Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
File:                     3134332e302e3231362e302f32322d3234203d3e20323634303237.roa (raw, json)
Hash identifier:          pLSkQ+JiFHeN7/iK9Tcnn6lkvjxWbE2MIKxjc5tlxUE=
Subject key identifier:   59:80:61:2A:AC:D8:95:7B:D6:1B:6F:73:02:21:49:52:97:5E:F1:B1
Certificate issuer:       /CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
Certificate serial:       53D977FF1F6893C3A162647BA644A8855DD6604C
Authority key identifier: E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     264027
IP address blocks:        143.0.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl
                          rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:77:ff:1f:68:93:c3:a1:62:64:7b:a6:44:a8:85:5d:d6:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:c0:5f:73:42:21:e4:87:d3:8d:18:70:1b:
                    eb:81:6b:54:ba:53:aa:ae:fa:77:31:10:28:de:ec:
                    97:bf:f7:a9:53:0f:87:dc:5f:be:5a:1f:1b:7e:ef:
                    4f:cf:71:d8:92:af:af:fc:33:6d:b1:cb:09:f4:19:
                    f4:e5:b2:6f:ac:4b:91:f5:67:23:89:60:db:7f:93:
                    b5:04:57:e9:a4:61:93:06:50:59:8f:0b:b8:04:72:
                    6b:49:fe:79:05:18:02:a4:61:b6:af:5c:62:29:dd:
                    1d:9f:56:a8:3a:db:76:b6:23:81:4e:82:ff:99:64:
                    f5:d9:9d:31:ba:15:0f:e0:e2:9d:5b:c9:32:18:9f:
                    73:fa:54:3a:05:ed:09:51:ad:93:c8:e7:4b:9b:fa:
                    80:cc:98:3c:73:d4:c0:91:b7:3c:86:fc:f7:1e:43:
                    c5:d0:53:03:22:4d:46:b8:fe:63:a1:c9:fd:db:54:
                    31:e4:40:d0:82:e4:1a:8e:a9:10:ee:24:82:e1:f6:
                    20:b7:ee:dd:f1:0f:95:fb:a3:47:56:55:c1:20:45:
                    e3:d5:19:44:82:44:c4:4d:a8:ee:89:7b:93:54:c6:
                    d9:a1:d2:da:66:e1:25:a2:2e:18:cb:1e:51:f3:67:
                    ad:44:69:c4:ec:c8:45:8e:01:8b:c1:87:83:3f:45:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:61:2A:AC:D8:95:7B:D6:1B:6F:73:02:21:49:52:97:5E:F1:B1
            X509v3 Authority Key Identifier:
                keyid:E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:b2:e8:15:7c:93:4d:4c:03:9a:4c:17:3c:5e:66:d7:f6:
         86:43:f6:a5:80:ea:03:d8:22:3b:97:d2:cd:d6:97:53:8b:36:
         64:fc:62:94:8b:62:6a:b1:67:52:78:74:8b:73:d1:2b:f6:db:
         db:06:7d:fc:b1:92:c1:b2:b0:6f:47:98:7e:c6:d8:3c:e9:f0:
         09:60:03:a7:3f:57:e8:c6:36:24:89:b6:62:f4:79:de:ba:f4:
         59:1e:b2:cc:63:e0:72:2e:32:47:9b:b5:9c:d7:20:ab:cc:15:
         e7:6a:f8:91:67:72:f6:4f:3b:06:fc:2f:2b:8d:1b:47:a8:b7:
         d7:73:b3:e5:ba:d4:f1:04:90:ab:08:a1:bf:cf:90:2e:38:55:
         31:a5:23:f7:56:62:ec:14:7c:23:df:13:da:de:6f:e5:d7:77:
         b5:7d:a3:4b:ad:36:19:d3:aa:fb:32:bd:fb:19:dc:e7:11:cd:
         c4:35:05:9e:e3:c1:26:08:5d:c5:e9:ab:0f:9f:95:ca:97:5c:
         c6:15:44:f6:df:c2:0a:e3:33:f0:a0:54:b6:56:39:55:20:b2:
         d5:6c:07:50:8d:fd:8f:cb:b6:c3:2b:08:21:93:7e:a6:c3:e3:
         4e:7d:86:a2:98:28:85:d6:70:62:eb:9a:2b:c3:5a:5f:9f:0c:
         15:52:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:51 2025 by rpki-client