Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa
File:                     3134332e3133372e302e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          HalKeHFAdbH/u4NvniT4bxvG1aDCjQOP+k91Xee5Ad0=
Subject key identifier:   0D:66:F3:72:CA:89:6D:26:78:58:9F:25:18:14:B3:CD:1E:72:54:39
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       33FF35452918EDCD256AEC77D65356305A8D527B
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:24 +0000
ROA not before:           Fri 06 Jun 2025 11:39:24 +0000
ROA not after:            Fri 05 Jun 2026 11:44:24 +0000
asID:                     61797
IP address blocks:        143.137.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ff:35:45:29:18:ed:cd:25:6a:ec:77:d6:53:56:30:5a:8d:52:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:24 2025 GMT
            Not After : Jun  5 11:44:24 2026 GMT
        Subject: CN=0D66F372CA896D2678589F251814B3CD1E725439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:f2:a7:33:1b:4c:10:a6:67:ef:c5:71:15:
                    30:45:6a:b7:c0:2c:bf:0c:63:85:af:9a:67:6a:6c:
                    89:c3:5a:13:9f:d6:60:eb:01:0f:8a:e6:f8:2a:3b:
                    67:fa:4f:ef:7c:e1:de:d4:1a:22:6c:ef:5d:39:20:
                    60:d7:38:3d:3b:12:65:5c:f6:68:a3:62:f9:d3:63:
                    94:84:f0:b0:25:2e:11:77:aa:91:b3:71:17:2f:27:
                    b1:59:07:2c:d1:ce:37:b6:3e:9b:97:81:c4:97:1f:
                    71:83:b3:c2:57:00:1c:ac:34:52:30:45:2f:df:53:
                    83:f0:c1:c3:60:41:10:34:d6:4e:cc:e2:58:98:e0:
                    a1:50:45:63:e6:dc:1c:05:49:fc:a5:98:02:bf:ba:
                    7a:2f:c5:e3:11:9e:49:ed:2f:fb:13:e3:f8:1e:29:
                    7b:76:5e:a7:09:b0:93:d2:db:65:e0:fc:b2:c5:8c:
                    68:b3:ad:23:b3:ba:1a:28:bd:7c:12:8c:eb:83:8a:
                    75:13:98:61:d1:0d:6c:8d:73:b2:7a:85:2b:ad:05:
                    94:25:65:7d:59:70:d4:1f:c6:e7:51:0c:d2:2a:c3:
                    cd:3d:02:4a:93:2b:fd:f6:eb:97:2b:72:ef:9c:60:
                    c3:d4:28:95:59:4e:7d:96:2c:db:6f:d6:a1:de:9d:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:66:F3:72:CA:89:6D:26:78:58:9F:25:18:14:B3:CD:1E:72:54:39
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e302e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:76:db:d0:61:f4:e6:52:5d:81:3e:7b:2c:93:8d:de:97:
         e2:9f:ec:b3:31:ff:92:ab:d8:b0:da:79:b9:31:42:66:cb:85:
         41:f9:2d:ad:54:92:64:65:32:a5:1c:fd:2a:ca:db:93:18:1b:
         4e:45:14:3e:1a:a4:8e:f3:3e:21:fb:36:db:f0:2a:1e:4b:f5:
         a5:6b:e2:f4:66:7c:be:57:a7:d5:fb:3b:80:14:59:b5:d9:73:
         5a:3e:f6:b0:3c:70:61:bf:87:c5:0c:5c:49:b6:62:d5:87:72:
         16:5a:87:89:4a:1a:fa:bc:66:f1:9d:79:2a:5f:97:82:c0:c0:
         83:2f:4f:41:51:b0:1c:1c:be:8d:3c:9e:7c:1a:c6:cf:68:85:
         53:38:fc:19:59:48:85:f2:33:16:2e:21:77:f7:8f:ac:e8:dc:
         d4:2d:8f:5e:88:db:ac:45:b7:00:94:6d:91:fa:a6:25:eb:d7:
         e2:29:3e:c6:65:8e:d1:4e:4b:ed:b7:cd:75:7c:30:24:bb:0e:
         01:3f:4e:ed:15:d6:da:1f:e2:ac:98:8d:a9:99:98:30:59:fa:
         e7:7c:12:b3:b4:bd:1f:21:39:b9:19:c4:02:95:a1:e7:f0:31:
         12:8d:e2:8f:f6:bb:e6:67:f8:a8:08:54:ac:de:87:e5:01:8c:
         79:bd:62:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:31:18 2025 by rpki-client