Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
File:                     3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa (raw, json)
Hash identifier:          8f98bIG4sLA38OhWisHXAiX62rxjFuxQX5jZLrCbjaA=
Subject key identifier:   BD:C7:FB:FB:E8:D7:82:4A:99:E2:A0:C0:3C:65:D5:DB:95:F4:79:D7
Certificate issuer:       /CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
Certificate serial:       35F6019CFCFE4E98370691555C272109CB97ED1F
Authority key identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa
Signing time:             Tue 02 Sep 2025 13:27:37 +0000
ROA not before:           Tue 02 Sep 2025 13:22:37 +0000
ROA not after:            Tue 01 Sep 2026 13:27:37 +0000
asID:                     264047
IP address blocks:        143.137.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f6:01:9c:fc:fe:4e:98:37:06:91:55:5c:27:21:09:cb:97:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
        Validity
            Not Before: Sep  2 13:22:37 2025 GMT
            Not After : Sep  1 13:27:37 2026 GMT
        Subject: CN=BDC7FBFBE8D7824A99E2A0C03C65D5DB95F479D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:f0:ab:60:8f:17:6f:dc:7e:75:d3:ab:0b:
                    cf:cb:19:59:37:d6:4d:02:3b:70:3d:da:84:99:33:
                    14:bf:70:55:f4:b3:03:5f:47:a2:81:71:90:73:f6:
                    c5:36:63:8d:a8:1d:15:77:5e:32:46:7a:08:b5:a2:
                    f1:e8:4a:25:6c:67:e1:ea:78:26:53:5c:97:b4:2e:
                    95:b3:eb:7b:6a:ef:89:e6:2c:e6:79:9b:d9:2a:09:
                    7e:88:be:81:c0:38:8b:27:c2:01:4e:ce:bd:9a:b7:
                    db:a5:5f:09:c7:1e:c5:ce:74:eb:53:46:45:76:93:
                    cc:cb:f6:d7:50:e9:8e:2b:5e:d8:a8:e1:f8:bf:1a:
                    88:85:c9:8a:e6:78:a0:02:d7:7f:ee:6e:9c:52:25:
                    39:cb:de:66:52:e3:76:0e:91:c2:2d:43:d4:96:a1:
                    0a:c9:d5:86:52:7e:84:c5:f7:61:b7:70:de:3a:72:
                    a9:db:a7:48:43:12:04:f8:bd:99:ca:2d:b3:8e:77:
                    ed:45:48:17:7d:13:ac:7e:96:38:01:a0:e4:e3:d0:
                    9b:9f:76:4f:13:71:a6:8c:35:24:bd:64:f2:40:0a:
                    b3:5d:e8:a4:de:a7:1c:29:85:7f:82:3d:ec:b3:1f:
                    5c:cb:65:de:df:33:39:75:38:76:bb:ce:b4:ed:13:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C7:FB:FB:E8:D7:82:4A:99:E2:A0:C0:3C:65:D5:DB:95:F4:79:D7
            X509v3 Authority Key Identifier:
                keyid:A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232302e302f32332d3233203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:d5:22:74:8c:ac:a5:aa:79:4b:8d:16:2d:17:d6:a6:95:
         b9:07:e4:12:6b:a2:ee:c0:e0:25:b9:11:67:f7:f2:92:5b:22:
         dc:62:38:da:42:88:04:b1:8f:a4:9a:11:f0:5a:18:56:d6:10:
         86:c4:95:34:e6:5b:6a:42:91:28:3b:d2:d7:e5:22:f6:0c:69:
         f7:48:cd:5d:15:2d:56:1e:e4:60:f1:2b:82:69:5a:44:0d:5d:
         a6:68:6a:06:d0:0f:0c:7b:ab:83:33:44:36:c0:f1:49:c1:9a:
         0f:ef:0a:24:13:ff:98:2e:88:ed:4f:a4:b8:83:d7:b4:4b:e2:
         77:5c:c7:0e:31:2a:92:bf:93:ae:90:31:ff:8b:47:f1:6c:5f:
         70:e3:36:14:8f:98:b5:30:fa:87:8e:75:ff:9c:17:91:64:3c:
         5e:17:ca:06:e7:d3:69:2c:d1:db:90:1b:b9:78:8c:4a:ba:df:
         ea:72:b3:c0:f5:34:ef:ce:e8:6d:b6:bd:82:09:ba:7a:d7:a2:
         95:9c:d4:65:e4:4a:f6:1f:1c:e7:06:cf:92:99:d8:c7:a5:47:
         3f:3c:6f:c6:4d:d9:91:cb:0b:37:ca:6d:d4:72:a5:e2:7f:e8:
         16:8a:28:01:f4:2e:1f:a7:0a:c8:17:21:03:af:be:d7:0a:15:
         d5:06:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:20:04 2025 by rpki-client