Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa
File:                     3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa (raw, json)
Hash identifier:          hYzGwiRlJH1u0usLdljDCp/pbyosJqBFd5g/VwjWFCs=
Subject key identifier:   54:26:21:B7:23:C6:7E:3D:0E:0C:45:4D:2F:2A:6B:24:29:EF:76:BF
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       3012A63C6283F21B4B4CCB884E85EAF96D795023
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:52 +0000
ROA not before:           Mon 26 May 2025 18:23:52 +0000
ROA not after:            Mon 25 May 2026 18:28:52 +0000
asID:                     265141
IP address blocks:        143.255.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:12:a6:3c:62:83:f2:1b:4b:4c:cb:88:4e:85:ea:f9:6d:79:50:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:52 2025 GMT
            Not After : May 25 18:28:52 2026 GMT
        Subject: CN=542621B723C67E3D0E0C454D2F2A6B2429EF76BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:0c:24:ee:17:94:a7:3f:b9:9a:62:21:f9:
                    b3:99:e5:61:80:b2:3b:ed:37:b3:05:80:98:6d:85:
                    db:2a:42:d0:72:5a:db:81:e7:57:89:fa:34:6f:15:
                    97:6d:bd:7c:89:30:bd:6b:a3:fc:67:1e:f6:9e:d0:
                    3d:62:b6:4b:b4:56:6f:68:3f:a3:61:eb:8e:6a:5b:
                    5e:18:23:8b:ab:48:90:6e:f6:c2:8a:e3:86:34:88:
                    51:94:2a:25:17:f8:d0:32:00:bf:df:30:d8:50:da:
                    9e:f4:c0:37:ba:d5:eb:9a:77:fd:b5:86:ec:bc:d6:
                    e2:25:5c:b6:77:b5:76:e6:3c:d6:80:a1:be:96:52:
                    d1:8b:d3:67:a0:af:69:b7:44:68:37:2f:e7:3c:ed:
                    f5:ec:5b:4a:fe:e9:c6:ef:94:4d:48:0c:92:f6:26:
                    39:32:6a:10:ef:94:4e:65:32:1a:00:4d:70:8d:b5:
                    a6:47:6c:e6:71:76:16:47:b3:50:d8:b1:f7:3f:15:
                    45:48:28:fe:d9:80:5d:2e:45:95:e4:7b:1d:17:e9:
                    5b:a7:7b:ee:d9:07:c7:cd:ae:17:2a:10:92:61:b7:
                    28:a2:73:23:9e:5b:22:45:d5:f0:78:49:8c:a6:60:
                    5a:26:e4:73:4e:76:6a:ad:1d:83:1b:ca:55:0a:20:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:21:B7:23:C6:7E:3D:0E:0C:45:4D:2F:2A:6B:24:29:EF:76:BF
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:c0:f2:6a:58:7c:3a:93:bf:dd:9b:ae:1f:ae:f7:10:48:
         6c:9f:92:b1:62:a9:c0:c9:23:30:eb:14:9b:cb:a9:6f:bb:ae:
         41:66:b0:b5:af:bd:ab:25:86:c3:81:c9:97:9c:91:b2:67:5b:
         53:65:21:fd:91:f7:87:ee:4a:70:32:3f:8b:e7:b0:12:db:dc:
         ba:65:b8:ca:17:4f:9c:ff:ee:cb:87:be:56:2d:a1:97:2d:2b:
         7a:6e:5a:79:57:6d:a3:31:3b:f2:f0:ac:b9:2b:99:19:c2:a0:
         b1:74:b6:b4:7f:17:5d:88:40:f7:6d:e3:d0:28:0d:37:58:79:
         7f:95:68:1a:f0:35:41:cf:1a:a4:bf:c4:11:41:c0:91:9f:85:
         16:41:ba:b8:db:b9:42:ca:1f:04:0d:20:f6:0c:90:f3:34:3b:
         e6:f9:8f:35:7f:de:0d:f7:33:a1:bf:66:68:f9:6b:ef:49:88:
         1d:e4:f9:98:e3:7f:01:15:30:dc:b4:5b:13:e4:c4:d1:9a:75:
         fd:1d:cf:77:19:0b:7c:38:a3:12:64:aa:43:c5:c1:b7:e6:03:
         cf:f6:7d:e5:4c:67:75:f7:f8:bb:1f:85:76:85:11:bf:14:a9:
         f8:05:bc:17:8b:e2:5b:2f:6a:91:84:db:4c:b6:70:65:81:0b:
         23:77:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:25:17 2025 by rpki-client