Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          Qu0+QQT74FIMzrfTSMR/FBALc0ImisOyFJzHeTi3dyA=
Subject key identifier:   52:BD:0B:3F:65:B9:4F:D6:72:7B:4D:0E:35:24:BA:B5:13:56:46:07
Certificate issuer:       /CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
Certificate serial:       378198D78E14A6ABBD7F54F1EE70A86C3A1E082C
Authority key identifier: 84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
Signing time:             Thu 22 May 2025 15:56:28 +0000
ROA not before:           Thu 22 May 2025 15:51:28 +0000
ROA not after:            Thu 21 May 2026 15:56:28 +0000
asID:                     271217
IP address blocks:        143.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:81:98:d7:8e:14:a6:ab:bd:7f:54:f1:ee:70:a8:6c:3a:1e:08:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
        Validity
            Not Before: May 22 15:51:28 2025 GMT
            Not After : May 21 15:56:28 2026 GMT
        Subject: CN=52BD0B3F65B94FD6727B4D0E3524BAB513564607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:72:99:b1:bf:3f:ec:71:ef:17:ca:2b:a9:
                    88:e6:f2:d7:e0:37:ab:70:53:d6:48:a8:e1:e2:2e:
                    6d:d4:db:53:0e:65:49:8f:dd:e8:03:f4:3f:98:29:
                    5a:b9:46:e9:f0:ea:93:29:77:05:42:b8:23:cf:4f:
                    7a:26:0f:bf:a7:a1:d5:0b:34:46:6f:a2:ac:b3:8c:
                    41:aa:16:07:e4:88:57:ad:38:a4:9d:f8:fd:eb:c6:
                    b7:e6:68:32:5b:8b:75:25:12:2e:a3:86:52:8a:8a:
                    7d:b9:42:eb:58:3d:3f:33:7e:15:f3:c8:73:4a:70:
                    d7:b5:d5:86:88:5f:77:84:a2:73:c1:56:5b:79:63:
                    6e:4b:59:96:c0:16:06:dc:a2:5f:3d:f9:9d:a6:95:
                    e7:f7:5d:47:ca:2d:73:ea:d6:ab:e4:7b:5a:f0:91:
                    d2:cc:5a:b0:ea:51:c2:89:db:4e:d2:d8:55:05:65:
                    cc:24:c8:ef:76:75:5d:8c:9f:17:af:93:2f:1f:25:
                    0a:d1:38:2a:f0:74:ee:e8:c7:99:c8:e1:66:d8:74:
                    9f:94:3f:96:14:01:b0:1b:a1:b6:5b:7b:9a:d9:83:
                    5e:7c:34:82:41:70:ef:c2:bb:69:dd:ff:30:1d:a0:
                    b4:d9:9b:49:37:c9:5e:75:b8:8e:57:a3:9e:0e:e0:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BD:0B:3F:65:B9:4F:D6:72:7B:4D:0E:35:24:BA:B5:13:56:46:07
            X509v3 Authority Key Identifier:
                keyid:84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:02:80:d5:6f:74:fa:67:97:9c:31:11:98:84:3f:df:b4:
         c5:7e:5e:59:4e:3e:95:19:82:87:f9:03:c5:f4:6d:50:bd:bd:
         a2:1e:f3:6e:f1:7b:31:69:14:ee:7b:35:2b:cb:5b:60:7a:71:
         c5:01:22:7e:1c:21:45:e0:98:0e:3c:a5:24:b8:d0:d4:f8:24:
         b5:c0:37:f6:88:a3:c4:b0:ae:3c:7c:1a:40:db:26:17:0f:87:
         09:b8:a2:3d:65:a7:ea:09:7b:a0:1e:5a:ac:a5:71:bb:49:e5:
         d5:12:98:fd:1b:8a:85:8e:88:02:c2:84:39:a0:59:73:c2:16:
         28:21:53:2e:49:29:74:a3:d6:1d:13:ab:01:e3:53:13:44:69:
         02:d9:73:bc:47:00:42:a0:d7:db:f0:ba:29:de:40:98:12:d3:
         2e:30:0b:62:65:71:a6:f5:a7:7f:ef:96:4a:f2:a4:71:6e:97:
         11:90:a7:dc:4a:2d:d7:52:39:03:49:b4:ed:e4:cc:f3:62:0f:
         45:84:02:6b:bc:9e:37:a2:d5:95:59:f4:09:94:91:0c:e7:c9:
         93:b8:04:fb:b1:6b:47:be:77:2f:3b:01:bf:e0:bc:19:9a:db:
         06:aa:9f:b5:c8:48:1f:c3:19:20:e6:43:fb:c9:10:97:7d:b8:
         30:9c:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:49:11 2025 by rpki-client