Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
File:                     3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          2fTfgk/FpE8z3PRGr2I6DYD99MKmP29Btk+BpLqCttE=
Subject key identifier:   34:5A:FC:73:A5:9C:63:0B:74:77:3F:AC:5F:F5:E3:70:CD:E2:DC:13
Certificate issuer:       /CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
Certificate serial:       31E078B9ED79AD0A1F921170A135C3410913E39E
Authority key identifier: 1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
Signing time:             Fri 21 Feb 2025 16:22:39 +0000
ROA not before:           Fri 21 Feb 2025 16:17:39 +0000
ROA not after:            Fri 20 Feb 2026 16:22:39 +0000
asID:                     264075
IP address blocks:        143.208.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e0:78:b9:ed:79:ad:0a:1f:92:11:70:a1:35:c3:41:09:13:e3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07
        Validity
            Not Before: Feb 21 16:17:39 2025 GMT
            Not After : Feb 20 16:22:39 2026 GMT
        Subject: CN=345AFC73A59C630B74773FAC5FF5E370CDE2DC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:29:32:cc:49:18:81:21:54:a5:09:74:dd:
                    4d:22:2d:00:95:3f:1e:4f:89:fd:24:48:2d:65:89:
                    ac:af:f6:2e:e5:95:74:56:62:24:3d:62:84:85:51:
                    ed:1e:60:fd:9b:d6:f1:a6:99:79:ef:34:81:33:c3:
                    19:9e:fc:73:af:70:69:5d:b5:1d:75:c9:59:b9:98:
                    b9:cf:20:72:53:25:93:94:a7:f5:9e:d7:81:11:66:
                    ee:c6:52:e6:01:89:b9:91:f0:68:31:40:b3:de:b5:
                    3e:40:c5:87:cb:19:a8:95:48:3d:94:a4:4d:87:6b:
                    70:bc:1e:ba:29:af:2f:38:6b:9a:c2:23:8d:dd:d8:
                    04:bc:9e:74:1d:a6:3f:91:fd:c4:fd:bc:8f:4e:e9:
                    93:f2:bc:a8:e0:45:c5:59:de:46:71:84:90:71:50:
                    42:e5:58:47:54:df:48:ea:91:88:b8:28:40:d5:31:
                    e1:18:e9:69:41:55:6c:5b:6f:f0:8f:6f:59:aa:94:
                    38:11:20:99:02:5b:2d:4b:0f:4c:c6:0c:a9:18:36:
                    0d:6f:ac:0e:09:c8:e4:e5:c8:e2:cd:c2:c1:67:af:
                    e3:01:fe:7e:1b:b1:a1:13:30:82:3e:39:14:ca:00:
                    35:5e:54:21:ba:58:4b:4e:94:05:9a:5a:03:47:48:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:FC:73:A5:9C:63:0B:74:77:3F:AC:5F:F5:E3:70:CD:E2:DC:13
            X509v3 Authority Key Identifier:
                keyid:1F:88:BE:2C:C4:CA:60:A3:45:8E:9F:8C:F2:FB:AA:FF:1F:ED:7A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F88BE2CC4CA60A3458E9F8CF2FBAAFF1FED7A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:bb:67:6c:14:2d:06:48:6d:1a:a2:f4:63:e8:04:30:c9:
         f9:7a:02:7d:b8:62:a6:b4:54:94:5e:8e:32:85:9a:24:ba:fe:
         8c:ee:7f:3f:65:1e:d7:50:97:cc:57:39:0e:ea:52:6d:ed:73:
         07:ce:a5:34:32:02:2a:d3:c4:89:e8:2f:74:ae:43:8e:00:c6:
         39:fd:e2:20:91:b4:e7:60:05:4b:ba:de:50:39:af:f4:a4:ab:
         2a:b9:e6:53:e8:77:56:28:b6:dd:6b:43:60:d3:c8:cd:89:19:
         bc:70:a3:ff:a1:8b:3b:b7:e6:b1:2b:12:04:dc:25:d3:87:71:
         cd:33:71:f8:43:5c:58:39:a6:2e:d0:92:45:15:e5:fc:38:4a:
         30:45:27:ad:d8:94:ea:40:d4:9e:1a:8f:0b:4a:f3:ab:4e:8b:
         21:45:1f:d2:10:23:31:4a:46:03:b0:0b:87:25:86:93:95:7d:
         80:fc:8c:7f:a9:81:c9:d7:62:b6:e8:16:17:44:69:7a:46:da:
         ad:44:f6:77:00:b8:07:fe:53:dc:ee:2a:5e:d6:58:48:93:14:
         9f:9c:d2:ed:84:71:90:57:8c:6f:66:17:1f:7a:5c:6f:6f:a0:
         88:c9:1e:21:56:79:d4:7d:d7:9d:1f:3f:d8:68:47:7f:7a:31:
         2c:d6:0e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:09 2025 by rpki-client