Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa (raw, json)
Hash identifier:          G01FyHYHriFMIpoD3UyE+u4udEs2HdDSqP5PJpeAE1g=
Subject key identifier:   60:E7:D1:88:2B:2F:CF:AC:DE:3E:CF:02:D5:45:83:8F:72:E2:7B:29
Certificate issuer:       /CN=20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5
Certificate serial:       0CF0F7924970AA3DF0C9AE003642E606F8A0F72E
Authority key identifier: 20:ED:FF:4D:2B:04:CF:96:34:D1:B5:9A:AA:84:B5:92:08:59:DA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa
Signing time:             Mon 10 Feb 2025 17:45:07 +0000
ROA not before:           Mon 10 Feb 2025 17:40:07 +0000
ROA not after:            Mon 09 Feb 2026 17:45:07 +0000
asID:                     263604
IP address blocks:        143.202.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:f7:92:49:70:aa:3d:f0:c9:ae:00:36:42:e6:06:f8:a0:f7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5
        Validity
            Not Before: Feb 10 17:40:07 2025 GMT
            Not After : Feb  9 17:45:07 2026 GMT
        Subject: CN=60E7D1882B2FCFACDE3ECF02D545838F72E27B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:60:38:86:84:3d:b0:ff:66:1c:f2:1d:7b:
                    74:2e:19:a3:28:f5:a8:22:c1:84:0c:e8:9b:a5:2a:
                    d7:3c:63:66:11:46:96:b7:03:bb:cf:29:b5:0f:d5:
                    99:d3:a5:1b:68:11:7f:c1:b3:42:f0:22:58:ff:21:
                    84:b3:d6:ac:dc:c9:29:b1:97:59:d1:31:82:2c:27:
                    ab:be:29:5c:01:0a:33:d6:aa:dd:96:7b:be:74:56:
                    ff:5e:09:3d:05:b6:ca:9d:bb:db:6e:30:6e:68:58:
                    4b:7c:81:30:9c:04:ae:c9:a0:95:fa:e6:6f:17:14:
                    79:23:49:61:6c:a5:ce:f6:d7:a9:37:1a:28:63:97:
                    5b:31:30:6f:2c:b0:1d:5c:ef:be:cd:94:6c:c2:28:
                    5a:79:d6:c0:e5:7a:f9:91:bb:3d:4f:39:b4:61:08:
                    a0:18:5b:e8:fc:de:6d:8d:80:14:e0:ab:cc:99:00:
                    a6:6d:cb:09:73:1f:7c:d1:02:4b:74:03:ba:84:c6:
                    71:f9:3c:71:f0:63:c6:89:78:7d:8b:43:7b:fa:02:
                    0c:a6:38:59:7d:92:f7:95:26:12:91:53:d2:62:16:
                    79:6e:bb:f4:2a:c8:b9:90:9d:0a:07:f6:ec:88:88:
                    c5:a0:33:82:2f:6a:b0:2a:48:52:54:40:c1:f2:f4:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E7:D1:88:2B:2F:CF:AC:DE:3E:CF:02:D5:45:83:8F:72:E2:7B:29
            X509v3 Authority Key Identifier:
                keyid:20:ED:FF:4D:2B:04:CF:96:34:D1:B5:9A:AA:84:B5:92:08:59:DA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32322d3232203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:03:9b:e2:bf:da:10:f8:b4:9b:d6:5f:2c:d1:f8:89:3e:15:
         b7:77:3a:1b:af:20:62:5d:42:b2:82:fa:e4:f9:37:54:71:d3:
         1a:7a:d7:95:17:8b:a2:10:35:41:88:85:13:a7:d0:df:ca:4b:
         fd:33:33:5d:49:b7:58:a9:5e:b7:28:7c:ac:e3:6b:dc:9f:5f:
         b0:4c:59:5a:a2:d4:d4:1b:22:09:f5:43:59:05:9f:69:8b:05:
         a5:44:5c:29:1f:ea:0a:e9:5b:de:88:51:77:33:a5:a0:d4:d0:
         e1:d9:21:21:c2:49:d5:0a:12:75:98:e4:18:98:be:f9:61:69:
         a5:e9:0b:5b:60:2d:5c:7f:ae:d7:76:f6:a5:d0:85:5c:a6:a1:
         8e:de:98:be:2d:79:3b:7d:a1:ec:8e:89:94:d7:43:d7:8d:73:
         9e:8e:a3:12:89:30:a7:a1:a5:e1:97:be:87:6b:af:f8:e0:9a:
         6d:1d:7a:04:c9:06:f3:72:d1:d1:67:31:41:bf:48:39:05:ed:
         86:66:e3:27:3d:b2:d5:63:5c:9d:60:2d:56:6e:22:a6:39:ca:
         e7:e5:30:4a:e9:a4:e3:b8:3d:30:d4:44:bb:85:3e:69:0c:1e:
         ac:40:2f:df:17:26:ae:83:9b:57:3b:04:3d:80:20:7f:c7:a1:
         5b:0b:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:56 2025 by rpki-client