Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233382e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233382e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          eVOGIgtt967/85X6K2qSlG/g0avpXbo2XNhUg2XqLIw=
Subject key identifier:   89:59:90:EC:D4:DB:67:6A:27:46:6C:93:6F:15:72:C7:AA:E9:8D:B1
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       441EDECA56D27942C6B231C838CFC0828C3F0418
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233382e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:30 +0000
ROA not before:           Tue 25 Mar 2025 20:08:30 +0000
ROA not after:            Tue 24 Mar 2026 20:13:30 +0000
asID:                     263627
IP address blocks:        143.202.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:de:ca:56:d2:79:42:c6:b2:31:c8:38:cf:c0:82:8c:3f:04:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:30 2025 GMT
            Not After : Mar 24 20:13:30 2026 GMT
        Subject: CN=895990ECD4DB676A27466C936F1572C7AAE98DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:d0:f4:1d:2e:88:52:15:e2:13:5b:6c:d9:
                    fd:30:92:ab:5a:36:b9:b3:f8:41:c7:d4:91:ed:c3:
                    ea:e4:6f:52:9a:4e:c8:37:09:a8:57:ba:8d:5a:d2:
                    d6:f3:0f:54:60:4c:37:85:8a:7c:82:38:f8:10:37:
                    af:47:ae:a2:f5:66:57:99:91:bd:53:f0:f7:e8:ba:
                    37:40:e9:d2:6f:67:f8:34:a7:cf:6b:a8:51:48:67:
                    72:b2:99:6b:47:02:08:37:01:d7:fe:c2:da:b4:a3:
                    f5:9b:48:75:b4:59:30:a9:3e:fc:95:26:40:b6:88:
                    88:35:5c:ea:89:d2:c6:0f:56:15:9b:9e:ea:31:63:
                    31:c7:b1:a6:f4:bb:f9:03:d9:27:4a:33:a5:56:a8:
                    ba:bd:bf:69:7a:1b:3f:f5:2c:3b:a2:30:48:c8:42:
                    84:71:55:c8:ce:16:0c:57:c7:8f:05:c1:54:06:5e:
                    12:96:23:4c:3f:d1:77:38:7d:49:a0:79:21:95:74:
                    75:0e:84:43:89:69:87:3b:fd:77:72:33:6a:0b:30:
                    f1:5a:1f:b8:1e:d0:e9:06:7e:e0:05:59:ac:1e:63:
                    83:86:fa:b9:87:86:87:a1:01:37:7c:68:6e:77:d3:
                    bb:09:5d:85:81:ca:50:08:d4:39:d7:0e:ea:21:7b:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:90:EC:D4:DB:67:6A:27:46:6C:93:6F:15:72:C7:AA:E9:8D:B1
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233382e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:2f:47:b5:ef:fd:56:f1:92:6f:0c:c1:0c:86:c9:d7:ad:
         bd:1b:ca:c2:6a:50:00:75:5f:d0:7f:5c:c3:33:00:34:f2:73:
         9d:21:3a:f0:54:36:a0:55:3d:bc:20:b6:3b:0b:1d:f6:6c:9a:
         9f:97:4c:78:df:3a:1a:62:9d:1d:07:aa:8d:1d:87:be:66:b2:
         b9:89:95:99:54:ed:2a:f6:1a:0c:ea:b6:0f:f6:82:b2:25:92:
         2e:8b:15:7e:1b:d3:9a:99:b4:b8:3d:ae:90:6a:72:71:aa:ac:
         40:96:bd:c7:d3:54:3a:c9:bf:d2:7b:55:d0:a9:01:59:f2:96:
         4a:05:9b:a1:65:17:9c:1c:a7:be:c7:6f:94:57:48:1d:b0:5c:
         65:87:37:37:db:44:91:26:28:cb:45:8f:5a:b6:91:09:21:95:
         db:91:b4:d6:54:9a:2f:df:d5:1a:c6:3b:94:07:77:ce:a1:84:
         2a:fc:cb:ab:ea:18:92:fe:8b:b3:ee:72:db:ec:44:2e:d0:ae:
         9c:ed:d2:17:24:2d:33:a0:40:f3:96:39:e9:d7:68:a8:40:9a:
         5f:95:56:15:3a:a4:b3:ae:63:5c:07:aa:ea:e3:0d:c5:f4:6b:
         8c:39:03:ec:c6:c9:47:ad:68:20:6a:c7:36:ce:82:4c:b1:4c:
         d3:f3:01:1e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURB7eylbSeULGsjHIOM/Agow/BBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNTAzMjUyMDA4MzBaFw0yNjAzMjQyMDEzMzBaMDMxMTAvBgNV
BAMTKDg5NTk5MEVDRDREQjY3NkEyNzQ2NkM5MzZGMTU3MkM3QUFFOThEQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlltD0HS6IUhXiE1ts2f0wkqta
Nrmz+EHH1JHtw+rkb1KaTsg3CahXuo1a0tbzD1RgTDeFinyCOPgQN69HrqL1ZleZ
kb1T8PfoujdA6dJvZ/g0p89rqFFIZ3KymWtHAgg3Adf+wtq0o/WbSHW0WTCpPvyV
JkC2iIg1XOqJ0sYPVhWbnuoxYzHHsab0u/kD2SdKM6VWqLq9v2l6Gz/1LDuiMEjI
QoRxVcjOFgxXx48FwVQGXhKWI0w/0Xc4fUmgeSGVdHUOhEOJaYc7/XdyM2oLMPFa
H7ge0OkGfuAFWaweY4OG+rmHhoehATd8aG5307sJXYWBylAI1DnXDuohe9iJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiVmQ7NTbZ2onRmyTbxVyx6rpjbEwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNDMzMmUzMjMwMzIyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/K7jANBgkqhkiG9w0BAQsFAAOCAQEABIov
R7Xv/Vbxkm8MwQyGydetvRvKwmpQAHVf0H9cwzMANPJznSE68FQ2oFU9vCC2Owsd
9myan5dMeN86GmKdHQeqjR2HvmayuYmVmVTtKvYaDOq2D/aCsiWSLosVfhvTmpm0
uD2ukGpycaqsQJa9x9NUOsm/0ntV0KkBWfKWSgWboWUXnBynvsdvlFdIHbBcZYc3
N9tEkSYoy0WPWraRCSGV25G01lSaL9/VGsY7lAd3zqGEKvzLq+oYkv6Ls+5y2+xE
LtCunO3SFyQtM6BA85Y56ddoqECaX5VWFTqks65jXAeq6uMNxfRrjDkD7MbJR61o
IGrHNs6CTLFM0/MBHg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:08:03 2025 by rpki-client