Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa
File:                     3134332e3230382e36382e302f32322d3234203d3e203533303934.roa (raw, json)
Hash identifier:          6P40S/iDS8GzbaO3MDagTyQAmRaADIyPgDJom7ug2sA=
Subject key identifier:   43:E1:5C:75:A9:1B:57:07:34:C6:E9:10:D2:4C:64:89:43:A2:C4:D3
Certificate issuer:       /CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C
Certificate serial:       23829B6C8EFD5D85E392D67C2797CD6BDEAD4D24
Authority key identifier: 7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa
Signing time:             Tue 11 Mar 2025 17:25:47 +0000
ROA not before:           Tue 11 Mar 2025 17:20:47 +0000
ROA not after:            Tue 10 Mar 2026 17:25:47 +0000
asID:                     53094
IP address blocks:        143.208.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.crl
                          rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:82:9b:6c:8e:fd:5d:85:e3:92:d6:7c:27:97:cd:6b:de:ad:4d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C
        Validity
            Not Before: Mar 11 17:20:47 2025 GMT
            Not After : Mar 10 17:25:47 2026 GMT
        Subject: CN=43E15C75A91B570734C6E910D24C648943A2C4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:e7:b0:b3:ec:e3:af:d9:db:85:5d:2f:5d:
                    85:1f:2b:bd:bb:04:7d:a3:90:89:70:51:6e:71:a9:
                    69:74:86:b9:45:28:a1:a4:19:ef:d3:90:10:0c:4d:
                    fa:2b:a6:26:0a:d5:36:3b:eb:1f:6b:d9:c6:ec:11:
                    cb:86:ca:b2:6b:6a:f4:07:9c:4b:ea:30:bd:92:c8:
                    ce:cb:9c:29:36:88:2f:26:88:8b:16:91:13:bf:61:
                    18:1b:8c:69:98:35:37:60:15:6f:2d:6c:9b:08:7a:
                    51:ff:fd:1c:ff:48:c8:da:a3:24:76:81:7a:1c:99:
                    20:b6:ca:2a:59:52:93:33:44:1b:df:bc:4c:b0:40:
                    19:35:5d:d6:80:0a:67:97:6a:9b:d5:f2:08:12:77:
                    59:92:e1:c9:5d:b6:bf:a2:10:b4:95:4b:5a:52:9f:
                    2b:8a:c4:0d:02:07:e6:ae:ea:ff:c5:de:fa:ae:a5:
                    8d:6d:30:07:bf:2c:e8:2c:f3:14:fb:4c:82:a5:65:
                    3e:d4:3c:40:d4:82:37:b4:e9:10:4a:95:0e:d2:4d:
                    fe:67:43:e8:f3:1c:ff:a6:7a:8d:fd:b4:0f:e5:7b:
                    39:5a:4b:37:27:92:bb:ec:ba:57:4c:8d:ad:86:94:
                    2a:4b:91:03:12:f1:41:02:e3:45:ad:35:e3:57:76:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E1:5C:75:A9:1B:57:07:34:C6:E9:10:D2:4C:64:89:43:A2:C4:D3
            X509v3 Authority Key Identifier:
                keyid:7C:CB:30:60:46:AE:AE:0E:16:E8:91:3E:33:AF:6D:6E:C6:D2:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CCB306046AEAE0E16E8913E33AF6D6EC6D2F32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pVJBGsQu93thvzUXRRExj5wkpffe34HEVUEgEfkp6VK/0/3134332e3230382e36382e302f32322d3234203d3e203533303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:3f:67:40:f7:ea:dc:20:cb:15:0d:af:79:e9:21:04:fa:00:
         2f:84:a5:59:b5:31:22:15:50:b1:d5:69:e6:72:93:58:31:6c:
         85:84:0a:f4:07:41:19:a2:d1:64:11:09:cc:9b:a6:a7:d0:8c:
         18:d2:85:6c:24:e2:b4:00:21:18:b5:49:45:4a:06:aa:a8:73:
         9a:f5:29:8d:4d:44:c7:d5:66:d2:c3:6d:c1:52:c6:5a:fa:37:
         65:67:0b:f6:33:de:0a:d4:d8:8d:32:a0:34:16:b4:f8:bb:1e:
         b8:62:23:af:b7:e7:dc:a8:0e:37:ad:50:f1:0c:54:3d:35:96:
         f4:68:29:d1:48:16:d5:9c:85:03:2a:8f:5c:79:9b:7b:f3:93:
         5d:c2:b3:86:4f:5b:ca:64:70:5f:d7:14:a0:15:ab:bd:79:0b:
         12:1e:4f:62:27:7f:18:d7:e1:45:b5:ec:82:44:5f:26:7c:85:
         d2:4c:6e:76:7c:6e:d2:df:39:00:21:ec:24:8a:0a:9b:7b:46:
         95:f9:6a:18:cd:d4:fb:b1:51:dc:11:52:c9:4f:0c:c0:28:77:
         fd:0b:2e:8f:ce:d2:e6:f9:37:92:ff:d5:89:92:85:a6:17:aa:
         34:26:fe:ab:58:20:f3:fc:d6:79:2f:8f:06:71:45:d3:90:8b:
         97:42:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:08:36 2025 by rpki-client