Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
File:                     3134332e302e34302e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          pyGWxPFQbDsWUb9z/0FXXr4htDCpir++s3nhkhOQLLA=
Subject key identifier:   90:4E:CA:6D:15:02:45:31:60:68:24:59:9C:96:F0:89:AE:E9:B6:82
Certificate issuer:       /CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
Certificate serial:       6804374B3737B64B2375652755A09424D66C3D25
Authority key identifier: 9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
Signing time:             Tue 22 Jul 2025 14:41:01 +0000
ROA not before:           Tue 22 Jul 2025 14:36:01 +0000
ROA not after:            Tue 21 Jul 2026 14:41:01 +0000
asID:                     262550
IP address blocks:        143.0.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:37:4b:37:37:b6:4b:23:75:65:27:55:a0:94:24:d6:6c:3d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54308B9152DD415CBD122B076FA6C8D2B993B5
        Validity
            Not Before: Jul 22 14:36:01 2025 GMT
            Not After : Jul 21 14:41:01 2026 GMT
        Subject: CN=904ECA6D15024531606824599C96F089AEE9B682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:9e:cc:3d:ee:b4:25:34:b5:7b:63:29:25:
                    25:17:ac:e0:e8:df:46:c0:79:b2:dc:cc:f0:84:9a:
                    ce:b0:6f:d2:85:77:03:a9:7f:3b:4f:9d:b4:14:ca:
                    d0:8a:5b:ca:31:ca:b5:97:b6:47:05:7f:00:33:2d:
                    cd:53:74:40:1a:74:1c:cf:39:86:82:0c:46:34:5e:
                    09:9b:be:71:0a:dd:aa:47:0f:a7:03:43:01:36:f4:
                    7d:b9:41:6b:89:54:59:9f:8e:fc:02:5d:81:70:76:
                    b3:a7:fe:51:be:f0:27:b5:e6:2a:a5:6f:ea:fe:f8:
                    89:e0:b9:45:a7:5f:72:9b:36:18:cb:ac:25:6a:cf:
                    af:77:16:ce:59:7d:9b:34:91:1b:c4:97:08:b9:e2:
                    87:43:53:bf:fa:5d:fe:b4:68:64:b4:91:55:e2:ea:
                    8a:22:48:20:0a:08:b7:81:ef:f0:b8:25:e8:4f:83:
                    d6:94:ce:13:f6:dc:e9:0d:a9:26:43:e2:b8:2b:3a:
                    34:ca:34:06:42:33:9f:f4:35:bc:97:ec:89:d9:7b:
                    69:5a:24:56:9e:52:8b:5c:4e:84:03:ee:55:4d:40:
                    50:da:bd:cb:73:92:62:b1:74:a0:c3:d8:21:b7:7d:
                    3d:4b:69:99:de:7c:e8:e9:eb:7b:ad:04:da:cf:6a:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:CA:6D:15:02:45:31:60:68:24:59:9C:96:F0:89:AE:E9:B6:82
            X509v3 Authority Key Identifier:
                keyid:9B:54:30:8B:91:52:DD:41:5C:BD:12:2B:07:6F:A6:C8:D2:B9:93:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/9B54308B9152DD415CBD122B076FA6C8D2B993B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B54308B9152DD415CBD122B076FA6C8D2B993B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:35:0e:27:0c:f1:40:4c:d0:eb:5a:fb:8b:90:52:0c:1e:
         c2:64:ac:ac:e9:53:b8:ee:37:87:1a:4c:5d:77:48:28:09:d3:
         59:2e:5c:0c:02:31:d0:c5:af:c0:d7:39:82:9b:e4:07:dc:72:
         48:b4:72:8c:5b:14:cb:a1:61:3e:b3:ab:d6:60:2b:14:3b:14:
         e4:cb:e9:b6:51:4b:6f:48:41:96:8f:86:44:3b:9e:1d:4f:5f:
         19:50:17:c3:f3:75:ed:cf:f1:f4:15:18:ad:82:8f:7d:d7:e2:
         f6:b9:00:88:56:c5:65:ef:cc:19:e7:98:d2:c5:c0:1e:37:32:
         7c:a7:6e:60:e1:37:4a:d2:32:2c:76:7c:03:aa:b0:c7:83:73:
         1d:ee:5b:04:fa:2c:de:5d:29:04:8c:82:c6:1c:65:06:b6:80:
         39:ff:54:5b:2a:06:f4:eb:b3:fc:aa:e6:5e:ec:bf:55:79:ce:
         8b:67:4d:a1:69:1d:ad:74:8d:33:db:0a:fa:7c:db:8e:7e:e8:
         13:a8:ad:50:04:2e:a3:41:1b:a8:6b:d2:24:f9:92:79:78:8a:
         dd:d4:80:79:4c:46:60:4f:58:5c:75:41:ca:26:2e:58:90:07:
         78:db:78:b4:92:a8:2b:58:30:de:41:c5:07:52:9a:d2:8a:88:
         fc:b9:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:42 2025 by rpki-client