Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa
File:                     3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa (raw, json)
Hash identifier:          dXDJ6YoxUXhFQYoMDXxtxdEXvR4fl5E+h4OB9EbcOno=
Subject key identifier:   8A:66:D8:38:4C:08:E1:00:B0:73:E3:BF:BD:07:94:C7:EA:16:BC:A7
Certificate issuer:       /CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
Certificate serial:       3E148550153090808BA2F5AE102391936DCF1CD3
Authority key identifier: BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa
Signing time:             Wed 13 Aug 2025 04:33:34 +0000
ROA not before:           Wed 13 Aug 2025 04:28:34 +0000
ROA not after:            Wed 12 Aug 2026 04:33:34 +0000
asID:                     265121
IP address blocks:        143.208.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl
                          rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 22:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:14:85:50:15:30:90:80:8b:a2:f5:ae:10:23:91:93:6d:cf:1c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF1ED920124A956078F54EF2E74C46A4BFC3F517
        Validity
            Not Before: Aug 13 04:28:34 2025 GMT
            Not After : Aug 12 04:33:34 2026 GMT
        Subject: CN=8A66D8384C08E100B073E3BFBD0794C7EA16BCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:93:92:35:96:00:67:8f:6a:8e:4d:d4:dc:
                    d7:da:d2:07:1a:26:29:bf:07:90:b2:e7:31:fb:84:
                    c5:f7:de:3a:8b:47:ab:62:73:41:cc:04:71:cf:39:
                    08:9c:f0:f7:3e:3a:4d:fb:35:72:c4:f8:2a:3a:90:
                    f8:3f:10:a6:f9:f6:2c:0c:07:f1:09:8a:4a:14:f3:
                    5e:de:09:ad:31:38:37:cb:9b:48:8e:0a:3b:ba:3b:
                    f0:81:95:e3:41:10:de:cd:80:4f:a9:6c:9b:63:32:
                    eb:a4:32:a9:a4:1a:65:d5:f1:c4:c9:e9:32:e7:f6:
                    35:2f:b8:a3:4a:0c:b8:10:a3:a3:f3:6b:55:7a:26:
                    2a:0d:0a:08:ca:5e:8f:b0:f7:9a:53:de:35:13:5a:
                    e3:10:6c:7b:b9:6c:e4:d4:94:34:5f:67:e5:cd:f8:
                    a6:2e:3b:89:1c:cd:86:2c:59:3e:cd:52:30:c1:18:
                    51:ec:6a:d8:7e:0b:b6:e9:f7:2e:a2:64:a0:fd:a1:
                    b7:5b:ae:fe:72:d5:c0:ef:00:3d:cf:3b:95:ac:8b:
                    e2:48:26:91:ed:de:30:b8:6e:ea:66:96:53:f1:62:
                    f1:99:68:72:d6:c5:22:35:cf:71:4c:d5:bb:7b:92:
                    c8:d9:69:04:4b:7e:72:d7:68:db:e3:62:52:8e:74:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:66:D8:38:4C:08:E1:00:B0:73:E3:BF:BD:07:94:C7:EA:16:BC:A7
            X509v3 Authority Key Identifier:
                keyid:BF:1E:D9:20:12:4A:95:60:78:F5:4E:F2:E7:4C:46:A4:BF:C3:F5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/BF1ED920124A956078F54EF2E74C46A4BFC3F517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF1ED920124A956078F54EF2E74C46A4BFC3F517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/3134332e3230382e3131362e302f32322d3332203d3e20323635313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:b5:02:2a:c5:ba:90:3f:16:08:48:03:ca:9c:ae:7d:8f:
         55:d6:87:34:45:3b:1a:cf:81:b9:96:f8:72:2d:ac:8a:dc:ed:
         1c:7e:69:4e:83:0a:5d:7a:80:f5:d7:86:b1:be:e4:11:5d:cf:
         99:17:d9:7a:49:27:40:09:9a:64:1e:fc:cf:ea:96:c3:20:d8:
         fe:6e:f7:9e:2d:03:92:e6:dc:c4:30:a6:df:be:5e:a7:e0:de:
         f6:45:e6:a9:ce:a0:3b:aa:af:3b:16:57:c1:7c:06:d8:c2:86:
         02:05:84:62:e0:05:b6:ff:31:72:6b:e9:94:bd:fa:e7:14:ff:
         02:45:92:65:fa:be:76:60:d8:38:c0:f9:b1:b2:4a:d9:2a:5d:
         1d:fd:92:74:ca:cf:c9:b1:dd:d7:d4:e9:4c:46:06:03:68:b0:
         4e:2f:a7:c7:44:37:d9:64:90:8e:e3:8c:fc:78:44:0f:1a:e3:
         2c:f8:f3:4b:04:36:93:39:27:f1:ca:e4:34:90:c4:64:1c:13:
         97:31:86:71:4c:b7:eb:49:49:29:52:d2:78:d3:aa:8f:8c:47:
         68:3e:e6:d3:52:93:7d:f7:f9:c1:96:6a:d8:96:bd:61:0c:c2:
         e6:9c:63:6e:98:c6:52:11:12:5c:81:25:d6:89:61:21:ff:82:
         f6:5a:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:00:06 2025 by rpki-client