Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa
File:                     3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (raw, json)
Hash identifier:          ijHgzffF1WmSmPVPdsbjAHJZ2LyVKnmtEMBPuBZWZB4=
Subject key identifier:   F2:0F:C2:CF:C6:B7:01:61:60:1F:3B:D8:5E:BA:8E:14:17:5E:4E:41
Certificate issuer:       /CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77
Certificate serial:       47891B7161A608AA70E57A4C63B967D6317EC5DA
Authority key identifier: A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa
Signing time:             Tue 26 Aug 2025 19:33:00 +0000
ROA not before:           Tue 26 Aug 2025 19:28:00 +0000
ROA not after:            Tue 25 Aug 2026 19:33:00 +0000
asID:                     264000
IP address blocks:        143.0.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl
                          rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 10:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:89:1b:71:61:a6:08:aa:70:e5:7a:4c:63:b9:67:d6:31:7e:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77
        Validity
            Not Before: Aug 26 19:28:00 2025 GMT
            Not After : Aug 25 19:33:00 2026 GMT
        Subject: CN=F20FC2CFC6B70161601F3BD85EBA8E14175E4E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:ea:58:fd:73:83:99:13:9a:e7:da:82:d7:
                    7c:1e:fb:a6:99:64:56:98:58:ac:0c:92:59:b1:a7:
                    8a:48:79:f2:24:79:07:0d:fb:9f:85:ef:a9:ff:9a:
                    32:c8:90:af:7c:f8:65:c9:09:03:64:2b:7f:29:88:
                    95:17:26:3d:ed:e2:94:61:bf:b7:18:18:f6:8e:66:
                    91:f8:f8:59:7a:eb:2c:ed:62:97:3b:a3:b9:d6:80:
                    31:f5:f4:fe:b4:51:19:be:20:88:b1:6e:cf:a4:d6:
                    96:a8:39:e2:79:20:6b:34:16:72:bc:55:c5:0e:60:
                    23:4d:40:5e:45:6d:f9:80:e0:1d:f6:65:ab:f0:ff:
                    7a:bd:35:82:8b:18:f7:4b:e3:6f:d9:84:a5:dc:e8:
                    7b:9e:62:fe:23:36:5a:1f:f7:bf:a7:81:24:55:f0:
                    6a:9f:c2:1e:09:23:b4:de:fd:49:69:e6:b6:81:6d:
                    a8:81:01:f0:8c:e7:4f:36:f5:eb:b7:d3:de:65:de:
                    ae:4d:c5:41:03:38:02:ce:80:b2:5e:0c:23:4e:f0:
                    31:4e:2f:6a:9f:0a:04:d6:d2:a7:43:c4:eb:75:54:
                    b4:04:cf:5c:f4:b6:be:da:30:46:08:b0:d5:9f:e8:
                    34:ab:4b:e6:1f:bd:fd:34:8a:14:79:06:9e:b7:3c:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0F:C2:CF:C6:B7:01:61:60:1F:3B:D8:5E:BA:8E:14:17:5E:4E:41
            X509v3 Authority Key Identifier:
                keyid:A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/3134332e302e3132342e302f32322d3234203d3e20323634303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:f9:03:79:53:7b:e6:6c:e7:98:30:b0:91:53:72:b3:87:
         4b:6a:4e:68:59:3f:dd:3d:7c:7b:03:ec:ad:a2:89:e4:74:78:
         cf:01:27:0d:76:57:cf:87:76:51:68:22:03:b9:34:88:50:32:
         0e:c9:75:75:fc:a6:e4:78:68:af:c3:a7:63:a9:c6:e1:1a:cc:
         68:5a:15:0f:a4:16:eb:40:2d:2d:87:c4:3c:d6:e7:bf:66:c9:
         6d:22:03:af:31:72:6e:59:20:95:94:ac:18:cc:23:76:86:dc:
         30:24:c0:34:8a:fb:71:0b:f8:a8:8d:ea:96:50:0e:c7:44:07:
         9f:7a:e5:33:11:dd:7f:6e:7b:52:3a:44:d1:0e:ef:37:54:e1:
         a2:5d:1e:06:44:cb:12:ee:81:8f:7a:1b:81:4e:f3:23:44:03:
         6c:53:11:ee:74:b4:3c:b8:77:cd:6e:8b:18:20:63:0f:10:5e:
         1d:bd:70:2e:f5:a7:7b:e6:c6:91:fb:52:67:d0:3c:09:4f:87:
         70:f1:f6:70:ec:57:c5:35:95:f5:ff:8c:c4:8e:d2:c5:52:3b:
         01:87:8a:06:a6:d0:71:c9:d8:f9:07:6f:8b:15:f7:02:10:8d:
         7c:b3:7e:1d:58:ee:d3:f4:63:df:e1:e0:fc:53:46:1c:f9:b6:
         35:4c:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:48:34 2025 by rpki-client