Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          CvPt6i/FKK2bJ2KHKaQ02WILQwDUCCrNQlOgIBapYng=
Subject key identifier:   48:41:90:00:4E:7A:9F:72:DF:8D:97:7D:89:4F:DD:E4:7B:A9:02:C0
Certificate issuer:       /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
Certificate serial:       05219049AFB4C1E3F380BB7583C745E5747ACEFE
Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa
Signing time:             Wed 16 Jul 2025 20:40:33 +0000
ROA not before:           Wed 16 Jul 2025 20:35:33 +0000
ROA not after:            Wed 15 Jul 2026 20:40:33 +0000
asID:                     264014
IP address blocks:        143.0.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 15:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:21:90:49:af:b4:c1:e3:f3:80:bb:75:83:c7:45:e5:74:7a:ce:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8
        Validity
            Not Before: Jul 16 20:35:33 2025 GMT
            Not After : Jul 15 20:40:33 2026 GMT
        Subject: CN=484190004E7A9F72DF8D977D894FDDE47BA902C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:69:5a:1f:4c:38:d6:7d:8b:6c:34:a2:b5:
                    eb:6a:90:b3:6d:94:c2:3d:12:11:6c:56:72:c7:24:
                    12:20:ca:b5:4e:c3:6d:18:ce:bd:b7:c2:08:bc:a9:
                    90:51:e3:b3:04:4b:8d:65:1e:1b:0b:07:6d:dc:4b:
                    fd:c7:3c:eb:de:9d:63:18:58:b7:bd:ac:eb:45:9c:
                    68:3a:f5:44:78:6d:07:bd:73:7a:e9:68:98:9e:be:
                    1a:ea:53:50:33:37:d1:74:34:b6:44:f5:58:f6:ce:
                    81:16:28:dd:03:94:70:76:10:e0:ac:91:29:c5:92:
                    c9:06:fa:cd:57:0a:0a:e5:1e:13:f7:dd:e1:60:67:
                    a9:c8:3b:f2:fd:52:2d:9c:09:c3:d2:ed:78:44:9c:
                    5d:24:7a:8f:e2:40:f4:da:77:34:66:b1:18:3d:fb:
                    91:04:3f:51:51:9e:7a:53:dd:9d:f2:31:af:fb:69:
                    5a:46:88:11:3c:77:1c:ef:66:7e:b8:1a:d1:9b:99:
                    2c:33:4f:c6:2e:bf:07:da:76:c7:c2:44:f1:99:f6:
                    4e:37:af:2c:d0:47:b7:74:f8:4f:9e:61:2a:e7:43:
                    c4:e1:cc:d0:7d:e8:15:ea:2c:5e:d2:8c:94:4a:6c:
                    7a:58:c0:a1:f5:84:b8:2d:72:9d:53:b7:cb:35:0a:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:90:00:4E:7A:9F:72:DF:8D:97:7D:89:4F:DD:E4:7B:A9:02:C0
            X509v3 Authority Key Identifier:
                keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/3134332e302e3136342e302f32322d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:4f:96:c8:69:d9:9e:93:8b:ee:1e:06:99:ea:04:2d:3d:b6:
         05:aa:a4:a9:3d:f7:ed:af:92:cf:85:33:61:f1:49:fe:e5:9f:
         b6:aa:f5:fb:be:37:40:8b:5a:eb:01:87:4e:48:ea:d5:84:62:
         b5:2b:e1:72:22:81:88:57:46:10:34:7c:6d:32:1c:f8:86:9d:
         70:7b:e2:a7:a1:e9:aa:29:db:cd:a9:e0:60:32:dd:29:cf:ae:
         e9:1a:fc:8a:0a:92:ff:86:8d:75:71:77:dd:ce:09:8b:9e:cb:
         61:94:c4:76:c0:b4:04:61:f0:a9:a1:13:eb:97:1c:99:ca:af:
         88:c3:a3:bd:05:3c:ed:33:d1:95:55:2d:f0:0a:bc:6e:f8:ab:
         15:6e:51:8d:3c:7d:0e:85:16:2b:a0:3d:61:7d:bc:34:a0:c3:
         cd:18:76:95:a3:62:ca:3b:b6:b9:02:48:68:f2:e3:42:0f:f7:
         1a:33:d9:3b:09:3c:0b:5e:fe:00:74:b9:37:90:02:69:04:8b:
         0a:87:d5:64:ab:2d:ba:04:38:93:59:0a:f1:80:a1:34:5c:e0:
         b2:77:a7:9c:cd:c9:a0:f7:02:2a:94:b1:5a:bf:56:e7:9f:ff:
         2f:94:6f:c2:1b:d1:75:59:9c:25:80:9c:20:8b:41:c9:4e:a7:
         3f:67:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:03 2025 by rpki-client