Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39382e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          bVlcdcLl1hRZtNwt3xVuR0onYeDN+ObX2yAaogr2FJw=
Subject key identifier:   D2:1F:04:F1:82:88:5A:B2:48:09:01:70:CC:F2:D9:81:09:30:A1:14
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       57949C31F2B29EF0A45C8FF293770D487C623518
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     52977
IP address blocks:        143.255.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:9c:31:f2:b2:9e:f0:a4:5c:8f:f2:93:77:0d:48:7c:62:35:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=D21F04F182885AB248090170CCF2D9810930A114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:3b:00:0a:ad:78:3a:b0:33:95:96:14:be:
                    60:4e:9e:f8:cd:a2:86:9c:51:ec:cc:f3:40:44:b8:
                    46:a2:3b:04:a3:f3:80:78:1e:66:c1:f6:6b:04:9e:
                    47:5f:7a:8c:4a:22:f4:08:2c:d8:81:78:2f:96:d5:
                    3b:b7:10:4b:3c:ed:a7:63:71:bd:05:18:94:74:b6:
                    98:f5:8b:c7:0e:45:e8:86:94:c9:4c:94:80:76:03:
                    ad:eb:ca:e1:02:b9:f6:74:4c:92:0a:ed:02:5a:2f:
                    a7:4c:f6:2a:76:e2:21:d6:11:72:6f:7e:00:1c:42:
                    d1:a9:b6:f8:a6:71:f4:bd:b0:ff:ec:4e:be:32:0d:
                    d0:b8:2e:d5:e5:08:31:6b:fa:d0:56:1d:87:de:48:
                    84:f9:5e:07:49:b6:36:43:da:08:00:df:9f:e5:c1:
                    85:5a:54:76:ad:c9:08:ac:8e:6a:bc:22:e5:1f:04:
                    53:a9:51:8b:07:ca:21:14:aa:e9:e3:4c:3f:34:09:
                    47:b5:18:4f:14:71:74:2f:ec:d9:23:5c:51:a0:34:
                    77:c3:0b:83:99:a9:02:19:e2:bc:bf:3f:8b:55:bc:
                    f8:ec:b3:29:77:cd:1c:8c:da:6f:e2:fd:7b:26:11:
                    9e:e2:f1:b4:9a:fc:b5:5d:5c:41:ea:ba:63:54:63:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1F:04:F1:82:88:5A:B2:48:09:01:70:CC:F2:D9:81:09:30:A1:14
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39382e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:9b:15:71:11:ce:77:a7:f4:ad:d8:d1:59:f8:d3:52:90:b8:
         1e:b4:5f:d9:de:3f:9f:5d:5d:a9:ad:1f:cc:31:17:3c:dc:90:
         aa:73:9d:f8:b5:a6:5d:2c:00:74:e2:cf:c4:b7:9a:cb:90:cc:
         08:b6:12:c9:d6:a7:5e:9a:30:29:75:f3:c1:d5:e8:03:45:0f:
         7b:18:75:98:2d:9a:89:1e:de:f2:ba:7e:03:65:63:35:71:df:
         9d:67:55:95:22:24:46:e8:3a:1c:4a:ae:fd:78:94:0f:28:5a:
         5b:70:fe:1b:53:09:db:b4:94:dc:4b:5a:61:1e:12:01:aa:c5:
         a7:ca:59:fb:fe:98:27:68:8b:f9:c6:dd:25:31:3f:55:d6:c9:
         57:45:91:bd:cd:ba:f9:48:cb:7b:60:5b:8e:a2:aa:e1:5b:d7:
         d1:72:57:7d:5c:b0:49:56:7e:b4:a9:da:b7:16:5e:2f:4d:9c:
         74:4f:47:62:de:57:42:41:5c:c8:39:84:99:a0:e2:19:5c:b8:
         04:c6:89:c0:33:5b:d4:8e:18:3a:8b:d3:d3:9a:00:13:f6:f4:
         10:2a:54:c0:45:1f:ee:d6:8c:69:d0:cd:16:fd:82:eb:85:9d:
         58:e7:a1:60:6b:fd:20:6c:5d:36:17:9e:a9:98:f3:5c:86:88:
         7c:2e:e0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:20:22 2025 by rpki-client