Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232332e302f32342d3234203d3e20323634303232.roa
File:                     3134332e302e3232332e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          0TkqUvGyrUIpErOTY2EKEEf/hV0MAHQzTGHkxePmV1c=
Subject key identifier:   03:59:2E:E4:C4:29:0D:E3:F4:46:44:FC:67:B9:89:98:09:B1:C9:62
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       350CCE0DD3662BC809F45F562490498102066C40
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232332e302f32342d3234203d3e20323634303232.roa
Signing time:             Tue 03 Jun 2025 16:43:11 +0000
ROA not before:           Tue 03 Jun 2025 16:38:10 +0000
ROA not after:            Tue 02 Jun 2026 16:43:10 +0000
asID:                     264022
IP address blocks:        143.0.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 15:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0c:ce:0d:d3:66:2b:c8:09:f4:5f:56:24:90:49:81:02:06:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Jun  3 16:38:10 2025 GMT
            Not After : Jun  2 16:43:10 2026 GMT
        Subject: CN=03592EE4C4290DE3F44644FC67B9899809B1C962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:74:b3:14:f1:46:ae:db:6b:37:22:bd:b6:
                    26:2c:57:d2:ae:af:16:e0:70:c9:00:2e:69:84:6b:
                    a0:1e:0d:89:90:f6:f7:29:95:95:11:48:5b:66:27:
                    3a:19:54:bd:f9:a4:27:e6:5c:e3:46:9e:c1:57:8e:
                    2f:a4:bf:be:d2:58:b8:de:ea:03:a2:df:8a:c4:a5:
                    e7:a7:9f:55:b4:d1:b9:cf:1b:69:e6:78:d7:0f:00:
                    a1:64:b9:fc:ff:7c:be:be:46:bd:41:1c:69:ca:a0:
                    a3:7f:90:ce:59:35:26:44:59:97:3f:6d:54:ad:e1:
                    f9:0c:6e:13:91:2a:0a:90:d4:12:ae:34:8a:af:b6:
                    41:bf:b0:c2:fd:5f:97:80:fe:53:79:d7:a0:7e:fb:
                    fa:bf:4d:5f:5e:2d:65:58:e0:aa:29:ed:25:f4:b5:
                    74:02:59:45:62:68:1e:95:e2:6b:5b:ee:7a:ef:27:
                    cc:04:e0:be:99:24:3e:9a:9a:c2:98:c2:d1:5b:34:
                    48:34:c9:a9:a4:cc:a1:69:7e:34:ff:ef:3f:0c:81:
                    0c:d0:fa:fb:e2:6e:a3:c6:27:fd:43:b0:8a:d3:e2:
                    90:b2:fb:1a:09:9f:d5:a1:56:04:79:2d:30:f1:89:
                    fa:d7:99:54:9a:4c:20:5f:14:9b:7c:78:0d:8b:ac:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:59:2E:E4:C4:29:0D:E3:F4:46:44:FC:67:B9:89:98:09:B1:C9:62
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232332e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:a4:08:8f:10:50:49:b1:51:97:31:78:11:ef:a8:59:e6:
         3b:9f:43:3b:51:91:d8:f4:6b:c9:45:80:c6:c9:ae:52:6f:ff:
         e5:1a:0d:0c:9a:96:0f:3a:73:0a:3c:0f:12:0c:42:ef:79:be:
         09:c4:6c:04:b6:70:d3:88:bb:a5:5c:37:3d:76:1d:39:ca:4b:
         e7:3c:fa:e3:c0:a3:a8:49:a9:87:8d:b1:dd:6b:6e:fa:43:a3:
         cc:62:12:b5:a3:c6:36:fa:20:0e:a2:87:93:9b:d3:37:8e:0e:
         78:99:e7:0b:97:35:40:dc:37:20:b2:a0:9f:19:79:b4:21:45:
         e2:40:6d:de:3f:29:80:07:b8:22:8f:ea:1a:6d:fd:a5:ab:d4:
         65:5c:9b:f6:68:6a:5c:8b:9c:58:63:2d:5d:b0:21:57:3c:c9:
         1a:c5:71:be:c2:2e:34:b1:14:89:1c:3d:21:ef:12:1a:e8:30:
         f0:44:08:87:b9:96:3f:bb:20:df:4b:e0:80:8a:85:4c:b2:6d:
         33:c5:cd:ac:05:60:46:a6:e1:94:cf:f7:5e:b6:0b:df:71:84:
         13:5b:47:a7:9f:68:3f:9b:cb:77:de:a4:5e:20:5d:9a:4e:82:
         3e:c7:59:07:ff:3e:05:86:54:cd:4c:2a:bf:0f:94:62:b4:0a:
         0e:5b:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:06:10 2025 by rpki-client