Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa
File:                     3134332e3235352e39382e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          xDIaxjxQrTsyOIKSvNe+zYLIjqxLmaIvZbb4eENNSHA=
Subject key identifier:   BC:E3:41:D6:2A:52:88:FC:41:1C:57:D1:1C:83:1F:C7:B5:95:91:11
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       11CE9654E592ED92DBBFFB30B9AB46FB9BDB4548
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     52977
IP address blocks:        143.255.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:96:54:e5:92:ed:92:db:bf:fb:30:b9:ab:46:fb:9b:db:45:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=BCE341D62A5288FC411C57D11C831FC7B5959111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:0f:cf:d1:09:17:b8:af:5f:83:ca:29:e6:
                    00:aa:2b:d7:0c:e9:2c:9e:fd:c4:b6:7a:47:fa:66:
                    21:df:30:06:85:6a:b2:3a:95:06:88:98:45:42:69:
                    6d:6d:5a:7e:7f:93:88:90:5c:28:68:98:72:0b:70:
                    93:dd:8a:1d:a5:48:75:df:71:4e:a7:99:c0:6e:ed:
                    b6:07:31:48:8f:50:97:24:cb:92:ec:a6:8f:ff:14:
                    e2:28:8c:83:61:fb:32:b0:21:1b:39:64:58:f9:a8:
                    3c:fd:25:6c:43:d0:bf:a1:2a:6e:80:41:ed:0b:a5:
                    be:17:1f:ce:08:56:f5:98:b1:0c:e8:f5:2d:89:28:
                    90:c7:57:2c:b3:2a:f5:a8:2b:31:e3:cb:b6:d2:ba:
                    ea:89:ae:ff:96:70:a1:ef:95:b4:c3:a8:95:f2:a0:
                    d1:b5:d8:74:91:0f:ae:ee:50:e7:eb:ea:52:42:a3:
                    6d:cb:ca:52:bd:6b:a7:91:79:fd:8f:33:48:1b:15:
                    d0:2f:b5:80:16:c9:56:86:52:7d:4f:5d:a1:86:3c:
                    5e:1a:cb:f3:8d:0a:06:62:06:98:e0:af:13:bb:26:
                    48:46:63:64:ff:67:05:a9:9b:0a:bd:a1:b4:37:67:
                    1c:5f:00:09:29:ce:8e:7b:27:b1:8a:a9:5a:39:91:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E3:41:D6:2A:52:88:FC:41:1C:57:D1:1C:83:1F:C7:B5:95:91:11
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:4e:28:32:cb:1b:fe:11:83:dd:b1:e0:48:eb:76:b4:35:
         0a:5c:44:48:13:b8:7c:ef:dc:d3:34:3b:bb:d6:50:4d:8e:2a:
         0c:9b:e6:5c:20:fa:64:e1:ea:09:1e:ea:9d:35:44:99:2e:e7:
         ba:c9:ec:a8:14:0a:db:82:e5:d7:13:ee:66:54:08:08:ea:25:
         44:d9:df:6b:68:e9:12:c6:28:29:23:6e:d9:ca:af:4d:b1:e2:
         fb:50:1d:a7:1b:0a:8d:f1:6d:c2:cd:d9:47:28:3d:f9:08:90:
         73:6d:a5:f9:65:e7:bf:cc:e0:6e:b7:a0:70:1b:52:df:83:33:
         00:84:9c:7e:44:ec:7a:4b:e5:3c:de:eb:33:21:90:1e:67:06:
         77:57:a6:5d:66:1d:2b:c1:19:89:81:76:b9:09:af:8b:3d:e1:
         ba:38:38:c8:90:6d:0f:e9:a3:f5:a5:20:57:47:67:6f:d0:1b:
         4d:83:69:6b:b9:cb:b1:57:c8:8d:eb:fb:44:9a:29:3b:4d:44:
         f3:34:6a:d9:99:d5:36:ea:a4:46:d5:f7:e6:fb:2d:7e:11:41:
         95:5b:04:59:d7:c4:93:c5:82:65:e7:c1:b6:56:d8:bf:62:68:
         03:1c:69:19:c1:61:7a:dd:69:36:06:3c:29:93:56:0f:b2:95:
         5e:23:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:55 2025 by rpki-client