Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
File:                     3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (raw, json)
Hash identifier:          kAzZo3IutYEWpbiAuX289vzF3O43kiYdJSetU/2uvhY=
Subject key identifier:   8C:56:F1:76:23:E1:96:93:E6:7F:A1:BD:1D:07:25:03:07:03:24:83
Certificate issuer:       /CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
Certificate serial:       3449200A28EAE6ED70C537E18D54612B0360C963
Authority key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa
Signing time:             Fri 28 Mar 2025 10:14:58 +0000
ROA not before:           Fri 28 Mar 2025 10:09:58 +0000
ROA not after:            Fri 27 Mar 2026 10:14:58 +0000
asID:                     264186
IP address blocks:        143.0.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl
                          rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:20:0a:28:ea:e6:ed:70:c5:37:e1:8d:54:61:2b:03:60:c9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
        Validity
            Not Before: Mar 28 10:09:58 2025 GMT
            Not After : Mar 27 10:14:58 2026 GMT
        Subject: CN=8C56F17623E19693E67FA1BD1D07250307032483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:4a:f1:1d:f8:b4:ac:eb:09:f6:27:75:ad:
                    15:ee:93:b2:94:05:c0:ec:7f:0f:e5:b4:37:b5:b4:
                    b1:e0:7e:20:51:1b:f6:bb:69:b0:a9:37:dc:aa:d5:
                    8d:50:2c:27:84:6d:4c:ce:9b:b3:e6:66:06:02:07:
                    d7:c3:0d:52:ba:9f:40:a8:5b:b0:51:c2:03:fa:83:
                    a5:7b:d7:b1:f0:f7:56:0f:26:3c:3d:8a:4d:0c:e3:
                    51:9d:5a:50:b8:0c:45:af:f7:06:54:df:a3:34:8c:
                    76:ff:8e:32:55:0d:45:f7:4b:b5:d4:6e:de:78:69:
                    51:aa:2e:06:ed:f7:3b:8c:49:ca:c4:60:e3:7c:18:
                    19:a7:4d:9e:7a:da:60:37:65:3f:16:40:db:5a:72:
                    8e:63:88:6b:f2:b8:57:9f:3d:52:43:44:21:36:e5:
                    8a:79:e4:53:28:24:32:ef:21:26:5d:08:de:f7:70:
                    b4:31:09:e9:4a:05:5b:c6:87:63:31:8f:a6:15:a5:
                    f9:80:59:49:6c:3c:b4:ac:20:92:96:2a:57:e3:60:
                    53:a5:6e:59:fb:d9:f0:3e:fe:a5:fd:66:3a:d1:22:
                    fc:d4:0d:1b:c4:e5:92:df:14:de:3e:d2:cf:66:0d:
                    64:5f:e8:79:b3:3b:28:59:6b:22:e2:3d:66:d8:61:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:F1:76:23:E1:96:93:E6:7F:A1:BD:1D:07:25:03:07:03:24:83
            X509v3 Authority Key Identifier:
                keyid:1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/3134332e302e3138382e302f32322d3332203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:5a:ba:e1:08:3c:b6:8f:52:92:d3:75:dd:1d:f3:51:e8:
         fa:64:a0:41:64:20:f2:71:2f:df:23:0e:bd:3b:a0:b5:8c:de:
         5a:d8:1e:63:5b:80:9e:36:ad:2c:6e:f0:c9:fc:4a:79:57:52:
         d7:67:29:5a:2f:ba:9b:ca:d4:d5:2f:76:fa:c8:c1:85:b3:2d:
         a8:2c:c0:45:cd:7c:74:c6:55:22:1a:0f:6a:92:e5:69:be:43:
         96:4a:ff:53:b7:e8:13:b9:07:9c:0f:fd:a2:a5:64:f9:c5:ea:
         ac:cb:bd:04:fb:80:38:a3:2d:0e:32:9e:f4:6c:26:74:61:90:
         9d:73:6c:3b:c2:db:d1:74:8e:56:5e:23:97:87:99:9b:1b:aa:
         cd:b6:ab:28:aa:1e:e5:17:f9:05:82:a3:4a:59:5e:40:0e:ca:
         1f:8a:10:e5:39:91:62:b7:4f:97:dc:32:8b:6d:fd:83:2a:fa:
         fe:cf:0b:95:51:91:53:f5:83:16:53:38:7c:11:ff:84:99:53:
         6e:2f:bb:55:2e:78:5a:a2:f7:80:f6:e6:1d:18:68:bc:2a:d0:
         c0:d2:ba:62:05:26:76:0c:ab:46:1c:42:e9:ea:3d:09:18:0b:
         74:17:68:cb:c7:86:17:58:26:ad:d1:74:55:e6:81:63:d0:d6:
         59:47:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:09:01 2025 by rpki-client