Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa
File:                     3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa (raw, json)
Hash identifier:          8fKWUXz88EE4FdGimDW8PmZu7e3/wVnFNr79jS1k7hU=
Subject key identifier:   93:2F:B5:46:D3:E5:3A:7A:40:0F:3E:DF:DC:4E:6C:2C:3A:DF:0B:12
Certificate issuer:       /CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
Certificate serial:       541480AC64241F528256DAB7301EAB8031EBBA3C
Authority key identifier: 60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa
Signing time:             Wed 29 Oct 2025 01:42:30 +0000
ROA not before:           Wed 29 Oct 2025 01:37:30 +0000
ROA not after:            Wed 28 Oct 2026 01:42:30 +0000
asID:                     264067
IP address blocks:        143.202.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl
                          rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:14:80:ac:64:24:1f:52:82:56:da:b7:30:1e:ab:80:31:eb:ba:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608E3468464471A407DA37B93E7EAA2E8A3F6EE4
        Validity
            Not Before: Oct 29 01:37:30 2025 GMT
            Not After : Oct 28 01:42:30 2026 GMT
        Subject: CN=932FB546D3E53A7A400F3EDFDC4E6C2C3ADF0B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:36:c4:f5:d5:be:56:04:74:45:9b:aa:ad:
                    e4:8f:f4:2e:05:b6:8f:31:48:4f:e7:be:2e:23:ae:
                    d1:86:c1:22:ae:14:3c:f2:db:4b:50:e5:44:1c:1c:
                    d0:68:cd:28:8c:f5:0f:a1:7f:6c:6f:96:18:36:cd:
                    f9:1a:e7:ba:4f:92:6e:39:20:1d:5b:59:54:ed:8e:
                    ff:b6:fc:05:b4:fa:f8:6f:cc:48:df:d0:38:84:f8:
                    b9:48:d6:fe:eb:29:bd:35:ba:d6:13:cd:4b:06:9b:
                    3e:d8:84:32:88:72:f0:df:a1:5a:42:c5:af:b0:2c:
                    1f:82:c4:3e:31:9d:8b:58:eb:0d:45:00:80:98:6a:
                    c4:0b:4c:23:4a:6f:96:b7:5f:ff:2d:05:9c:06:14:
                    bc:dd:55:ed:c7:2e:82:4b:75:15:de:4b:ec:20:c6:
                    4a:23:42:6d:3a:1c:06:db:38:65:47:38:17:cc:e7:
                    39:ba:6c:a7:0a:b6:89:7c:26:ce:a9:7c:2c:6a:62:
                    01:ac:15:9b:11:33:52:0f:e9:57:c1:22:3d:2d:cb:
                    5b:6a:ca:a0:0e:1a:3d:1b:fd:c1:6b:6e:57:cc:bb:
                    2c:02:e9:4a:c1:24:4e:ff:3a:cb:04:d4:85:09:9e:
                    ec:83:59:fc:ed:b5:d3:d3:62:88:89:a6:90:00:f2:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:B5:46:D3:E5:3A:7A:40:0F:3E:DF:DC:4E:6C:2C:3A:DF:0B:12
            X509v3 Authority Key Identifier:
                keyid:60:8E:34:68:46:44:71:A4:07:DA:37:B9:3E:7E:AA:2E:8A:3F:6E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/608E3468464471A407DA37B93E7EAA2E8A3F6EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FJGbnWYpdqtjYshWByEqcyTYe6BxWPyo52HMeuZQqhw/0/3134332e3230322e38302e302f32322d3234203d3e20323634303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:66:59:a5:7c:51:cb:4f:a8:0b:63:52:a8:42:13:3d:52:
         55:3f:94:bb:a0:ff:a7:ee:78:8d:b6:f4:e9:2c:ba:e6:e8:bf:
         52:67:fd:05:81:a3:3f:9f:e1:19:ed:7c:8e:bd:8c:7b:2c:ec:
         c1:c6:39:85:41:b2:8a:c4:26:30:7d:a7:1d:53:d4:fc:76:87:
         ed:6e:39:5a:1b:0d:2c:d6:89:6b:d2:8e:a2:86:51:8f:15:58:
         62:c6:b0:a5:b2:8b:8f:6b:29:70:75:8f:e9:24:07:e1:e4:a8:
         54:5e:f6:04:cd:1a:97:94:00:fb:84:7f:f6:17:10:bb:14:b1:
         84:f5:16:4e:0d:28:dc:6b:68:25:14:97:94:f9:41:37:7d:58:
         e2:aa:7d:4a:42:cc:47:4e:ec:af:65:7d:eb:dc:b0:5a:30:aa:
         f1:22:31:dd:93:da:73:15:a6:90:26:09:58:57:68:a1:dd:15:
         f7:38:2a:58:99:b1:db:72:e8:cd:83:b1:75:74:8f:0f:c9:4b:
         34:c7:c3:0f:58:81:fc:34:dc:e2:d8:ff:fe:77:c3:76:0c:d9:
         4b:03:06:e7:4e:9b:e8:81:13:4a:be:28:43:0f:4c:a1:96:70:
         39:ee:ae:73:e4:2d:a2:79:10:0e:88:85:c5:1d:7e:1b:5c:58:
         3d:3a:93:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:50:10 2025 by rpki-client