Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31342e302f32342d3234203d3e20323635313431.roa
File:                     3134332e3235352e31342e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          zWDMrgAhK/YuBOdtRl0CTwJKCHahw7rUD3hEgXQVYKg=
Subject key identifier:   4E:EE:B2:5F:4C:03:26:86:6A:54:56:88:CF:A5:19:42:1F:80:A9:94
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       6251366D54D359410C69B144D525EDB492227832
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31342e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:50 +0000
ROA not before:           Mon 26 May 2025 18:23:50 +0000
ROA not after:            Mon 25 May 2026 18:28:50 +0000
asID:                     265141
IP address blocks:        143.255.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:36:6d:54:d3:59:41:0c:69:b1:44:d5:25:ed:b4:92:22:78:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:50 2025 GMT
            Not After : May 25 18:28:50 2026 GMT
        Subject: CN=4EEEB25F4C0326866A545688CFA519421F80A994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1d:cd:67:03:2a:c0:30:74:b6:6a:ce:3c:a5:
                    74:1c:76:63:9e:9b:62:51:67:7e:87:b1:05:e9:33:
                    fa:3c:c5:8a:a3:58:77:33:64:1e:6b:e8:20:d5:c8:
                    f7:90:d5:f9:cb:d7:ee:4f:eb:91:36:24:6e:72:37:
                    71:91:2b:f3:86:5e:ad:34:28:ab:f5:60:f1:76:64:
                    8b:03:02:66:2a:83:fd:89:49:21:49:17:10:35:a4:
                    42:9c:d5:46:a6:cf:60:1c:b0:2b:55:af:85:db:e3:
                    38:d3:e0:2a:d7:0b:0b:d8:c9:d4:fd:f0:2f:fd:a3:
                    42:6e:c9:61:17:06:01:16:ed:f6:21:87:2e:30:db:
                    3b:4d:4d:49:a1:1a:04:55:a9:01:cf:7d:20:e1:f3:
                    92:70:fa:09:61:3f:fb:ce:39:19:60:82:af:fa:2b:
                    e7:65:a2:82:de:c7:75:cc:f2:51:f9:c2:bb:03:57:
                    f0:1f:31:81:13:d8:67:c6:8f:16:3b:e9:5f:e4:f5:
                    e3:fb:03:8d:f8:bd:e8:ff:8a:31:c6:88:32:69:36:
                    50:63:b1:1e:6c:92:19:b0:0e:a1:18:8d:fa:6b:f3:
                    45:39:66:8b:58:38:7d:df:47:1e:4f:07:97:18:94:
                    1a:34:bb:f4:6f:ce:88:03:cc:3f:88:b6:7e:3b:e4:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EE:B2:5F:4C:03:26:86:6A:54:56:88:CF:A5:19:42:1F:80:A9:94
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31342e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:77:d3:90:0b:6b:cf:e7:4c:0e:5d:7b:3b:21:c6:82:d5:
         b2:5b:0c:fe:c0:e0:3a:60:97:46:01:c7:9d:b6:fc:b5:73:71:
         c9:63:55:84:54:71:16:a2:d3:c5:b6:9b:39:18:5d:82:8a:49:
         11:71:64:1a:88:5d:fe:4a:91:c6:fa:c6:45:0c:3f:f3:b8:06:
         e1:07:f8:75:07:aa:32:07:6d:86:1b:c5:dd:27:c0:42:dc:67:
         ad:2d:7f:10:82:9c:ec:c0:7c:dd:95:01:aa:28:bf:c9:6d:b4:
         82:e6:45:9f:91:a2:f5:4e:f1:e6:56:1c:c6:56:d9:88:f1:22:
         37:91:ba:ff:f9:98:fb:e3:49:cc:2e:bc:25:f4:51:12:1e:da:
         bd:21:4a:b8:37:2b:22:23:81:69:19:bb:07:2e:10:35:b8:09:
         0c:d6:93:22:df:e5:94:30:37:de:e3:0a:05:d8:35:ac:a2:4f:
         68:1f:87:bc:87:05:0a:72:f4:4f:d5:74:82:db:f2:e2:ed:75:
         b2:58:02:2b:ac:20:51:02:09:d4:99:12:cf:2f:fe:8e:6b:aa:
         7a:05:c7:b6:47:9e:81:46:b7:09:80:a8:8d:e4:70:90:e6:0c:
         19:d1:62:06:f1:2a:1f:cd:8b:33:df:5f:9a:04:96:06:9e:d1:
         b2:1f:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:46:41 2025 by rpki-client