Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          aB+2rSKt/jC71WyWUluyEniYl5JPgwwuVWaxjoRosJc=
Subject key identifier:   A9:BB:84:DA:0B:5C:1B:D6:34:3A:F3:BA:7C:47:59:CA:69:06:0B:69
Certificate issuer:       /CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
Certificate serial:       7FE03F43CB04CA2633A1B4D437ABEC42DA74C33E
Authority key identifier: B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
Signing time:             Thu 06 Mar 2025 16:33:33 +0000
ROA not before:           Thu 06 Mar 2025 16:28:33 +0000
ROA not after:            Thu 05 Mar 2026 16:33:33 +0000
asID:                     271217
IP address blocks:        143.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e0:3f:43:cb:04:ca:26:33:a1:b4:d4:37:ab:ec:42:da:74:c3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
        Validity
            Not Before: Mar  6 16:28:33 2025 GMT
            Not After : Mar  5 16:33:33 2026 GMT
        Subject: CN=A9BB84DA0B5C1BD6343AF3BA7C4759CA69060B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5b:42:c4:da:60:73:ab:73:81:6a:fd:d5:77:
                    c8:f4:54:23:a9:05:4c:75:81:d1:be:f3:e1:f6:3b:
                    2a:59:c0:72:3d:7f:e7:26:c1:7b:4c:b1:7f:31:eb:
                    46:e1:72:37:5e:c3:e5:ed:21:1a:19:24:a6:fb:16:
                    c2:6f:2c:47:4e:79:b3:a5:30:a9:da:f4:30:3a:87:
                    94:48:7e:40:44:97:43:4c:3c:bf:89:4f:bd:72:34:
                    0c:5c:2d:7a:56:fe:d2:31:e8:46:bf:4b:96:b2:ee:
                    25:f4:6c:ca:28:ea:45:38:a3:ee:8f:95:e1:69:af:
                    d8:13:ca:96:36:6d:0d:39:cd:dd:25:53:7e:c9:aa:
                    ab:b1:11:03:cf:ae:3a:66:b8:0d:6a:bb:88:04:4e:
                    1b:4a:d2:16:6d:ba:56:3c:98:f8:46:05:a1:06:80:
                    dc:f5:ca:51:47:0e:63:da:5a:90:c2:cc:01:a2:e6:
                    f3:97:cc:23:28:e4:be:a7:fb:b5:06:98:c4:48:18:
                    8e:1f:b5:49:ab:2f:44:b7:c6:f7:b1:68:24:41:e7:
                    a6:91:f1:66:ca:cc:35:b5:3c:e3:03:a9:3b:84:29:
                    42:57:03:84:dd:f5:ea:e2:77:91:c6:a6:98:ce:42:
                    fd:54:37:2b:cc:8b:15:dd:90:46:4b:84:b1:79:d9:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:84:DA:0B:5C:1B:D6:34:3A:F3:BA:7C:47:59:CA:69:06:0B:69
            X509v3 Authority Key Identifier:
                keyid:B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:84:6c:b7:04:97:bf:74:2c:61:cb:69:d4:68:96:ef:8d:
         58:61:13:9d:79:4d:3f:6c:05:1d:78:44:a5:9c:4b:ca:ed:ce:
         10:82:a7:57:2c:79:7c:ae:99:8a:d2:d1:20:f6:dc:44:2b:a9:
         26:6b:6a:1b:f6:0d:9f:c7:e9:3a:e4:a4:bc:f7:7f:14:cc:49:
         73:5a:03:11:54:3e:82:2d:5c:35:9b:e0:f5:16:db:fc:c4:90:
         4a:9d:d0:eb:50:01:e1:47:8e:21:0f:67:36:61:b1:7e:4d:ef:
         cc:10:90:d4:4e:ee:7a:b7:66:8a:28:3b:3b:20:6e:79:18:e2:
         f8:f1:c2:63:df:3b:d0:9d:63:6d:4a:46:a6:3a:6c:89:4e:64:
         e0:c9:28:07:9b:da:7f:9f:b1:f9:d8:24:fc:30:41:14:1a:85:
         a0:85:5b:14:5b:2b:e9:d3:56:77:ec:a0:b2:1b:ed:44:d0:01:
         d6:5b:ed:43:de:8d:ff:fb:7f:34:fd:e7:28:32:70:60:2a:49:
         b8:7d:08:48:99:7e:35:ec:f7:d7:c8:76:f3:88:8f:e8:77:71:
         e7:26:f3:ec:83:b1:06:81:2e:b3:2a:c7:7c:d3:7f:31:0f:f4:
         2c:2b:87:f9:38:2c:6a:37:36:cc:a7:86:05:1d:50:cd:f0:2c:
         ba:44:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:58 2025 by rpki-client