Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa
File:                     3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          0E1SKgpTJKbvxg6oh4bBTbtyywlc0sq5ZTZTdVQzFYE=
Subject key identifier:   E4:6B:03:2D:7D:29:50:9B:49:E8:A3:6F:AE:96:B3:58:3B:E4:FB:72
Certificate issuer:       /CN=20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5
Certificate serial:       7FB13E738047223D58F64CCFE1AA576A5FF63F26
Authority key identifier: 20:ED:FF:4D:2B:04:CF:96:34:D1:B5:9A:AA:84:B5:92:08:59:DA:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa
Signing time:             Mon 10 Feb 2025 17:45:08 +0000
ROA not before:           Mon 10 Feb 2025 17:40:08 +0000
ROA not after:            Mon 09 Feb 2026 17:45:08 +0000
asID:                     263604
IP address blocks:        143.202.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 19:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b1:3e:73:80:47:22:3d:58:f6:4c:cf:e1:aa:57:6a:5f:f6:3f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5
        Validity
            Not Before: Feb 10 17:40:08 2025 GMT
            Not After : Feb  9 17:45:08 2026 GMT
        Subject: CN=E46B032D7D29509B49E8A36FAE96B3583BE4FB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:7f:30:4e:e5:52:8f:2f:2c:30:c7:a3:c0:
                    0b:d3:fe:20:6e:c4:38:44:fd:e1:aa:f7:5a:0d:88:
                    a6:7a:44:7b:df:c9:44:8e:f8:11:a2:32:22:90:3e:
                    f0:e0:a0:3e:36:4b:4f:14:7e:9d:8b:84:9f:97:56:
                    b9:72:d8:04:16:c6:1b:41:b4:64:1b:ba:ad:4b:c5:
                    00:45:d8:d9:b1:8a:8f:ef:a4:b0:6a:9d:a7:c9:5e:
                    3c:8c:2d:30:20:ea:2e:bd:06:8d:d2:e5:0c:9b:e6:
                    a1:09:ba:2e:9a:60:9a:70:9d:34:6b:3c:86:c0:36:
                    7e:bb:74:70:c5:ce:bc:0c:5b:c9:66:47:e9:ae:57:
                    5a:93:30:92:ae:e7:7c:b5:fe:ba:47:01:f9:8e:f8:
                    95:fe:2d:19:03:90:b7:f8:78:ff:e3:4b:32:ad:e6:
                    c2:bf:47:6e:87:60:84:f4:5a:e6:c8:45:fd:d6:1f:
                    a4:92:2c:da:e8:c7:14:a6:a8:8b:ba:1d:d9:83:76:
                    20:d9:7c:54:d5:b7:90:a0:e5:f2:63:e2:2d:0c:92:
                    34:72:6b:c0:ca:5b:1b:d5:47:55:cf:7e:bb:c6:4b:
                    60:2e:95:29:cf:22:6c:5f:34:5e:fd:3f:9d:2a:f2:
                    3a:59:46:1b:db:4e:54:70:c2:6c:4f:d1:c3:80:57:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6B:03:2D:7D:29:50:9B:49:E8:A3:6F:AE:96:B3:58:3B:E4:FB:72
            X509v3 Authority Key Identifier:
                keyid:20:ED:FF:4D:2B:04:CF:96:34:D1:B5:9A:AA:84:B5:92:08:59:DA:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20EDFF4D2B04CF9634D1B59AAA84B5920859DAB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131322e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:f3:ed:f1:66:97:90:97:fd:d5:ca:d5:50:b8:89:db:29:97:
         b3:a2:a1:f9:2f:c3:1e:06:e8:ff:e6:46:78:da:14:07:45:cb:
         56:7a:ba:d4:42:db:f0:c8:d5:75:74:3f:47:b8:c3:ec:60:20:
         c6:6c:ce:6e:16:93:2d:e8:92:22:86:80:3d:36:93:47:d8:76:
         c8:18:56:93:1c:b9:73:49:37:2f:5a:fc:0b:47:6f:af:d0:ef:
         56:12:db:05:a6:59:f4:88:0c:8a:16:5e:5a:71:29:82:3e:d5:
         7a:5d:03:72:35:68:e0:2a:37:f4:30:b0:14:af:a2:5a:16:31:
         14:70:14:17:6a:4d:8d:95:2c:29:4b:a5:e2:d5:c9:a6:ed:b6:
         8d:89:01:4a:ed:1e:93:11:4d:36:d5:1e:53:61:a6:59:04:b0:
         a9:36:04:b8:c8:b8:d0:ba:c7:13:e3:7a:db:15:3e:bf:3b:f6:
         23:80:b3:62:80:e7:72:68:3b:87:26:08:fe:86:5b:bb:03:0c:
         94:b1:bb:66:8e:0b:5d:82:0f:32:0e:30:f2:b9:fc:8f:7d:dd:
         68:0f:8c:e3:fa:85:65:73:20:d3:93:39:65:ff:62:65:09:6a:
         7d:f1:a1:e5:9f:68:4a:e6:55:b9:00:b1:03:cf:53:f2:18:1e:
         19:f8:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:46 2025 by rpki-client