Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          pzigt3aPikLo0MjxdIRuVJHIhXHr7gYz7vIyVOm//5g=
Subject key identifier:   90:9D:8F:34:32:0D:12:18:2C:18:55:21:92:8D:64:90:46:30:31:1D
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       3D23990945CA7FF99515808863CF54BD9F1F2B9F
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:30 +0000
ROA not before:           Tue 25 Mar 2025 20:08:30 +0000
ROA not after:            Tue 24 Mar 2026 20:13:30 +0000
asID:                     263627
IP address blocks:        143.202.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 16:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:99:09:45:ca:7f:f9:95:15:80:88:63:cf:54:bd:9f:1f:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:30 2025 GMT
            Not After : Mar 24 20:13:30 2026 GMT
        Subject: CN=909D8F34320D12182C185521928D64904630311D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:28:33:33:b9:8d:c3:1a:80:81:b0:be:c0:
                    b7:90:d0:88:23:0a:bc:f6:14:b9:b7:ec:4c:a8:2a:
                    9c:e2:43:75:63:ec:29:40:d2:25:ef:4e:9d:a5:8a:
                    6c:fb:95:87:e7:bd:07:fc:8a:62:f1:6a:9f:e7:e4:
                    16:e5:5d:9f:05:22:55:ae:92:91:fc:91:29:b1:33:
                    05:bb:79:4a:85:66:4b:ad:8f:0c:06:5c:53:7e:5a:
                    ba:79:ca:3a:96:3b:4c:6f:44:34:34:25:61:49:e0:
                    07:60:88:7d:e9:bb:f0:0d:08:99:17:0b:ce:df:2e:
                    19:cb:f6:8e:11:ba:78:5e:c3:52:c0:b7:26:2c:62:
                    5a:7b:f7:dc:1e:47:68:18:56:5f:c1:10:da:39:8d:
                    26:1f:3c:a5:ea:e6:8b:73:ec:98:c1:df:72:72:e3:
                    ae:0e:44:30:4b:1c:a4:02:60:8f:61:af:fe:a2:97:
                    ac:1c:77:f9:fe:75:0e:e6:03:31:07:29:7d:75:4e:
                    c7:d3:33:11:b5:2e:b3:bf:61:6e:53:7e:f2:ac:80:
                    7f:73:fb:c7:a8:c8:0d:d7:2f:91:1a:f0:5b:7c:a4:
                    b8:10:6c:7b:89:ac:63:56:15:93:8d:74:4f:2a:97:
                    cb:0f:c2:8a:c3:7c:07:5c:72:a5:48:4f:e0:a2:08:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9D:8F:34:32:0D:12:18:2C:18:55:21:92:8D:64:90:46:30:31:1D
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:6c:40:e5:fb:fb:18:74:62:41:95:58:b4:f3:4f:c1:37:
         d6:c2:a0:ca:4d:03:ec:26:fd:72:5f:8d:02:c0:2f:a0:ac:c5:
         3f:b9:cb:44:3b:f9:d4:a5:da:37:b1:5c:d1:40:e3:cf:3d:31:
         12:73:8e:48:88:79:b6:de:e2:e2:06:6b:ec:a5:5f:93:89:11:
         09:b1:c9:d6:4e:32:02:a8:98:42:48:5f:56:9c:06:74:7a:a0:
         ef:59:f9:0a:b2:a0:29:0c:a3:a1:7d:77:d9:3a:1c:d5:87:8f:
         37:d7:70:a3:46:c8:f3:85:96:82:0b:9b:2f:77:0a:92:b1:81:
         c8:76:1a:26:d3:c0:4a:1b:06:7d:54:8c:27:52:b2:a8:c9:6d:
         44:a7:a5:75:90:18:9e:0f:03:19:f5:70:f2:8f:85:21:d1:76:
         b5:34:6e:3b:95:69:26:12:dd:c5:fc:38:71:06:fd:ff:53:05:
         5e:45:36:30:88:b1:86:ce:c1:7a:8e:2c:c9:56:25:d0:6b:b1:
         f5:d6:a1:59:43:d2:7c:37:ab:7e:dd:32:3c:8d:0e:59:5b:1e:
         85:21:b6:eb:e2:33:01:5d:df:4f:8c:9e:e2:24:85:a9:a2:c5:
         70:a1:8c:85:9e:fe:f2:eb:85:64:cb:f8:87:d6:99:7b:f7:7c:
         d9:f7:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:24:50 2025 by rpki-client