Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
File:                     3134332e3130362e302e302f31362d3137203d3e203533313837.roa (raw, json)
Hash identifier:          cP6Tbv93rN91YsFT+sKfS3RqGOOqVwM6/9BAumCezSE=
Subject key identifier:   6D:5D:D2:FD:D7:66:8C:DE:D1:6E:42:91:90:8F:A1:6D:EF:C0:DE:97
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       0C89EE0329F57F0E3A271FC503E98621E09BF620
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
Signing time:             Thu 06 Mar 2025 19:26:26 +0000
ROA not before:           Thu 06 Mar 2025 19:21:26 +0000
ROA not after:            Thu 05 Mar 2026 19:26:26 +0000
asID:                     53187
IP address blocks:        143.106.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:ee:03:29:f5:7f:0e:3a:27:1f:c5:03:e9:86:21:e0:9b:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Mar  6 19:21:26 2025 GMT
            Not After : Mar  5 19:26:26 2026 GMT
        Subject: CN=6D5DD2FDD7668CDED16E4291908FA16DEFC0DE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:3b:84:92:20:6f:14:29:f7:d8:32:c3:6e:
                    34:30:e7:92:b0:23:b0:77:72:70:b7:b8:6d:4c:21:
                    64:c5:9d:87:a7:f8:e4:27:c6:38:11:bc:6b:1d:fe:
                    9a:c8:a2:7c:8c:ab:18:db:9c:44:76:b4:89:72:83:
                    68:b4:f8:50:3b:c2:1e:ee:a3:fe:0c:46:b7:52:e2:
                    35:3d:ab:d4:06:a1:c4:2a:db:94:2d:38:33:2b:e8:
                    f4:40:4e:c4:95:f4:2b:01:40:29:60:92:b7:0d:d3:
                    cc:1f:db:c5:fa:1d:c2:7f:73:68:54:28:a2:18:18:
                    ee:aa:c9:02:34:f6:be:b9:2d:fb:60:1a:9c:d6:21:
                    41:a2:46:ac:b1:5a:2f:12:1f:26:43:9d:ad:a5:63:
                    d3:81:ab:fc:78:2f:7d:6e:e3:98:a4:bf:1a:54:35:
                    a3:31:f0:0c:ee:11:c2:ba:ee:be:65:d7:26:25:69:
                    32:6e:94:28:71:ba:bc:2c:d9:8b:98:11:36:9f:2c:
                    2d:47:43:bb:8f:8b:bf:03:1d:9d:eb:b1:be:c2:d0:
                    3b:57:25:01:74:c6:6a:80:1d:1c:80:75:8c:40:b2:
                    ce:75:c0:f9:99:42:1f:1e:18:0e:98:86:3a:6b:f8:
                    70:40:5d:d8:b6:69:b7:9d:76:72:08:cc:93:32:0c:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:D2:FD:D7:66:8C:DE:D1:6E:42:91:90:8F:A1:6D:EF:C0:DE:97
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:e3:4a:7f:4f:55:22:28:b0:03:93:97:f8:cb:7a:1b:84:
         4c:4b:1b:04:ce:37:3b:33:a4:8b:9c:cc:11:95:d0:e4:1b:f8:
         46:be:5d:89:d7:71:a6:12:b0:c2:52:d4:8e:24:a0:c3:43:77:
         e7:ed:fd:6f:6f:cd:33:26:a6:84:81:1b:f2:58:1b:40:69:68:
         1f:f0:f9:35:72:95:44:15:cb:7f:fe:c1:90:3b:43:2f:e8:5e:
         15:fc:29:d3:2e:83:01:2f:9d:88:36:d4:1b:bc:b1:fc:fd:b4:
         b5:1b:d7:50:3d:9a:ae:40:21:86:60:72:8b:10:48:b0:44:c5:
         8f:51:2f:d8:cf:dd:c3:f6:ca:a1:9a:e7:48:4e:76:8d:ec:57:
         a2:81:71:9c:fc:2d:3b:cc:77:ac:bb:f6:ee:d6:6f:c5:57:f9:
         5c:34:75:60:08:dc:42:43:fc:0f:6a:05:ed:f8:08:c7:b6:24:
         d2:0b:49:f6:25:54:b6:46:e5:ef:56:f0:39:d3:fd:ed:96:4b:
         e3:a8:7f:c2:d9:57:f6:9c:79:72:f9:b3:a6:fb:50:13:4b:35:
         ff:4e:af:51:9d:bb:46:5c:35:d0:60:90:94:3c:7f:0d:0d:db:
         da:8b:94:3f:6f:95:99:c9:98:59:33:a0:63:31:78:3a:f3:99:
         74:61:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:00:56 2025 by rpki-client