Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
File:                     3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          tJoIFhWYWkL+eKWtNboWGViECixAmKoBfQTgsLs6J9I=
Subject key identifier:   0E:C6:7C:9F:CD:03:F5:DA:14:86:5E:A9:07:08:AB:EB:87:DF:7A:64
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       0F8A7A471C5914A4F9AA5200CF712D22DE977693
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
Signing time:             Thu 06 Mar 2025 07:52:36 +0000
ROA not before:           Thu 06 Mar 2025 07:47:36 +0000
ROA not after:            Thu 05 Mar 2026 07:52:36 +0000
asID:                     262784
IP address blocks:        143.202.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8a:7a:47:1c:59:14:a4:f9:aa:52:00:cf:71:2d:22:de:97:76:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Mar  6 07:47:36 2025 GMT
            Not After : Mar  5 07:52:36 2026 GMT
        Subject: CN=0EC67C9FCD03F5DA14865EA90708ABEB87DF7A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a9:1d:fb:5a:52:a5:a7:1e:a6:f9:43:9e:1b:
                    1f:49:cf:d4:77:59:6c:63:14:68:34:96:d8:ed:53:
                    e7:85:f6:ac:d0:47:ff:0c:c8:82:10:cd:e9:a5:70:
                    6c:09:a3:a9:23:a8:5c:06:a6:62:5b:c9:c7:6c:e4:
                    f7:23:c3:a0:17:26:7f:23:25:56:9d:65:f6:39:ae:
                    00:1e:40:1c:f5:48:19:72:c2:1d:70:4f:e3:30:8c:
                    44:cc:7a:58:ea:18:89:6f:df:7b:6e:2b:93:bc:fe:
                    56:9f:00:61:0f:cd:ff:25:b1:6f:7b:25:50:70:db:
                    4c:5e:1a:f9:12:b5:c1:21:54:9f:88:e4:15:22:b0:
                    eb:20:3a:ae:93:e3:84:b0:2c:de:ea:08:76:59:6e:
                    eb:4f:45:5f:87:f0:9b:8c:c6:e1:e7:0f:f4:bc:fb:
                    19:fc:f5:fe:6e:47:42:2d:c4:e5:ee:47:30:4e:53:
                    32:cb:bf:dd:50:9e:45:01:cc:04:4a:f2:f9:4f:3d:
                    ec:21:b8:14:87:ce:f0:1d:cb:b7:4a:5a:9d:e2:5d:
                    37:b6:ef:b6:7d:a5:8e:ef:80:3c:38:66:c6:a7:87:
                    5e:76:ea:d4:bd:13:f4:bb:8e:a7:20:f2:1f:ed:7e:
                    62:9f:8a:f8:83:7d:15:65:b0:49:e5:c9:de:d0:af:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C6:7C:9F:CD:03:F5:DA:14:86:5E:A9:07:08:AB:EB:87:DF:7A:64
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:de:23:0d:04:cc:97:b3:48:20:b8:a8:df:bb:76:cd:e8:
         d0:99:98:02:22:f5:d2:9a:5f:7e:ac:83:93:01:74:b0:5e:cc:
         0c:bf:97:64:20:94:d0:0e:1d:84:09:12:c2:9a:28:7a:98:99:
         08:9e:22:a0:de:b3:9d:b7:fc:5e:ed:70:dc:e5:c2:7c:05:a0:
         9d:af:74:ad:58:88:cf:a0:cf:c7:c8:96:a3:0f:92:1f:b1:28:
         a8:7e:a8:1d:1b:8b:85:66:91:a4:76:8d:6d:09:62:da:7f:b0:
         72:b7:99:af:8b:10:88:4e:3a:f6:a5:e4:a8:dc:fb:41:b4:3a:
         e8:3a:3d:6b:68:69:1d:3a:bf:40:c6:cd:bc:55:a7:18:a3:ec:
         a2:c4:fa:d9:4a:ba:60:5d:37:75:f8:6d:25:58:cb:f0:e1:11:
         45:c0:fd:50:5e:11:b4:bf:a0:4f:aa:3e:4d:0a:30:b8:2f:b6:
         35:3f:88:c2:41:74:32:47:fc:44:83:7c:3a:a3:0d:d5:ac:27:
         ed:14:85:cd:18:3e:d7:b7:24:65:d0:2c:77:34:a8:74:a9:6f:
         d2:fe:fd:b0:31:a9:6d:f2:bb:84:e0:f1:36:5d:c0:d4:90:e2:
         ce:e0:f5:b4:0e:81:23:ae:0f:ee:18:a1:88:e9:95:b3:f4:4c:
         72:d0:1c:d4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUD4p6RxxZFKT5qlIAz3EtIt6XdpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNTAzMDYwNzQ3MzZaFw0yNjAzMDUwNzUyMzZaMDMxMTAvBgNV
BAMTKDBFQzY3QzlGQ0QwM0Y1REExNDg2NUVBOTA3MDhBQkVCODdERjdBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtqR37WlKlpx6m+UOeGx9Jz9R3
WWxjFGg0ltjtU+eF9qzQR/8MyIIQzemlcGwJo6kjqFwGpmJbycds5Pcjw6AXJn8j
JVadZfY5rgAeQBz1SBlywh1wT+MwjETMeljqGIlv33tuK5O8/lafAGEPzf8lsW97
JVBw20xeGvkStcEhVJ+I5BUisOsgOq6T44SwLN7qCHZZbutPRV+H8JuMxuHnD/S8
+xn89f5uR0ItxOXuRzBOUzLLv91QnkUBzARK8vlPPewhuBSHzvAdy7dKWp3iXTe2
77Z9pY7vgDw4Zsanh1526tS9E/S7jqcg8h/tfmKfiviDfRVlsEnlyd7Qr2bRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDsZ8n80D9doUhl6pBwir64ffemQwHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzNDMzMmUzMjMwMzIyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KaDANBgkqhkiG9w0BAQsFAAOCAQEAG47e
Iw0EzJezSCC4qN+7ds3o0JmYAiL10ppffqyDkwF0sF7MDL+XZCCU0A4dhAkSwpoo
epiZCJ4ioN6znbf8Xu1w3OXCfAWgna90rViIz6DPx8iWow+SH7EoqH6oHRuLhWaR
pHaNbQli2n+wcreZr4sQiE469qXkqNz7QbQ66Do9a2hpHTq/QMbNvFWnGKPsosT6
2Uq6YF03dfhtJVjL8OERRcD9UF4RtL+gT6o+TQowuC+2NT+IwkF0Mkf8RIN8OqMN
1awn7RSFzRg+17ckZdAsdzSodKlv0v79sDGpbfK7hODxNl3A1JDizuD1tA6BI64P
7hihiOmVs/RMctAc1A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:22:46 2025 by rpki-client