Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa
File:                     3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa (raw, json)
Hash identifier:          JqKjaiGwOqCBGokLsOTliAc9DzRcRCYwTDbkbi2tZYA=
Subject key identifier:   F9:36:AD:05:51:F5:46:74:A5:FE:65:88:DA:13:56:4A:0A:DD:FD:EB
Certificate issuer:       /CN=FD419A93880C50E8553950967A4679AE5C75624E
Certificate serial:       4338CBC97ED4E6877403B4A2EF68A62D0D4E4611
Authority key identifier: FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa
Signing time:             Fri 17 Jan 2025 11:40:57 +0000
ROA not before:           Fri 17 Jan 2025 11:35:57 +0000
ROA not after:            Fri 16 Jan 2026 11:40:57 +0000
asID:                     264030
IP address blocks:        143.137.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 15:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:38:cb:c9:7e:d4:e6:87:74:03:b4:a2:ef:68:a6:2d:0d:4e:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD419A93880C50E8553950967A4679AE5C75624E
        Validity
            Not Before: Jan 17 11:35:57 2025 GMT
            Not After : Jan 16 11:40:57 2026 GMT
        Subject: CN=F936AD0551F54674A5FE6588DA13564A0ADDFDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:f8:e7:f0:e1:3c:fd:f9:79:71:2f:46:dc:
                    c7:7b:d9:20:ad:81:35:e6:f1:c5:78:70:85:c6:12:
                    0f:c1:dd:3b:e3:3c:56:b2:4a:e2:cf:4a:67:fc:27:
                    ce:23:b0:44:bf:25:49:8f:f7:55:88:10:a7:f8:57:
                    e7:67:09:49:d2:7e:86:a4:d6:9c:58:ab:e4:99:16:
                    ef:76:fb:a5:f3:e9:fb:64:4a:7d:56:a4:00:42:e4:
                    b2:bb:31:60:3b:ed:5c:cf:91:ae:d7:bb:1a:7a:ae:
                    d6:e7:71:b5:5d:82:14:d4:f1:3e:34:b9:b0:ef:d7:
                    be:0d:0f:e7:a6:1b:63:8f:4a:51:13:80:f2:f3:88:
                    e1:2c:3a:cd:ef:f0:21:e1:a5:15:e4:5b:5d:a3:33:
                    e7:f6:3f:b3:58:d5:d1:5d:78:49:ec:c1:bc:8f:70:
                    2b:71:61:23:d4:94:f8:b0:5e:2e:3e:45:b1:6e:db:
                    3b:60:6f:38:4c:15:a3:76:79:48:8c:71:0f:d0:cc:
                    aa:78:03:e8:f3:f6:19:4a:16:ec:55:63:69:20:8b:
                    67:ca:d0:fb:df:c3:79:4c:36:0d:06:5a:6b:37:84:
                    4b:80:30:a0:62:86:f2:53:7a:19:a2:73:b6:9f:6f:
                    44:7c:a5:34:6b:fe:74:2e:00:4e:f8:76:94:5d:c5:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:36:AD:05:51:F5:46:74:A5:FE:65:88:DA:13:56:4A:0A:DD:FD:EB
            X509v3 Authority Key Identifier:
                keyid:FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34312e302f32342d3234203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:0d:df:ce:1e:3c:1e:16:8d:f1:04:6b:ba:fa:32:97:17:85:
         9e:b7:91:e5:81:61:45:22:79:63:4b:5f:e2:5a:2a:85:8d:92:
         df:0f:a1:c2:4d:da:56:b8:a6:91:4e:5e:6f:2f:02:59:f7:14:
         27:10:8b:74:ac:3b:20:e0:a6:94:21:3f:d8:40:09:31:f8:a7:
         7a:bc:c1:74:61:f7:d8:9f:b1:a6:80:91:a5:a9:29:db:0e:ba:
         2b:54:f2:67:85:10:a8:1e:83:81:b2:d3:ff:cb:70:f0:58:f2:
         6f:c5:53:e9:bc:60:4d:49:02:b7:ff:bd:21:d9:25:46:52:ac:
         83:98:11:a0:39:c6:4d:1d:5b:a8:b5:fe:2b:fe:d4:e1:f7:d5:
         da:d6:07:d7:ad:a2:4b:9a:be:1a:98:24:7a:fe:9d:30:41:09:
         53:5f:07:0c:56:53:23:c8:38:7a:5a:c0:fc:10:62:c4:20:7b:
         75:84:7c:02:6b:cf:34:b4:3e:5a:99:1b:5f:da:46:9e:09:44:
         f9:a4:5b:f0:e6:d0:e4:34:bc:9b:68:e0:b5:8a:1c:c3:34:c7:
         28:fe:78:f9:7a:d0:f1:2a:e3:3f:d4:9f:e0:f1:8f:88:1e:70:
         3d:7c:d5:49:de:62:31:88:5b:e2:b7:31:55:c9:71:ae:b8:78:
         15:f6:fe:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:00:52 2025 by rpki-client