Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa
File:                     3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          B140oLy6E8yqnlfg7hkvvWqur3vLIE3u9wrvViSr8Aw=
Subject key identifier:   8C:BD:C9:A7:B4:AF:06:88:74:04:58:0F:B2:B3:58:42:A7:E9:BF:F1
Certificate issuer:       /CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
Certificate serial:       1FB931C69904277200361A7AEC0C0344B1EDAFAF
Authority key identifier: E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa
Signing time:             Thu 06 Mar 2025 00:33:05 +0000
ROA not before:           Thu 06 Mar 2025 00:28:05 +0000
ROA not after:            Thu 05 Mar 2026 00:33:05 +0000
asID:                     264025
IP address blocks:        143.137.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 14:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b9:31:c6:99:04:27:72:00:36:1a:7a:ec:0c:03:44:b1:ed:af:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E63AD268C28EF88AA5B5563AE16151F11DECEE8D
        Validity
            Not Before: Mar  6 00:28:05 2025 GMT
            Not After : Mar  5 00:33:05 2026 GMT
        Subject: CN=8CBDC9A7B4AF06887404580FB2B35842A7E9BFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:bd:5a:7d:0a:2f:70:db:aa:fb:d8:7b:44:
                    3d:83:4e:16:0e:1c:47:08:1b:2d:dd:3a:9d:59:d5:
                    03:0c:30:2d:e4:76:5c:d5:7c:6c:ff:31:de:22:00:
                    ce:ad:61:7e:e7:19:50:9b:88:10:a9:6c:28:32:60:
                    60:9e:f9:81:ec:6c:bb:e7:c3:a6:46:75:7c:6b:2b:
                    9c:45:96:9c:0c:62:ff:69:e7:0e:6e:e1:13:2e:95:
                    f3:0f:76:bd:d8:b3:d8:d1:13:31:f8:49:c4:b3:60:
                    88:20:7d:f5:99:b6:44:aa:8f:02:ec:b8:c6:65:c8:
                    23:e6:55:4d:38:73:bb:39:71:f9:c4:3b:08:62:db:
                    4a:d7:fd:c7:01:f3:ad:a8:22:5a:47:e9:b1:3e:0a:
                    fa:a4:db:62:7f:43:c6:00:9a:0d:33:47:b1:e0:6f:
                    c9:97:c1:43:e0:79:9d:e2:87:8a:ec:45:d9:ea:d0:
                    e6:09:52:72:c2:92:53:ea:d1:b0:e6:68:a1:a7:fa:
                    06:2d:05:09:d5:e5:e7:1b:f7:79:03:80:8f:41:03:
                    73:eb:a9:77:ce:c7:7e:ad:1c:60:cb:c0:85:73:f1:
                    21:10:43:5c:63:42:01:94:6f:f6:30:c3:cc:2e:e6:
                    37:45:e0:87:16:cc:bf:1f:0f:1a:97:9c:3e:59:71:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BD:C9:A7:B4:AF:06:88:74:04:58:0F:B2:B3:58:42:A7:E9:BF:F1
            X509v3 Authority Key Identifier:
                keyid:E6:3A:D2:68:C2:8E:F8:8A:A5:B5:56:3A:E1:61:51:F1:1D:EC:EE:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E63AD268C28EF88AA5B5563AE16151F11DECEE8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/1/3134332e3133372e33322e302f32322d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:7d:e9:a3:38:72:46:4e:f6:4f:0a:a1:c2:35:08:6f:f0:
         0f:42:3f:78:15:8d:34:f5:56:e0:fb:18:a5:86:9e:05:61:5c:
         1e:47:01:5c:93:15:97:e9:39:33:ff:71:ad:5b:37:ea:c2:3e:
         c7:49:69:d0:7d:90:8f:23:c8:e7:a7:1a:54:cb:dd:65:76:f5:
         0e:a1:ce:2f:9f:bf:b0:be:fc:61:ec:b4:8a:61:51:f9:03:3c:
         85:ba:ab:90:ed:f1:8d:0a:4d:65:1a:1d:fd:f3:1e:33:29:3c:
         99:ec:52:6d:1a:40:00:df:45:52:dd:da:53:37:13:58:26:fd:
         59:1d:61:1f:76:07:62:35:93:e9:80:f6:a8:50:9b:78:98:79:
         5a:18:b9:e9:04:20:db:a9:ba:fa:b8:52:e8:9e:ac:28:11:79:
         42:29:75:28:67:f2:df:ea:7a:fd:d2:2f:06:cc:74:4b:62:a0:
         c7:a9:c7:75:90:f4:d1:8a:c6:a2:f8:4c:a4:54:fd:c2:5b:38:
         3e:5a:ff:56:3d:10:c3:8f:b4:ee:ef:c9:2d:b8:da:ce:08:6b:
         1e:80:33:54:9b:0e:1b:e9:d8:7c:c3:f5:a0:17:d6:4b:30:a3:
         aa:fe:0e:c0:24:15:a6:d3:fe:86:cc:15:13:ae:e7:59:49:6c:
         cc:d2:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:29:54 2025 by rpki-client