Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa
File:                     3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa (raw, json)
Hash identifier:          lTRreXKISf0sJNwk5bFWC8pxFfSIkswidbmsfq93PAM=
Subject key identifier:   6F:94:6B:27:F5:9E:B4:4C:83:EE:50:08:B9:44:CE:59:03:B4:ED:F2
Certificate issuer:       /CN=FD419A93880C50E8553950967A4679AE5C75624E
Certificate serial:       4771B9DC65BB51A6E2AA639AFAB6C53BD2026170
Authority key identifier: FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa
Signing time:             Fri 17 Jan 2025 11:40:55 +0000
ROA not before:           Fri 17 Jan 2025 11:35:55 +0000
ROA not after:            Fri 16 Jan 2026 11:40:55 +0000
asID:                     264030
IP address blocks:        143.137.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 10:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:b9:dc:65:bb:51:a6:e2:aa:63:9a:fa:b6:c5:3b:d2:02:61:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD419A93880C50E8553950967A4679AE5C75624E
        Validity
            Not Before: Jan 17 11:35:55 2025 GMT
            Not After : Jan 16 11:40:55 2026 GMT
        Subject: CN=6F946B27F59EB44C83EE5008B944CE5903B4EDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:80:97:e7:64:1c:88:aa:82:cd:bf:74:7a:
                    70:f2:3e:a7:19:0c:48:b1:0c:6a:a2:56:a9:38:18:
                    9e:70:0f:43:6f:c6:80:b3:53:49:64:2f:92:a7:16:
                    9c:32:02:3e:35:b8:40:20:98:70:35:7b:35:2e:39:
                    b0:97:31:a2:d1:ef:d1:4e:68:5c:ee:58:38:87:cc:
                    2a:11:be:eb:78:07:2c:bd:f3:1a:6e:28:6b:81:aa:
                    d3:0a:a7:57:0e:d1:69:17:e2:07:c0:19:4c:4d:02:
                    70:5f:7f:aa:12:4d:a4:e4:52:61:77:bb:bf:1d:25:
                    16:73:75:fb:cb:83:a8:6b:64:6c:55:e8:d1:ad:e8:
                    21:10:53:d3:d1:ff:f3:a2:87:99:75:45:88:d5:94:
                    5f:08:2b:eb:7b:7a:96:37:10:bf:f4:64:19:f7:cd:
                    ca:76:e3:59:4a:9a:e9:1e:58:6c:79:ce:6e:80:b9:
                    f0:63:91:1c:8f:a7:a7:83:9d:f5:56:cf:75:b9:f6:
                    68:fb:91:67:23:bb:51:1e:3b:3e:4e:18:82:72:58:
                    fa:88:1f:50:49:54:31:e4:a8:58:1f:ea:3a:14:f4:
                    f9:79:3b:9c:d6:e3:fb:f5:dc:df:2e:22:b6:90:0e:
                    ad:78:1e:39:67:f8:de:5d:21:8e:62:0a:d6:45:11:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:94:6B:27:F5:9E:B4:4C:83:EE:50:08:B9:44:CE:59:03:B4:ED:F2
            X509v3 Authority Key Identifier:
                keyid:FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32342d3234203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:15:14:5f:03:d9:54:02:52:f5:03:78:ba:8d:fb:d1:cc:d4:
         d5:4b:5b:8b:f8:a7:cc:27:dc:75:fb:71:ed:4e:77:b7:10:8c:
         9a:89:ab:7e:d5:fd:04:f8:fc:e2:37:4c:b3:0f:1c:d6:1f:bc:
         9f:60:fd:a1:dd:91:35:f5:de:37:1a:70:c4:81:e2:a6:a8:f6:
         8b:18:37:6f:1e:a0:ec:f5:aa:6a:06:04:90:ba:d9:de:7d:ab:
         33:8f:ab:f8:a1:41:43:61:15:10:de:7a:cc:82:ee:30:91:59:
         c3:32:5a:57:c5:bb:98:2b:81:bf:3f:8d:62:47:30:94:30:84:
         28:25:09:05:98:49:3c:ea:2c:23:e9:58:ee:36:22:bc:e1:1f:
         4c:a4:c6:2d:51:dd:fc:0d:d3:41:7a:60:ef:55:92:d9:b0:67:
         c0:83:a4:ae:21:aa:ee:e5:a1:36:d2:10:ae:74:93:ea:39:9a:
         0e:21:af:89:f3:26:68:85:21:b9:a8:6c:c8:03:09:17:e6:ce:
         66:14:0f:79:de:17:12:d5:f1:77:89:5d:e8:d6:37:5d:ca:01:
         08:ef:59:ea:8d:2a:1e:37:99:82:28:d6:31:e3:12:8b:38:f1:
         4e:02:f5:6c:34:6b:83:8f:a7:bf:6a:dd:bd:66:56:bd:53:8c:
         cb:16:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:25:30 2025 by rpki-client