Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
File:                     3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa (raw, json)
Hash identifier:          HNXcY/6ApsSTUm79EaZIGPMY0bSR/UzEjlJtghZJ5/Q=
Subject key identifier:   8B:82:EA:9B:46:72:9B:89:95:57:AD:BD:C7:88:EC:F0:9F:4F:BB:3F
Certificate issuer:       /CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
Certificate serial:       0A61D85E8ADFBFD4EB62C3535CE0DC0C920013D1
Authority key identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
Signing time:             Tue 02 Sep 2025 13:27:37 +0000
ROA not before:           Tue 02 Sep 2025 13:22:37 +0000
ROA not after:            Tue 01 Sep 2026 13:27:37 +0000
asID:                     264047
IP address blocks:        143.137.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 16:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:61:d8:5e:8a:df:bf:d4:eb:62:c3:53:5c:e0:dc:0c:92:00:13:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC
        Validity
            Not Before: Sep  2 13:22:37 2025 GMT
            Not After : Sep  1 13:27:37 2026 GMT
        Subject: CN=8B82EA9B46729B899557ADBDC788ECF09F4FBB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:c1:d8:13:65:9a:61:a9:c1:83:f8:12:e9:
                    1b:a7:41:08:e1:7e:a5:32:a8:39:a3:e9:79:80:9e:
                    ba:56:c6:ed:47:2c:c4:89:9c:8d:33:28:61:e3:09:
                    34:db:1e:1d:84:c3:01:b1:80:db:cd:54:21:05:fe:
                    ef:86:71:2b:02:ae:37:dc:10:20:62:0e:d5:3d:ed:
                    24:00:cc:05:d3:c6:f0:3e:fd:3f:c2:5f:ad:86:8f:
                    b9:43:6a:75:50:fe:00:2a:b5:f2:a2:7f:98:94:00:
                    dc:8a:df:ff:74:5e:83:15:4b:5c:b4:48:41:9e:7a:
                    8e:7d:f4:cf:f9:e1:cf:46:9d:3f:d3:25:20:72:91:
                    46:3f:e3:11:27:9f:6e:7d:4e:cf:1e:4c:95:48:a2:
                    66:d4:54:68:81:07:1f:93:52:22:49:cb:1a:14:cc:
                    40:29:8a:4d:92:44:cc:ef:48:d7:fa:27:38:76:3b:
                    70:0f:da:f4:a7:4a:57:54:8e:7f:ae:70:07:10:8c:
                    f9:2f:bc:f7:c9:44:3b:61:99:a5:31:be:82:62:a8:
                    13:30:f1:a8:63:ec:06:f9:5a:f6:68:13:7f:6a:13:
                    8b:92:83:78:8f:cd:11:96:bb:d7:da:7a:f4:e4:2c:
                    fa:08:a8:3b:8e:3d:39:38:f4:f4:e8:05:dd:82:7d:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:EA:9B:46:72:9B:89:95:57:AD:BD:C7:88:EC:F0:9F:4F:BB:3F
            X509v3 Authority Key Identifier:
                keyid:A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:14:c4:2e:74:7d:4a:6b:d5:99:fe:f2:ff:6f:f5:cb:55:
         94:0f:9a:c4:22:48:ee:17:17:69:59:b1:f4:79:60:2b:8a:c4:
         53:ba:24:bd:89:ec:2b:35:8a:10:ff:c7:f6:ee:e3:7c:2b:7a:
         99:93:96:4e:a4:ef:f5:68:81:9a:50:14:d9:75:e6:34:a7:f6:
         cb:f8:07:85:9b:8b:55:4f:a9:59:8a:30:23:1e:e7:fe:c5:78:
         37:a4:81:69:9e:0c:1f:75:de:ee:10:40:0a:71:2e:9e:1e:03:
         1c:65:19:1a:fc:1e:6f:11:c0:9e:5e:c5:3d:80:ec:0b:74:2c:
         79:f2:70:5a:99:b6:5f:2f:95:9b:32:8a:54:7a:c4:cd:86:da:
         6c:db:6e:0f:3d:b9:89:2b:28:8c:8b:c5:08:98:c7:d8:c9:72:
         28:15:2e:67:f0:b1:75:14:74:a5:61:12:97:2b:5b:a2:a3:6b:
         33:8d:3a:09:49:c0:38:6b:da:2e:9b:fd:a8:91:79:db:00:4b:
         80:bb:bf:dd:cc:1f:a4:d1:dd:18:10:cb:c6:4c:4a:95:b4:19:
         b3:d8:03:5d:a1:70:41:a3:f9:28:02:00:60:91:54:e2:bc:a9:
         98:34:ea:15:96:63:bd:3b:5a:7e:2a:35:09:f0:9b:b1:e1:3c:
         63:ea:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:21:00 2025 by rpki-client