Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39392e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          IRMdx2/le/vaQEk+7qAqRm1n10TlBH9kIzhyTn+qo2A=
Subject key identifier:   8E:D0:C0:FA:0C:09:F5:4B:72:94:C8:AB:FE:5D:C2:E3:3C:A8:35:1D
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       11407E2AE6B17C9EA4DF7BD2DF8DD95B2B1D2A1D
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     52977
IP address blocks:        143.255.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:40:7e:2a:e6:b1:7c:9e:a4:df:7b:d2:df:8d:d9:5b:2b:1d:2a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject: CN=8ED0C0FA0C09F54B7294C8ABFE5DC2E33CA8351D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:fc:44:5c:e7:e3:85:1a:59:31:12:92:c0:
                    aa:e1:87:c6:10:2d:0f:e5:00:d4:12:59:52:8c:5d:
                    34:8d:45:2c:2e:a4:31:d7:9e:ab:df:59:ef:d0:5c:
                    c2:f9:51:30:b3:1c:5b:91:fd:30:36:e1:37:79:20:
                    d1:03:8b:b1:29:00:81:a1:62:3c:fe:e9:ef:b1:b7:
                    2c:3f:b5:91:80:a0:1a:e0:c1:f2:49:4b:ce:0d:5d:
                    52:f7:46:ab:46:6e:a4:4d:ea:55:4e:6e:ae:34:86:
                    3f:5a:77:09:5a:13:39:ad:1b:97:cc:0e:41:99:04:
                    4f:87:b8:e1:75:b1:81:9c:c6:b4:cb:1d:58:b6:6d:
                    c3:76:5e:b0:c2:04:5d:06:92:b9:f1:8f:67:10:15:
                    74:b5:35:ef:04:88:14:13:c4:3c:a1:a0:80:c2:49:
                    84:93:d5:3a:58:80:66:cf:fc:cc:ce:cd:4d:6b:80:
                    33:9c:2b:97:20:0b:91:de:ba:f4:53:5a:5c:c2:4a:
                    82:0b:d7:4a:02:bb:80:d9:2c:77:00:18:a0:00:2c:
                    c0:83:70:09:91:b1:62:95:5d:a6:ff:a2:a1:3a:16:
                    1d:78:52:38:30:94:b3:67:0d:2e:21:1f:a6:be:cb:
                    15:7e:a9:0a:28:f2:85:f1:cf:60:97:2d:37:b8:e1:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D0:C0:FA:0C:09:F5:4B:72:94:C8:AB:FE:5D:C2:E3:3C:A8:35:1D
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39392e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:3a:fb:4b:ce:f3:e6:4e:54:c6:b0:72:68:6a:7f:63:53:
         61:d2:cb:33:45:58:14:6b:49:c6:e4:04:11:15:c5:d2:6c:81:
         34:19:e0:7a:34:1a:22:54:79:c9:84:75:66:be:89:9d:f8:0d:
         a2:b3:6d:7b:e9:2f:55:2a:0f:86:f0:0b:fa:3d:92:af:e2:65:
         f5:1d:85:be:ef:d5:dc:07:1b:1c:51:8d:64:9f:91:60:f3:62:
         0e:38:4c:72:aa:60:ab:71:60:da:66:35:38:d6:9e:f0:da:29:
         f6:06:78:22:58:d9:d9:30:8f:fd:b6:01:dd:39:dd:bd:51:b1:
         fc:69:01:1c:d4:a2:ca:a4:22:c4:e7:75:b8:29:15:22:ba:aa:
         4d:65:bc:bb:77:c2:6f:02:bb:55:1c:03:96:11:ad:72:14:52:
         19:a1:81:2b:64:74:5a:cf:b9:5b:72:0b:f6:59:da:fb:93:54:
         27:6a:1f:8d:ed:57:10:be:4c:d4:4c:2f:3a:48:0c:75:c5:8c:
         98:da:0a:b9:b9:c0:0a:5b:38:8c:b2:4b:87:89:54:3a:0e:83:
         c5:e0:33:a8:40:26:82:46:c4:43:b9:db:d6:32:45:cc:50:ba:
         74:e3:26:97:33:00:06:f9:26:3e:59:af:1a:9c:49:fc:a8:ac:
         c5:fe:13:1e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEUB+KuaxfJ6k33vS343ZWysdKh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMDMxMTAvBgNV
BAMTKDhFRDBDMEZBMEMwOUY1NEI3Mjk0QzhBQkZFNURDMkUzM0NBODM1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78PxEXOfjhRpZMRKSwKrhh8YQ
LQ/lANQSWVKMXTSNRSwupDHXnqvfWe/QXML5UTCzHFuR/TA24Td5INEDi7EpAIGh
Yjz+6e+xtyw/tZGAoBrgwfJJS84NXVL3RqtGbqRN6lVObq40hj9adwlaEzmtG5fM
DkGZBE+HuOF1sYGcxrTLHVi2bcN2XrDCBF0Gkrnxj2cQFXS1Ne8EiBQTxDyhoIDC
SYST1TpYgGbP/MzOzU1rgDOcK5cgC5HeuvRTWlzCSoIL10oCu4DZLHcAGKAALMCD
cAmRsWKVXab/oqE6Fh14UjgwlLNnDS4hH6a+yxV+qQoo8oXxz2CXLTe44dT7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjtDA+gwJ9UtylMir/l3C4zyoNR0wHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNDMzMmUzMjM1MzUyZTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj/9jMA0GCSqGSIb3DQEBCwUAA4IBAQBoozr7S87z
5k5UxrByaGp/Y1Nh0sszRVgUa0nG5AQRFcXSbIE0GeB6NBoiVHnJhHVmvomd+A2i
s2176S9VKg+G8Av6PZKv4mX1HYW+79XcBxscUY1kn5Fg82IOOExyqmCrcWDaZjU4
1p7w2in2BngiWNnZMI/9tgHdOd29UbH8aQEc1KLKpCLE53W4KRUiuqpNZby7d8Jv
ArtVHAOWEa1yFFIZoYErZHRaz7lbcgv2Wdr7k1Qnah+N7VcQvkzUTC86SAx1xYyY
2gq5ucAKWziMskuHiVQ6DoPF4DOoQCaCRsRDudvWMkXMULp04yaXMwAG+SY+Wa8a
nEn8qKzF/hMe
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:42 2025 by rpki-client