Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa
File:                     3134332e3133372e312e302f32342d3234203d3e203631373937.roa (raw, json)
Hash identifier:          1fIOMVgOkAndlv+3oI1yHe1oTUB0QdTKeoUqkrxw3sI=
Subject key identifier:   29:35:7F:76:66:8D:5C:5F:6D:03:4F:C3:CF:16:F7:D6:49:CF:8E:79
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       6EEF37C1C964F4817FB4141DEAAC00C135D181AD
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:28 +0000
ROA not before:           Fri 06 Jun 2025 11:39:28 +0000
ROA not after:            Fri 05 Jun 2026 11:44:28 +0000
asID:                     61797
IP address blocks:        143.137.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ef:37:c1:c9:64:f4:81:7f:b4:14:1d:ea:ac:00:c1:35:d1:81:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:28 2025 GMT
            Not After : Jun  5 11:44:28 2026 GMT
        Subject: CN=29357F76668D5C5F6D034FC3CF16F7D649CF8E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:08:1a:c8:87:6e:9e:6a:95:e0:88:83:ef:
                    84:a1:9d:04:a1:1e:63:ca:1d:aa:9b:05:9f:17:71:
                    d3:15:2e:34:02:40:5c:65:72:67:df:01:c5:fa:00:
                    ca:bf:fe:d0:72:5e:cb:1a:9a:ca:05:ad:ea:5e:2e:
                    79:45:6f:f6:6b:fe:1a:75:57:7d:a6:e2:ef:40:ca:
                    09:79:42:ad:99:5b:7f:57:96:16:24:b1:0b:0e:fd:
                    f7:c2:56:99:85:3f:73:45:d1:05:ca:ff:0b:a7:49:
                    34:3f:ea:a1:29:09:32:d3:25:8b:c8:52:7c:77:b8:
                    ee:80:76:7b:0b:00:44:a4:64:b1:fb:13:e2:ad:36:
                    d0:3c:d3:83:2c:77:6d:49:b4:95:44:10:0d:16:21:
                    0a:d0:c1:be:f0:c5:06:77:4d:d3:b8:38:b9:b5:d7:
                    5a:c1:25:c7:25:13:03:ef:9a:61:12:97:58:ce:b7:
                    b1:30:38:e2:d9:0c:bc:dd:86:30:71:68:99:02:e6:
                    4c:0c:a0:fc:d9:04:5d:11:c5:40:b4:c3:5a:5b:1c:
                    2e:29:91:f1:3a:30:8c:ac:6e:d2:9d:49:e8:ae:1d:
                    51:c1:87:17:33:d5:a9:06:81:ae:a3:5d:0d:18:40:
                    1e:71:8e:18:ca:43:4a:d1:e1:44:91:31:c6:4e:77:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:7F:76:66:8D:5C:5F:6D:03:4F:C3:CF:16:F7:D6:49:CF:8E:79
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e312e302f32342d3234203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:e7:43:39:03:da:77:7c:86:25:28:70:0c:ca:a6:4a:6c:
         fc:ff:4c:b6:42:ac:fd:34:57:6d:64:de:a2:06:fe:7e:e8:37:
         91:ae:8e:5b:9c:16:3c:54:33:ee:3e:c0:de:73:31:72:cc:68:
         04:3d:ca:21:6c:4b:3d:08:ad:27:2e:75:ce:74:1c:fd:a5:a2:
         48:b7:69:e8:1c:40:82:16:97:f9:9f:63:b5:8d:01:e5:fc:39:
         96:ea:88:2a:c5:19:7f:38:2e:79:1a:ab:9e:03:80:86:7b:9c:
         3c:27:60:3c:ce:46:c9:4f:fe:e6:6f:9e:cb:0f:1d:73:9b:41:
         cf:37:ed:bd:a5:dd:66:d3:7a:3d:85:c5:31:56:44:50:30:07:
         67:26:64:fa:41:3c:a9:20:60:2d:0c:cd:8c:fa:9a:2e:6b:01:
         f5:e4:f3:36:c2:5a:d0:8c:12:10:90:63:d3:ca:24:6c:a3:c2:
         84:fe:c7:89:f8:dd:73:40:07:fb:32:63:a6:10:d2:fc:0a:30:
         53:27:35:6e:9f:2e:6d:7c:53:b8:98:b1:20:71:15:3f:23:6f:
         93:6e:da:eb:5b:85:e6:e5:74:99:19:49:8c:5f:b4:18:84:7a:
         4e:59:51:14:79:4a:a4:f8:8a:c5:50:41:19:4c:89:19:75:41:
         dd:74:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:31:19 2025 by rpki-client