Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
File:                     3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa (raw, json)
Hash identifier:          WD2chNcwbg2S0mjWpkaYDFB2ew5LZCsUkfIVEmMzl2k=
Subject key identifier:   FD:63:C0:67:45:06:18:65:3F:25:D1:16:5B:B9:4C:6B:59:8D:6B:3D
Certificate issuer:       /CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
Certificate serial:       34525EE6E19D3AB64DD0BB0A0350E0819F161249
Authority key identifier: 54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa
Signing time:             Sat 01 Nov 2025 01:02:38 +0000
ROA not before:           Sat 01 Nov 2025 00:57:38 +0000
ROA not after:            Sat 31 Oct 2026 01:02:38 +0000
asID:                     264075
IP address blocks:        143.208.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 00:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:52:5e:e6:e1:9d:3a:b6:4d:d0:bb:0a:03:50:e0:81:9f:16:12:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB
        Validity
            Not Before: Nov  1 00:57:38 2025 GMT
            Not After : Oct 31 01:02:38 2026 GMT
        Subject: CN=FD63C067450618653F25D1165BB94C6B598D6B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:28:7f:34:4a:87:5e:4b:05:ed:6a:69:63:
                    5d:c0:b7:58:a8:e1:b2:e7:ab:45:c7:d5:60:57:52:
                    b2:94:1e:52:ac:4b:54:10:e0:f3:82:f5:58:f4:a8:
                    79:1a:ae:e0:d1:ca:0a:12:2a:85:5f:47:ef:a8:a7:
                    54:e2:3b:9c:4a:d9:c4:ab:06:5b:c9:1f:30:c8:a9:
                    84:6b:a4:24:16:6a:0c:87:ce:4d:9d:39:c2:01:56:
                    de:b9:fb:71:ea:32:43:6a:4d:d2:ff:b6:58:26:9d:
                    cd:0a:12:24:44:07:bb:b2:5f:d4:36:ef:0b:4c:4f:
                    c6:cf:24:a2:59:c8:cb:fe:1f:7a:9e:9f:70:57:75:
                    3d:9f:9b:dd:95:73:a3:e6:6c:b2:7b:df:ce:93:9c:
                    62:0f:55:63:71:a0:02:ea:74:4e:9a:b0:b5:11:e8:
                    e6:ab:a6:05:7f:49:d5:e3:d5:c4:29:0d:5d:1f:18:
                    4a:79:bc:82:2b:bc:19:8e:f2:97:13:3d:98:2b:8c:
                    32:41:a4:62:21:0d:b9:54:41:53:57:ec:5b:f2:ed:
                    07:a9:9d:34:93:dd:c4:e6:a5:d5:18:9d:c1:82:b2:
                    9c:90:bf:be:25:d9:36:1e:06:03:ca:e5:2d:5f:bc:
                    5b:aa:42:cd:51:e6:9b:91:ce:85:e1:c2:d1:fb:6b:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:C0:67:45:06:18:65:3F:25:D1:16:5B:B9:4C:6B:59:8D:6B:3D
            X509v3 Authority Key Identifier:
                keyid:54:EC:70:51:1E:4F:9C:93:7D:DD:77:E9:BD:EC:EA:12:1D:DB:B1:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54EC70511E4F9C937DDD77E9BDECEA121DDBB1EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/0/3134332e3230382e32302e302f32322d3332203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:32:db:47:b0:ec:2a:fd:42:84:43:8e:6a:b6:ec:44:07:a7:
         60:fb:99:4f:2b:2f:c1:77:d4:cb:1f:02:dd:2b:9b:2e:25:12:
         8a:52:52:06:30:41:e5:be:34:e1:a7:f7:c8:50:c3:a6:e3:bb:
         0d:43:10:32:c0:df:37:21:81:2f:39:32:af:76:d0:c4:60:db:
         a6:e3:83:81:b9:b1:b5:03:e4:32:69:70:a2:9b:02:85:72:11:
         1d:3a:e5:df:bf:92:ae:86:95:5f:3f:d9:8e:ad:33:93:06:35:
         ed:e1:bd:d9:70:5b:6b:4e:89:d1:14:8e:81:33:49:de:eb:3b:
         03:3b:5e:db:86:72:44:ed:2c:e3:aa:f5:fa:23:de:9e:10:d0:
         41:3b:39:3b:a1:df:14:71:d3:bf:79:75:1d:12:1c:7c:b8:44:
         0e:04:73:b0:03:73:39:98:05:1a:a3:1f:00:4f:f1:31:06:e8:
         9f:cc:3b:95:e7:44:81:51:28:c2:63:3b:8c:09:4a:26:4a:23:
         1d:cb:94:bd:58:aa:7e:19:1b:31:bb:92:6c:4a:9a:a7:0a:01:
         f4:94:a0:99:ae:8a:43:1e:d7:0a:a7:69:94:68:42:1e:b9:e5:
         54:ab:c2:bf:16:77:6c:0e:48:e1:36:68:31:94:ee:29:6f:5b:
         68:f2:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:31:06 2025 by rpki-client