Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa
File:                     3134332e3133372e322e302f32332d3233203d3e203631373937.roa (raw, json)
Hash identifier:          yej89HJwazw7nwiYtXbydUtdqeUnTymOUCETHaETA5k=
Subject key identifier:   19:F7:09:D3:3B:3A:69:26:B4:F8:A3:42:A4:76:D9:D4:2A:90:AB:D6
Certificate issuer:       /CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
Certificate serial:       298FE2F35F0EC9F0FC53EBD9FE4CFD8007320A93
Authority key identifier: FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa
Signing time:             Fri 06 Jun 2025 11:44:32 +0000
ROA not before:           Fri 06 Jun 2025 11:39:32 +0000
ROA not after:            Fri 05 Jun 2026 11:44:32 +0000
asID:                     61797
IP address blocks:        143.137.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl
                          rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:e2:f3:5f:0e:c9:f0:fc:53:eb:d9:fe:4c:fd:80:07:32:0a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4DA27833757CF1F5DCB4799D9D238117F31532
        Validity
            Not Before: Jun  6 11:39:32 2025 GMT
            Not After : Jun  5 11:44:32 2026 GMT
        Subject: CN=19F709D33B3A6926B4F8A342A476D9D42A90ABD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:e0:f1:cc:4a:5a:af:58:13:48:9e:3f:b2:
                    42:df:6f:82:c3:ec:20:1b:f1:33:49:5a:32:99:b9:
                    38:ee:dc:6c:2a:85:93:67:8a:d9:49:11:03:9b:03:
                    da:77:01:5f:05:f2:de:07:2b:d9:43:0a:98:d0:8b:
                    f5:8a:dc:08:8e:25:f8:50:0d:77:fa:af:f0:1e:b5:
                    fd:cb:9a:8d:45:0d:ab:d0:b8:6e:5e:6b:76:67:b9:
                    74:89:5f:5c:7f:af:6e:a3:6f:4f:1d:37:c2:be:ff:
                    e8:17:9b:3c:4f:cf:0a:44:d0:be:af:6e:9d:f1:d2:
                    41:a0:f7:a1:fc:82:40:38:8f:7d:14:5e:90:07:81:
                    57:79:8e:53:cb:55:45:f5:d7:a8:27:1a:e1:f8:6f:
                    de:e8:a4:e9:09:41:2a:d0:e1:2b:da:cc:0a:c6:e8:
                    15:96:0a:72:c9:31:3f:77:7c:66:35:02:6d:d4:41:
                    56:d4:50:32:69:fe:15:f5:2b:c1:17:c4:58:8c:bb:
                    3b:50:d8:fb:18:d1:ac:ab:11:4e:6b:d9:97:d5:40:
                    ef:c9:08:33:c7:d5:f9:55:06:19:10:19:e4:fb:33:
                    f1:90:71:31:09:0d:b5:9c:6d:ea:c9:ec:50:e5:8c:
                    f5:33:e2:f0:43:3d:3c:cf:25:4f:65:86:81:f3:b8:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:09:D3:3B:3A:69:26:B4:F8:A3:42:A4:76:D9:D4:2A:90:AB:D6
            X509v3 Authority Key Identifier:
                keyid:FE:4D:A2:78:33:75:7C:F1:F5:DC:B4:79:9D:9D:23:81:17:F3:15:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/FE4DA27833757CF1F5DCB4799D9D238117F31532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE4DA27833757CF1F5DCB4799D9D238117F31532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3134332e3133372e322e302f32332d3233203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:78:64:21:7f:08:c2:53:9f:84:be:3c:63:4c:2e:a1:b3:
         81:d6:69:86:a6:16:80:90:93:57:b4:24:f1:c7:0b:70:bc:fe:
         17:2e:70:01:3f:f8:32:b4:9b:d0:05:2c:47:e3:3e:44:87:1d:
         f9:8c:40:d6:0a:c6:ae:b2:77:c8:6d:a4:f0:0a:8c:8c:36:45:
         03:20:b6:fe:83:1b:ec:e6:74:07:3e:0d:8c:b1:f0:22:7f:aa:
         b9:f6:ab:ff:ef:6e:7c:7a:da:68:e6:a3:f0:10:39:cb:e4:b5:
         e7:e6:98:6e:4e:1d:14:35:22:e8:03:2f:e6:16:b4:ae:b1:96:
         e2:ad:6a:53:15:b9:b0:cc:d7:98:ec:c2:c9:5d:d7:ae:0a:d2:
         34:e7:d0:a8:43:2f:ea:0f:22:ea:05:e4:31:81:30:98:b0:25:
         62:c2:2d:9b:68:de:d2:64:01:ae:08:bc:21:7d:66:e2:e5:b2:
         57:6d:c0:9a:79:de:b0:46:02:75:ba:a7:20:b6:a6:ff:65:52:
         b2:b4:2a:b7:9f:a7:1f:64:fa:8f:c7:79:05:3a:ba:11:fc:dc:
         84:72:b2:ae:4e:fd:a5:92:f9:ab:d8:9b:62:cd:45:6c:e6:b9:
         c4:ed:1c:e5:1e:98:36:4c:17:63:0e:7b:6a:ba:ef:3f:c7:11:
         95:64:df:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:22:33 2025 by rpki-client