Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa
File:                     3134332e3235352e302e302f32322d3234203d3e20323635313430.roa (raw, json)
Hash identifier:          jO+j2ycSSgUqX/c6R4D4iMxvnJVHoWNPsmxQHR/K7WA=
Subject key identifier:   26:8D:25:55:40:BA:C5:7F:84:4D:38:FE:6D:16:25:8D:F8:26:B6:9E
Certificate issuer:       /CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
Certificate serial:       1FF37AE1608AB9DEB0B95B67F2E25A154A70EF24
Authority key identifier: 68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa
Signing time:             Wed 08 Jan 2025 20:41:37 +0000
ROA not before:           Wed 08 Jan 2025 20:36:37 +0000
ROA not after:            Wed 07 Jan 2026 20:41:37 +0000
asID:                     265140
IP address blocks:        143.255.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl
                          rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:7a:e1:60:8a:b9:de:b0:b9:5b:67:f2:e2:5a:15:4a:70:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EC60223DF10BE63B7A84464ACF2A9697173D75
        Validity
            Not Before: Jan  8 20:36:37 2025 GMT
            Not After : Jan  7 20:41:37 2026 GMT
        Subject: CN=268D255540BAC57F844D38FE6D16258DF826B69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:f2:75:2c:16:87:de:67:38:87:eb:fb:9d:
                    2e:14:9f:1f:0b:61:0c:72:0c:d5:02:ed:d5:a4:e7:
                    48:75:b1:aa:b8:03:a0:eb:af:70:74:42:62:1d:22:
                    a2:9f:80:08:30:e0:53:8f:03:e9:26:b8:4b:36:32:
                    e7:df:97:88:3a:a2:57:e7:07:20:71:9a:bf:2a:45:
                    28:15:6e:ca:a6:a6:02:14:0f:e8:35:b6:87:a4:56:
                    2e:ba:84:5d:21:fb:ff:90:65:24:5f:82:df:9d:da:
                    5d:49:48:0f:b7:b2:a8:91:c5:e5:d3:df:88:f6:d6:
                    9a:f6:00:3a:2a:29:f8:01:7b:b5:6f:ba:59:bc:26:
                    3d:d6:66:f9:c4:a9:9d:fb:ae:ed:fc:78:c7:3c:54:
                    71:f8:05:44:ca:7d:d7:88:32:9c:be:00:97:0e:a2:
                    78:03:47:b4:ec:62:e7:b2:cc:f5:19:e8:2d:25:28:
                    6a:16:b4:ac:da:e6:f7:a4:26:53:58:b9:d5:78:a7:
                    14:26:c2:ff:87:86:34:45:7c:8a:b4:63:aa:7a:f7:
                    5e:01:cc:89:8d:d8:a7:06:2a:96:e0:b6:60:4d:19:
                    d2:e2:49:66:df:ce:c9:f7:e4:54:11:d7:c4:bd:0f:
                    5d:6b:74:53:f9:75:c8:ea:ed:ae:1e:8f:40:c7:a3:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8D:25:55:40:BA:C5:7F:84:4D:38:FE:6D:16:25:8D:F8:26:B6:9E
            X509v3 Authority Key Identifier:
                keyid:68:EC:60:22:3D:F1:0B:E6:3B:7A:84:46:4A:CF:2A:96:97:17:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/68EC60223DF10BE63B7A84464ACF2A9697173D75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68EC60223DF10BE63B7A84464ACF2A9697173D75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nM5kNVEPy9vD5dTcQcdNByuxpd2nHy4S3jkUqHRKDgn/0/3134332e3235352e302e302f32322d3234203d3e20323635313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:f7:17:da:76:2d:d2:e5:16:9d:b3:37:08:51:37:1b:2e:
         76:51:fd:ac:da:9e:74:0f:96:31:36:20:3a:30:f6:08:ba:75:
         36:ae:fc:ef:16:83:fb:d4:c5:cb:2b:2e:67:22:25:3c:64:6c:
         53:df:68:b4:6d:b0:ba:fb:f4:07:ed:91:1a:de:c5:a9:c1:4b:
         38:a3:d1:42:21:fe:9f:73:7c:7c:39:54:c4:8c:7a:82:99:27:
         a7:da:20:14:93:67:74:68:e4:79:a8:d1:d2:f7:bc:b4:1d:3e:
         b7:9a:58:35:30:ba:3d:a0:bd:b8:af:f5:5f:59:76:09:30:2b:
         80:89:98:3d:13:5a:fa:e3:20:84:99:4a:77:a0:ca:c1:01:8d:
         66:85:98:f3:eb:8b:dc:3d:80:24:58:43:f1:c5:06:0e:b8:84:
         cf:25:34:f6:57:82:9b:25:14:6a:64:3e:e2:00:44:88:79:18:
         67:d9:8d:22:b6:bc:e0:58:47:9f:48:98:f9:0f:ea:41:f6:22:
         94:48:aa:e5:db:a6:45:6b:8d:22:2e:8f:95:90:e0:aa:56:e4:
         06:d6:31:3a:f1:cd:5b:c0:ff:02:bb:5b:c9:bd:7a:68:7a:07:
         cd:88:18:dc:5e:5f:11:9a:eb:32:2e:2e:64:bf:da:6f:a9:07:
         cd:8e:21:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH/N64WCKud6wuVtn8uJaFUpw7yQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhFQzYwMjIzREYxMEJFNjNCN0E4NDQ2NEFDRjJBOTY5
NzE3M0Q3NTAeFw0yNTAxMDgyMDM2MzdaFw0yNjAxMDcyMDQxMzdaMDMxMTAvBgNV
BAMTKDI2OEQyNTU1NDBCQUM1N0Y4NDREMzhGRTZEMTYyNThERjgyNkI2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTPJ1LBaH3mc4h+v7nS4Unx8L
YQxyDNUC7dWk50h1saq4A6Drr3B0QmIdIqKfgAgw4FOPA+kmuEs2Muffl4g6olfn
ByBxmr8qRSgVbsqmpgIUD+g1toekVi66hF0h+/+QZSRfgt+d2l1JSA+3sqiRxeXT
34j21pr2ADoqKfgBe7Vvulm8Jj3WZvnEqZ37ru38eMc8VHH4BUTKfdeIMpy+AJcO
ongDR7TsYueyzPUZ6C0lKGoWtKza5vekJlNYudV4pxQmwv+HhjRFfIq0Y6p6914B
zImN2KcGKpbgtmBNGdLiSWbfzsn35FQR18S9D11rdFP5dcjq7a4ej0DHo+NdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJo0lVUC6xX+ETTj+bRYljfgmtp4wHwYDVR0j
BBgwFoAUaOxgIj3xC+Y7eoRGSs8qlpcXPXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG5NNWtOVkVQeTl2RDVkVGNRY2ROQnl1eHBkMm5IeTRTM2prVXFIUktE
Z24vMC82OEVDNjAyMjNERjEwQkU2M0I3QTg0NDY0QUNGMkE5Njk3MTczRDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RUM2MDIyM0RGMTBCRTYz
QjdBODQ0NjRBQ0YyQTk2OTcxNzNENzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhuTTVrTlZFUHk5dkQ1ZFRjUWNkTkJ5dXhwZDJuSHk0UzNqa1VxSFJLRGduLzAv
MzEzNDMzMmUzMjM1MzUyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzEzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCj/8AMA0GCSqGSIb3DQEBCwUAA4IBAQAlivcX2nYt
0uUWnbM3CFE3Gy52Uf2s2p50D5YxNiA6MPYIunU2rvzvFoP71MXLKy5nIiU8ZGxT
32i0bbC6+/QH7ZEa3sWpwUs4o9FCIf6fc3x8OVTEjHqCmSen2iAUk2d0aOR5qNHS
97y0HT63mlg1MLo9oL24r/VfWXYJMCuAiZg9E1r64yCEmUp3oMrBAY1mhZjz64vc
PYAkWEPxxQYOuITPJTT2V4KbJRRqZD7iAESIeRhn2Y0itrzgWEefSJj5D+pB9iKU
SKrl26ZFa40iLo+VkOCqVuQG1jE68c1bwP8Cu1vJvXpoegfNiBjcXl8RmusyLi5k
v9pvqQfNjiE/
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:59 2025 by rpki-client