Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa
File:                     3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (raw, json)
Hash identifier:          IV3rgpu5jqUf8IKt60skmyD4qSR/oAcEE4NuthHk2GU=
Subject key identifier:   71:11:A1:C4:9B:8F:AB:2D:6D:D3:D4:FB:7C:06:7B:F5:AB:25:E0:73
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       4D33668ED67994D8848FCAF83C45213F5308734E
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa
Signing time:             Thu 06 Mar 2025 19:05:44 +0000
ROA not before:           Thu 06 Mar 2025 19:00:44 +0000
ROA not after:            Thu 05 Mar 2026 19:05:44 +0000
asID:                     263004
IP address blocks:        143.208.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
                          rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:33:66:8e:d6:79:94:d8:84:8f:ca:f8:3c:45:21:3f:53:08:73:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Mar  6 19:00:44 2025 GMT
            Not After : Mar  5 19:05:44 2026 GMT
        Subject: CN=7111A1C49B8FAB2D6DD3D4FB7C067BF5AB25E073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:f6:f6:d3:b1:98:d6:e6:57:aa:bc:49:06:
                    7a:0e:af:f1:30:21:d4:c6:9f:b7:2b:ae:f3:2f:e6:
                    21:8a:87:a4:3b:3a:25:ed:6c:85:64:16:56:99:0a:
                    d2:76:dd:67:1e:be:4b:af:3a:d2:02:20:ab:7a:cc:
                    80:c9:55:27:57:37:6e:5d:78:65:57:67:19:4c:83:
                    bb:76:86:3e:4a:cd:d7:a7:14:9b:b2:da:08:d2:36:
                    64:5e:3a:59:7e:28:e3:17:69:5a:98:1e:e3:38:bf:
                    b0:82:d3:ec:97:3f:23:97:8d:43:55:1d:82:49:35:
                    99:f7:4b:16:28:a9:b5:35:aa:9f:4b:42:f2:02:db:
                    d3:43:fa:18:99:45:81:67:90:ec:2e:74:f4:6e:db:
                    3c:d3:de:1b:12:e0:aa:b0:1d:c5:49:6f:0d:62:5b:
                    a0:57:b1:29:73:d3:7b:6a:27:4e:b2:b8:58:7a:16:
                    33:fb:d6:81:da:f0:19:a1:c7:8f:93:76:e6:73:41:
                    d3:55:2f:02:73:3c:c8:e4:99:30:07:a4:6b:84:00:
                    96:3c:ce:97:92:bc:64:c9:f2:4c:59:07:30:3a:ef:
                    93:30:43:65:41:1d:76:8d:6a:2c:ab:9d:e6:72:94:
                    0d:b6:da:25:27:ba:b5:11:e5:28:12:42:98:8f:58:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:11:A1:C4:9B:8F:AB:2D:6D:D3:D4:FB:7C:06:7B:F5:AB:25:E0:73
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:e9:8d:26:8c:87:b5:dd:03:66:2c:2a:c8:fa:91:3c:5c:6e:
         34:1a:8b:a6:d7:ac:78:d6:4c:cd:24:8b:9f:23:0e:a3:25:9e:
         43:12:a4:17:c2:c3:65:95:64:09:3f:ff:51:e5:8e:00:95:d9:
         53:b2:15:8a:f9:81:22:e8:83:e3:c6:99:20:4b:46:0f:a2:bf:
         5b:cc:d2:6a:7c:e0:cd:fd:d0:b2:03:99:f4:0b:04:7a:19:00:
         73:7d:b6:c2:f0:21:33:51:a4:8b:d9:7e:e9:30:94:fc:69:db:
         9e:7a:86:2f:26:6c:ac:8c:09:ce:ed:b9:bd:db:bc:bc:be:25:
         fe:c0:2e:22:bd:e5:9f:f6:2e:14:b0:05:5b:67:fc:5b:e1:f6:
         34:14:5c:5e:38:7f:d9:fd:e7:d0:f6:7c:44:94:ab:eb:8e:c4:
         55:f9:e1:7f:04:55:74:58:25:33:39:2a:a1:43:65:87:3f:b1:
         86:4a:bf:d1:a4:6d:1b:b9:68:63:91:f9:3e:07:c7:a2:ee:f7:
         2b:e3:ff:4e:03:cf:08:5c:a8:9b:47:97:d9:d0:0f:d4:e2:87:
         a0:ea:74:1a:dd:40:18:c8:50:9f:75:3f:cc:86:71:d1:e3:91:
         17:fe:56:ad:41:30:31:f5:a3:bf:b2:65:a8:17:8c:ee:7f:16:
         e8:dd:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:31 2025 by rpki-client