99:33:59:66:a3:59:d9:85:f6:cd:fc:7c:a4:b0:5a:86:00:9f:
         8f:85:ba:a1:f9:dd:9a:ef:e0:e5:b7:0d:d4:3e:e5:90:04:dd:
         28:c1:b0:43:24:e3:aa:0b:11:86:9e:33:cd:15:62:a9:25:5f:
         32:6e:fe:38:60:21:0c:64:88:f2:f3:11:e2:38:b2:38:65:f8:
         4e:0e:03:6f:47:76:3d:ef:65:56:43:54:ec:cb:63:d8:4c:17:
         7b:8d:ce:d8:de:9d:96:0d:39:0e:e6:bc:83:6d:0f:b2:b8:6a:
         c9:f9:a4:bf:82:e5:6d:98:74:d8:d8:2f:4a:b6:ed:a1:7b:8a:
         fc:2f:c5:d1:8f:f6:40:3e:4b:86:5f:5d:91:07:cd:e2:5c:73:
         11:80:ca:48:b2:dc:e6:d9:32:b5:15:b1:76:71:da:c0:9f:05:
         08:80:aa:8e:0f:4a:5b:5b:2d:af:8f:b6:92:0d:0c:4b:70:1a:
         e7:bb:26:eb:00:4e:59:1f:a1:06:95:20:7e:24:73:61:f9:eb:
         27:dc:2c:fc:69:0c:18:b3:0a:e4:2f:e5:42:66:1b:5a:ab:eb:
         ce:df:ce:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:40:21 2025 by rpki-client