Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa
File:                     3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa (raw, json)
Hash identifier:          Y/3G1qwOaxTvYL4iucj14Yz9LLGD4RP4P3LYEcm3CcE=
Subject key identifier:   31:A1:88:AB:83:A3:32:09:2A:61:41:85:7F:21:17:41:A0:34:F4:22
Certificate issuer:       /CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
Certificate serial:       50771E59D99AB4C434CE34980ECA4F28E86ACDC9
Authority key identifier: A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa
Signing time:             Wed 30 Apr 2025 20:38:55 +0000
ROA not before:           Wed 30 Apr 2025 20:33:55 +0000
ROA not after:            Wed 29 Apr 2026 20:38:55 +0000
asID:                     265157
IP address blocks:        143.255.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 12:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:1e:59:d9:9a:b4:c4:34:ce:34:98:0e:ca:4f:28:e8:6a:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6578758F56AC37AA21D1EA43F62AE01ABEE5915
        Validity
            Not Before: Apr 30 20:33:55 2025 GMT
            Not After : Apr 29 20:38:55 2026 GMT
        Subject: CN=31A188AB83A332092A6141857F211741A034F422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:d8:f5:30:dd:48:db:6a:a2:cc:40:94:61:
                    4e:79:ca:8e:75:7c:d8:f1:bb:6b:ac:ec:8b:87:67:
                    36:0d:0a:15:07:a9:03:60:05:c3:51:31:06:c1:d3:
                    22:39:ec:f3:44:28:84:7e:6c:b0:f9:69:ad:c4:be:
                    14:3e:7d:13:a4:93:19:75:8c:08:b4:68:02:f0:ae:
                    04:f3:23:ba:61:e4:ee:3b:46:75:d8:c1:c4:df:c5:
                    6b:c6:09:16:a1:e4:b1:69:74:ed:6a:ba:d7:8d:fa:
                    95:cf:0c:15:ef:35:86:63:91:96:40:21:5d:53:13:
                    a8:49:f4:3d:04:55:53:3d:71:43:cc:44:0d:70:95:
                    ba:b0:57:77:02:fa:ff:b0:c8:39:59:cf:c3:fb:f0:
                    fa:f8:9b:44:1f:6b:9f:db:08:6d:44:12:0c:75:27:
                    3f:e7:05:e2:ae:42:33:7d:3a:94:0d:3b:de:c8:e7:
                    aa:b6:df:fb:46:26:4d:7d:73:0c:05:1b:30:6e:ca:
                    b8:f9:a9:9e:ab:f8:55:9a:7a:76:c3:8f:31:3f:63:
                    70:e2:48:76:b3:43:fc:2a:45:20:78:40:06:c1:5e:
                    43:76:66:86:fd:af:3b:ab:11:61:2d:81:c9:b1:a8:
                    cf:8c:c2:c9:7b:7b:26:7a:58:6d:31:33:ea:c1:4f:
                    cd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A1:88:AB:83:A3:32:09:2A:61:41:85:7F:21:17:41:A0:34:F4:22
            X509v3 Authority Key Identifier:
                keyid:A6:57:87:58:F5:6A:C3:7A:A2:1D:1E:A4:3F:62:AE:01:AB:EE:59:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6578758F56AC37AA21D1EA43F62AE01ABEE5915.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:c6:2b:8f:ae:3c:c3:fd:f2:f5:eb:8a:22:22:32:03:bc:
         86:5a:64:4b:f9:05:1d:2c:37:52:52:6d:b5:a1:d8:dd:19:03:
         21:1f:13:77:58:a2:19:02:d4:09:40:c6:76:ba:7a:4f:d6:01:
         fa:0e:e7:8a:19:f6:73:4e:d2:15:a0:f4:17:40:5c:00:f4:2b:
         00:1f:3a:c6:89:b9:34:e3:79:27:b4:a8:fa:8c:f1:2c:9c:bb:
         c7:94:0d:41:e6:4c:72:c1:db:06:f1:91:6a:b2:cc:85:af:15:
         ed:a8:68:a4:8f:07:4d:ec:48:73:3e:47:4b:b9:1e:fb:9a:9b:
         2f:9f:59:09:f0:c3:3e:16:5c:c9:10:b3:1c:5b:0f:b1:4a:95:
         55:ef:2c:f0:15:29:5f:e0:4e:67:ad:8c:fe:a6:29:9d:cd:f3:
         9a:25:57:d7:8e:07:72:f4:89:19:1b:03:4c:4a:27:5e:51:25:
         21:c6:9d:b9:2c:e7:c6:81:8e:8c:38:1e:08:25:95:66:28:25:
         85:98:6b:07:a1:16:fb:e5:dd:df:25:26:24:ea:8b:90:a1:48:
         52:cf:d1:f0:c3:c3:52:8a:6d:d3:80:e7:99:ba:ca:7d:a8:9f:
         44:68:d1:af:97:a7:f2:82:85:00:84:da:ad:70:7c:aa:f2:f2:
         c4:c3:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:03:45 2025 by rpki-client