Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
File:                     3134332e3235352e342e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          ml7IvTAudrfDZoR0pFnWcI9qaeHIA7AO/+Xp8RIq1CM=
Subject key identifier:   34:7D:EB:43:5C:5C:C5:A7:4A:11:76:29:96:9B:62:E6:D9:C4:C3:4E
Certificate issuer:       /CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
Certificate serial:       07C1E2C7B88FEF792607A4BBB63CADD2EB0C577A
Authority key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa
Signing time:             Thu 06 Mar 2025 23:27:49 +0000
ROA not before:           Thu 06 Mar 2025 23:22:49 +0000
ROA not after:            Thu 05 Mar 2026 23:27:49 +0000
asID:                     264117
IP address blocks:        143.255.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl
                          rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 03:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c1:e2:c7:b8:8f:ef:79:26:07:a4:bb:b6:3c:ad:d2:eb:0c:57:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
        Validity
            Not Before: Mar  6 23:22:49 2025 GMT
            Not After : Mar  5 23:27:49 2026 GMT
        Subject: CN=347DEB435C5CC5A74A117629969B62E6D9C4C34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:8f:c4:a7:a1:8f:3a:5e:17:27:61:71:b9:
                    b0:69:ba:5f:6b:b2:2a:d6:a2:7f:b4:a3:cd:20:3a:
                    be:9f:75:d5:71:42:19:e6:1c:11:e1:6d:18:b2:56:
                    b0:2f:27:8a:41:b6:69:d3:1d:ac:d2:eb:ce:a1:23:
                    16:15:14:a4:e7:65:8a:9b:58:2d:1a:dc:a9:71:20:
                    c2:11:8a:03:1a:23:fd:cc:dd:1b:76:e5:24:9e:70:
                    69:34:12:6f:10:82:96:29:f4:db:08:91:0f:33:5d:
                    1c:05:14:19:fa:6d:53:4b:87:bf:c5:c2:55:32:45:
                    c8:ab:23:d0:2e:b8:72:94:fb:3c:a8:d3:7e:92:95:
                    46:14:23:f5:b2:37:f3:43:9a:76:e8:2a:68:42:d0:
                    8e:27:cb:36:d9:50:04:b3:94:78:39:21:6f:f0:cc:
                    76:e9:44:d0:ef:b8:c7:b4:2d:d5:df:97:ba:10:f7:
                    06:f3:42:2a:3b:a0:54:ba:e2:8f:52:15:2a:d2:df:
                    52:5b:6e:9b:ab:9c:c2:f8:4f:76:51:3d:61:e5:bb:
                    f3:b3:37:93:9f:e7:46:38:eb:e5:53:9e:e1:1a:59:
                    f5:8e:ee:e2:4f:21:d9:df:c4:4d:aa:57:dd:99:c7:
                    04:e9:51:d9:22:53:df:5e:43:ff:2a:6d:17:19:52:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7D:EB:43:5C:5C:C5:A7:4A:11:76:29:96:9B:62:E6:D9:C4:C3:4E
            X509v3 Authority Key Identifier:
                keyid:F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/3134332e3235352e342e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:fd:ed:53:67:2b:94:51:05:63:1c:c5:12:47:7b:1e:75:d2:
         be:e6:0a:2a:1d:0c:56:fe:c1:b3:65:da:25:53:59:c3:72:a5:
         73:e0:53:d2:be:71:64:e9:29:3d:e2:0e:11:4b:19:b0:11:fa:
         05:33:8f:56:3a:f2:8c:08:f1:d4:7c:31:e5:fb:f2:c7:f7:01:
         1d:d4:6a:d5:28:35:21:5e:d1:8b:58:7b:c7:87:c4:ee:6e:32:
         77:1c:de:5b:b0:ee:53:ed:2f:20:ce:ad:78:0d:be:e2:a7:7c:
         d6:bb:a2:15:b9:07:2a:e8:b5:66:6a:9c:2d:bb:d9:17:1e:58:
         d2:4b:ac:fe:40:9f:6d:2b:09:ad:2d:a1:6d:42:c6:89:9f:70:
         8c:64:2e:0a:3c:a3:29:9c:fb:93:d8:5f:d8:ff:b7:a2:27:84:
         e6:a0:67:d6:7c:c7:22:1d:8b:22:4b:d4:3f:0e:de:36:1b:d3:
         31:4b:f7:90:b8:61:db:1d:74:24:77:4d:61:b2:25:c3:b6:7d:
         cf:6f:8a:05:f0:c9:51:8e:81:1a:35:ce:16:c7:80:7e:ea:2d:
         0e:ab:09:8b:f2:cf:77:b7:33:64:82:08:75:10:95:39:09:e8:
         15:84:a1:d8:fc:26:c0:8e:d1:5b:72:7c:70:cd:58:5b:6a:58:
         fc:ee:ff:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:49 2025 by rpki-client