Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234302e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          Zw+N3pk/85VEezvEmpqNf65u7jR5ZJPRWyo9O0h5k5o=
Subject key identifier:   48:71:6C:39:75:E7:08:69:35:23:AD:89:1F:A9:65:C7:E5:2B:10:A8
Certificate issuer:       /CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
Certificate serial:       43C2C7A00458EC4293FFF910393A7AE89340F4A4
Authority key identifier: B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa
Signing time:             Mon 23 Dec 2024 17:23:32 +0000
ROA not before:           Mon 23 Dec 2024 17:18:32 +0000
ROA not after:            Mon 22 Dec 2025 17:23:32 +0000
asID:                     271217
IP address blocks:        143.0.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c2:c7:a0:04:58:ec:42:93:ff:f9:10:39:3a:7a:e8:93:40:f4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
        Validity
            Not Before: Dec 23 17:18:32 2024 GMT
            Not After : Dec 22 17:23:32 2025 GMT
        Subject: CN=48716C3975E708693523AD891FA965C7E52B10A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:33:8d:a7:2e:77:c8:f8:86:31:9c:f6:0e:
                    bc:ea:b0:dc:8e:33:9e:bd:2b:38:27:fc:b8:18:d1:
                    7b:7e:b9:4e:d7:b0:be:9c:f8:ec:d7:52:12:30:a3:
                    42:4e:c1:70:76:c6:d0:07:49:f5:20:ec:02:f6:39:
                    de:b5:93:04:d3:17:92:e5:58:66:30:cd:5b:8c:44:
                    4e:30:a0:89:3a:80:d7:fb:e6:98:cb:84:6e:4d:2b:
                    a6:b7:12:d9:00:02:ab:b0:a9:e6:58:f6:2c:fe:d8:
                    66:eb:a8:07:b8:01:12:54:af:93:9a:15:97:0f:05:
                    30:f3:94:69:8c:ec:c0:93:ad:f7:f7:f1:6b:8c:93:
                    b5:b3:3d:82:e2:9d:61:43:25:aa:f9:a7:d8:75:e4:
                    b3:92:93:21:88:9f:84:2b:7c:51:93:dc:16:40:a0:
                    27:e0:cb:82:66:3a:82:c6:11:d3:18:32:bd:1b:b7:
                    4e:47:04:97:9d:09:91:ed:d6:8f:25:9a:3d:cc:ab:
                    a7:30:1e:70:36:6f:07:e2:7d:0e:18:99:2d:03:1b:
                    25:f4:0d:b9:98:f0:ab:9f:8a:46:eb:8b:13:e0:14:
                    65:54:a1:8c:ac:8a:f8:a4:56:5f:00:19:ee:4f:f3:
                    a0:ff:7f:3b:21:0c:83:40:7e:3b:22:cc:af:8b:7e:
                    da:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:71:6C:39:75:E7:08:69:35:23:AD:89:1F:A9:65:C7:E5:2B:10:A8
            X509v3 Authority Key Identifier:
                keyid:B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:1b:09:9b:b9:87:3c:4d:05:20:6b:82:b8:8d:1c:eb:36:a4:
         0a:03:ce:40:92:7a:6a:a1:9b:ef:57:f7:38:f9:97:f5:b5:28:
         1c:b8:1a:af:be:27:63:f2:7d:87:71:52:88:1a:47:27:da:39:
         ef:0b:f1:7c:45:22:77:b0:c5:9f:aa:0b:b9:b5:cd:73:94:54:
         6e:77:8d:eb:fe:53:12:d6:bb:9b:9f:d7:20:ee:5c:4f:86:4e:
         b5:eb:7c:8d:80:d8:65:80:6a:5f:56:60:08:a3:fc:fc:3b:84:
         3d:ff:1a:4a:da:10:b9:b5:d3:66:fb:d5:62:27:bb:f2:b3:9d:
         82:3b:dc:ba:5f:52:71:fe:60:9c:c5:d5:d6:e7:c8:92:19:48:
         c4:37:15:2f:d5:5f:a7:59:d8:08:45:58:a1:d5:52:92:82:07:
         df:b0:69:17:14:cf:c5:6b:bc:df:f5:be:ad:24:30:e7:b6:e4:
         4e:8b:78:9a:00:3d:22:a2:6c:01:14:05:a2:d3:7c:f2:02:1e:
         a7:83:75:a5:6a:fd:68:27:cd:3f:3c:6d:3f:68:f7:be:9a:8d:
         40:1d:39:1b:cd:1a:19:1b:e0:19:94:9e:29:11:81:be:71:f9:
         cc:d8:5d:7e:e3:86:d7:36:82:89:06:db:5d:a8:13:10:4a:95:
         19:42:89:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ8LHoARY7EKT//kQOTp66JNA9KQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDNkJEQ0Q2NTRFQzQxQThBRkYwMzQ2MUU5REI3Q0Iw
QjE1QjgyRTAeFw0yNDEyMjMxNzE4MzJaFw0yNTEyMjIxNzIzMzJaMDMxMTAvBgNV
BAMTKDQ4NzE2QzM5NzVFNzA4NjkzNTIzQUQ4OTFGQTk2NUM3RTUyQjEwQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxDONpy53yPiGMZz2DrzqsNyO
M569Kzgn/LgY0Xt+uU7XsL6c+OzXUhIwo0JOwXB2xtAHSfUg7AL2Od61kwTTF5Ll
WGYwzVuMRE4woIk6gNf75pjLhG5NK6a3EtkAAquwqeZY9iz+2GbrqAe4ARJUr5Oa
FZcPBTDzlGmM7MCTrff38WuMk7WzPYLinWFDJar5p9h15LOSkyGIn4QrfFGT3BZA
oCfgy4JmOoLGEdMYMr0bt05HBJedCZHt1o8lmj3Mq6cwHnA2bwfifQ4YmS0DGyX0
DbmY8KufikbrixPgFGVUoYysivikVl8AGe5P86D/fzshDINAfjsizK+Lftp/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSHFsOXXnCGk1I62JH6llx+UrEKgwHwYDVR0j
BBgwFoAUs8a9zWVOxBqK/wNGHp23ywsVuC4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2VacUw0VjNXcmpDUGI5NUJhWnM2UFlocjhFUTVHYVJ3clA2Z3lweVFz
MUwvMS9CM0M2QkRDRDY1NEVDNDFBOEFGRjAzNDYxRTlEQjdDQjBCMTVCODJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzZCRENENjU0RUM0MUE4
QUZGMDM0NjFFOURCN0NCMEIxNUI4MkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlWnFMNFYzV3JqQ1BiOTVCYVpzNlBZaHI4RVE1R2FSd3JQNmd5cHlRczFMLzEv
MzEzNDMzMmUzMDJlMzIzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzIzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDwMA0GCSqGSIb3DQEBCwUAA4IBAQBAGwmbuYc8
TQUga4K4jRzrNqQKA85AknpqoZvvV/c4+Zf1tSgcuBqvvidj8n2HcVKIGkcn2jnv
C/F8RSJ3sMWfqgu5tc1zlFRud43r/lMS1rubn9cg7lxPhk6163yNgNhlgGpfVmAI
o/z8O4Q9/xpK2hC5tdNm+9ViJ7vys52CO9y6X1Jx/mCcxdXW58iSGUjENxUv1V+n
WdgIRVih1VKSggffsGkXFM/Fa7zf9b6tJDDntuROi3iaAD0iomwBFAWi03zyAh6n
g3Wlav1oJ80/PG0/aPe+mo1AHTkbzRoZG+AZlJ4pEYG+cfnM2F1+44bXNoKJBttd
qBMQSpUZQoms
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:46 2025 by rpki-client