Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
File:                     3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa (raw, json)
Hash identifier:          VXOFCwlptAPLJPNt5P/aHU50DnH2eDVi00INFY2xo9o=
Subject key identifier:   E3:D1:D3:A3:E0:3E:53:2F:B7:EB:7D:5D:26:78:E9:EF:B2:6F:28:0E
Certificate issuer:       /CN=27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A
Certificate serial:       0141E70CC60D26EF17B2A49FD53F2FC9CFD07061
Authority key identifier: 27:F4:AD:22:72:6A:F9:0E:71:DD:A4:9C:ED:F6:7B:DF:DD:04:0E:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
Signing time:             Fri 07 Feb 2025 19:14:07 +0000
ROA not before:           Fri 07 Feb 2025 19:09:07 +0000
ROA not after:            Fri 06 Feb 2026 19:14:07 +0000
asID:                     265143
IP address blocks:        143.255.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.crl
                          rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:e7:0c:c6:0d:26:ef:17:b2:a4:9f:d5:3f:2f:c9:cf:d0:70:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A
        Validity
            Not Before: Feb  7 19:09:07 2025 GMT
            Not After : Feb  6 19:14:07 2026 GMT
        Subject: CN=E3D1D3A3E03E532FB7EB7D5D2678E9EFB26F280E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:3a:1d:65:67:01:3d:bb:d3:6a:09:a7:d8:
                    73:d1:84:88:29:d8:71:9a:6b:86:27:83:35:72:e1:
                    77:4e:50:a2:f2:12:8f:8a:29:6a:b1:12:c5:f3:f2:
                    8f:a8:23:bf:19:2b:10:c9:06:5b:39:1d:53:45:a9:
                    c5:14:3c:ef:1f:65:d3:38:fc:77:80:9e:1e:a6:78:
                    1d:9a:6a:f5:c5:6a:c0:65:b6:41:e4:e6:76:f5:76:
                    46:f4:63:5c:c5:71:4c:26:52:87:99:5d:1d:00:27:
                    45:15:37:08:94:11:e2:e0:52:7a:6c:eb:09:c3:71:
                    2e:e5:7d:51:26:5a:c4:95:76:72:87:12:22:c7:69:
                    d4:17:ec:c9:a8:5a:27:05:57:b0:10:ab:e5:f0:b4:
                    f9:33:f8:2a:68:93:c3:8b:87:e1:a7:d3:47:86:05:
                    9b:52:d4:8f:a0:71:26:3b:fc:7d:5a:f7:b2:87:3d:
                    c3:fd:bd:23:8c:77:65:8b:a1:8c:ff:fd:dd:75:17:
                    ce:38:aa:11:95:59:cc:8e:8e:20:df:2b:7a:e6:33:
                    a1:44:f7:c7:4d:70:57:25:90:7e:81:69:c8:30:c6:
                    6e:38:e3:de:2f:94:35:49:ca:d7:b5:74:36:60:a9:
                    41:ab:00:6d:09:5f:2e:4e:76:7e:61:30:0d:38:94:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D1:D3:A3:E0:3E:53:2F:B7:EB:7D:5D:26:78:E9:EF:B2:6F:28:0E
            X509v3 Authority Key Identifier:
                keyid:27:F4:AD:22:72:6A:F9:0E:71:DD:A4:9C:ED:F6:7B:DF:DD:04:0E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F4AD22726AF90E71DDA49CEDF67BDFDD040E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/0/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:15:25:18:30:48:ed:80:46:d8:a4:0c:42:2d:e7:6f:51:
         2a:2f:36:45:1d:80:17:ee:23:ed:1c:f0:c7:60:fd:7e:3d:04:
         9d:79:8c:1b:d6:5d:6e:18:dc:9e:51:ca:0d:10:a1:dd:41:a7:
         b5:a9:32:d7:24:40:b4:25:8d:40:48:ad:38:4a:58:04:51:f0:
         29:89:d5:e9:e5:01:a6:64:f4:17:64:38:6e:46:be:eb:22:f0:
         95:97:49:1f:c9:36:6b:93:a1:18:47:08:00:a7:9b:4d:02:a4:
         4c:0c:41:ac:07:ef:56:29:69:ad:da:27:da:e4:cf:1b:de:2e:
         90:70:ad:56:6b:02:f5:43:17:98:7e:a2:d7:82:a0:70:d5:1d:
         4b:0a:f7:a5:5f:05:54:8b:58:81:49:d3:ea:ff:25:fa:c2:bd:
         e6:47:bc:64:e9:cf:1b:7a:0c:31:8a:b9:a1:56:c1:29:4c:62:
         43:8e:94:4b:1c:aa:06:48:3f:8b:cc:96:55:f8:48:04:84:15:
         19:45:f4:e4:e0:ab:64:83:71:50:23:39:2b:d3:d3:d2:43:bd:
         b1:db:be:ad:8f:fe:e9:ee:c2:cb:bf:9c:d8:1e:4d:db:79:1d:
         b8:19:a3:f5:55:cd:29:63:e3:8f:bc:09:73:08:dc:b9:48:74:
         68:62:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:32 2025 by rpki-client