Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (raw, json)
Hash identifier:          XhZB6r3F/lPefNznAaeU8dDACZb68IQxSiO8p3bFbGw=
Subject key identifier:   4F:86:A4:6D:CE:B5:0F:C5:5B:DB:A2:24:86:5A:B2:0C:90:CF:1E:AF
Certificate issuer:       /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
Certificate serial:       5D59AC63936AB981980E970BE2983186846D6592
Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
Signing time:             Mon 07 Apr 2025 19:27:14 +0000
ROA not before:           Mon 07 Apr 2025 19:22:14 +0000
ROA not after:            Mon 06 Apr 2026 19:27:14 +0000
asID:                     263604
IP address blocks:        143.202.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:59:ac:63:93:6a:b9:81:98:0e:97:0b:e2:98:31:86:84:6d:65:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
        Validity
            Not Before: Apr  7 19:22:14 2025 GMT
            Not After : Apr  6 19:27:14 2026 GMT
        Subject: CN=4F86A46DCEB50FC55BDBA224865AB20C90CF1EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:2e:74:41:c6:c5:f0:88:d2:75:0f:5b:4c:
                    f6:41:42:6b:61:d0:d7:e0:7f:d2:7a:ad:43:1e:b3:
                    e1:7b:d9:c9:8c:48:6b:7b:c6:7f:89:48:08:ea:c0:
                    a7:2a:47:e6:22:b3:97:8b:21:0d:ed:7e:23:a8:66:
                    32:31:93:c4:be:83:5d:b4:fc:db:88:30:a0:d7:e5:
                    18:cc:c5:44:fe:67:22:4b:86:c6:eb:f5:07:7b:7b:
                    cd:b0:68:c9:e7:39:0f:44:a5:f7:57:81:53:3e:54:
                    d1:4b:33:23:c8:aa:8c:c5:05:2f:10:7a:b6:bb:6a:
                    9f:fc:f3:72:e4:13:43:3b:28:16:6c:6d:23:76:63:
                    36:08:af:64:9c:f6:5d:8a:32:f1:eb:7e:9b:ac:24:
                    d4:58:b6:4e:32:d2:30:fe:a4:33:ad:68:21:1c:53:
                    64:f8:7e:77:56:11:04:0d:05:7b:65:ba:f1:6a:5d:
                    ca:32:09:8c:bd:c4:36:fc:54:91:08:3a:90:d6:19:
                    61:23:be:14:35:16:c9:a2:16:7b:0c:1c:57:6b:ba:
                    dd:ab:29:7e:83:f5:34:12:8e:08:ef:a7:48:e6:88:
                    75:9c:67:3c:46:53:a8:72:70:8b:b8:be:e3:74:1a:
                    c4:20:78:e8:26:ff:9d:56:fb:8d:53:8f:88:e8:9d:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:A4:6D:CE:B5:0F:C5:5B:DB:A2:24:86:5A:B2:0C:90:CF:1E:AF
            X509v3 Authority Key Identifier:
                keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:da:8e:4a:51:a8:eb:c6:4d:c8:c1:32:10:e3:38:e0:b4:be:
         fa:3c:bb:7b:8b:ea:47:c3:30:2b:89:d0:b9:c9:b4:2f:ae:f4:
         67:e0:b1:d2:50:f1:cd:dd:ee:1b:dd:91:b7:d4:c4:2c:0b:8a:
         fc:e2:2d:33:21:f8:6e:79:3a:d5:57:e0:13:13:ef:54:92:88:
         57:ab:9b:dc:37:00:fa:fc:90:54:c5:18:b5:e9:c0:79:6b:6e:
         44:cf:56:ed:13:be:63:b2:1c:8c:ae:78:40:37:62:2c:5f:94:
         e6:79:b9:2c:bf:d4:8c:43:4d:2c:77:68:ed:fc:27:85:71:ec:
         5c:a8:c1:74:ea:c6:3a:ea:97:40:8b:93:14:5b:2c:28:12:cb:
         e5:c1:25:83:11:e3:77:5e:ab:66:e1:f9:1f:8d:96:b5:46:ec:
         de:77:7b:8e:c6:13:f2:3f:c1:72:a0:62:b0:20:0a:4a:55:76:
         d2:20:d2:aa:94:19:ad:32:25:89:e4:af:91:51:98:99:ec:15:
         c2:3b:eb:df:e5:e5:0d:2b:87:65:4f:2c:66:7f:85:e2:48:3e:
         ae:42:30:54:6c:6f:48:6b:a3:23:8f:b0:6f:ee:05:ff:8e:8b:
         11:eb:97:97:ca:3e:5c:eb:84:35:8c:0f:32:c5:f9:4a:fe:62:
         92:e7:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:01:28 2025 by rpki-client