Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          A2vCUQAE/3G225QVGKeDQml/I1bH+8ij0Sl2zGRXVcA=
Subject key identifier:   44:BA:B4:31:F9:AA:FC:9B:7D:A6:E4:A2:49:BC:EA:F9:C5:24:7F:50
Certificate issuer:       /CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
Certificate serial:       1A491E73FA78574DE35D7CEE502F7DADA5E5075F
Authority key identifier: 97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
Signing time:             Mon 07 Apr 2025 19:27:14 +0000
ROA not before:           Mon 07 Apr 2025 19:22:14 +0000
ROA not after:            Mon 06 Apr 2026 19:27:14 +0000
asID:                     263604
IP address blocks:        143.202.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:49:1e:73:fa:78:57:4d:e3:5d:7c:ee:50:2f:7d:ad:a5:e5:07:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FD823CD817717DD26100AA8B8CB95E8DA0F75
        Validity
            Not Before: Apr  7 19:22:14 2025 GMT
            Not After : Apr  6 19:27:14 2026 GMT
        Subject: CN=44BAB431F9AAFC9B7DA6E4A249BCEAF9C5247F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:36:41:a3:fa:60:6e:d1:37:8c:88:3c:44:
                    20:65:8f:d0:93:2f:7e:23:54:e4:46:93:05:7b:6a:
                    10:e4:2e:a1:a1:d8:92:d9:c5:a5:0b:32:46:c1:b0:
                    03:bf:71:90:7d:9f:8f:0b:fb:ac:20:60:c9:d9:f3:
                    be:8c:54:7f:45:9e:01:b0:67:c6:fc:25:3a:d7:76:
                    c8:a1:c4:34:c0:14:bd:00:87:92:92:47:03:9e:9a:
                    c5:cf:b3:d8:9a:27:38:52:cb:1e:3b:3e:fe:88:d6:
                    f1:4d:bf:4f:e4:89:4e:68:c6:f0:06:4a:de:d6:14:
                    dc:e0:c0:a5:b6:6b:65:40:bb:f0:22:4e:86:11:c0:
                    46:4f:fe:df:e7:e4:66:c9:67:6a:bc:2e:0e:e6:7a:
                    2b:20:fd:fa:f7:a8:67:9b:26:ad:fc:c6:21:fb:96:
                    29:bb:42:0b:6f:07:48:66:d3:6a:22:63:08:9c:67:
                    2c:08:33:77:8e:d0:fb:e4:ac:a1:88:ca:33:4c:e9:
                    61:73:fc:61:55:7f:61:73:f2:8f:dc:d4:47:49:5d:
                    54:47:a5:92:c7:b9:5f:6b:32:ef:84:63:0a:0c:c6:
                    76:de:36:76:a3:5f:9f:43:d0:1e:29:21:10:aa:68:
                    92:cc:58:2f:05:88:b0:45:02:49:57:01:ab:47:84:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:B4:31:F9:AA:FC:9B:7D:A6:E4:A2:49:BC:EA:F9:C5:24:7F:50
            X509v3 Authority Key Identifier:
                keyid:97:3F:D8:23:CD:81:77:17:DD:26:10:0A:A8:B8:CB:95:E8:DA:0F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/973FD823CD817717DD26100AA8B8CB95E8DA0F75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/973FD823CD817717DD26100AA8B8CB95E8DA0F75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:70:ff:c2:47:8b:39:20:e1:76:bc:b0:b0:62:1f:90:0a:
         f8:32:99:e9:13:0b:7f:2e:5c:6d:77:d0:3f:bd:94:e8:4e:68:
         b3:5a:bf:1f:3f:8a:38:ac:2b:a5:10:c9:a0:1b:f4:05:3d:f5:
         b8:f3:1d:e0:53:ef:9d:c9:8e:23:a9:cb:da:60:a5:32:a6:c2:
         30:62:61:a2:a4:45:6a:a8:06:47:30:0d:05:bf:ff:5f:7c:1f:
         58:0f:57:ab:c1:ac:f6:16:a3:3f:e2:5b:b1:f4:c6:a0:cf:31:
         9a:57:1f:80:51:d5:1d:07:74:6b:be:b5:64:69:62:a2:60:25:
         bf:89:cc:33:51:6c:3b:3a:e0:a8:23:b0:21:94:d2:48:74:11:
         e9:bd:99:c3:50:49:1f:3d:b7:f6:08:60:bd:78:81:d0:df:e2:
         57:2e:c9:8b:e3:f6:64:29:8d:60:db:02:17:79:80:d5:87:b0:
         6b:26:1d:47:ab:9d:20:ab:a0:ae:3c:bf:27:7e:21:ad:ed:07:
         38:0a:63:c9:42:29:4c:19:48:d8:4d:a5:bd:28:e1:0c:ca:eb:
         62:b9:fa:e0:94:ec:a6:b5:c2:9c:78:f2:43:ed:d6:8d:c1:29:
         ac:9e:b6:27:2f:cb:da:fe:c7:af:6e:e5:94:53:0a:a0:59:76:
         06:30:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:11 2025 by rpki-client