Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa
File:                     3134332e302e342e302f32322d3332203d3e20323634343238.roa (raw, json)
Hash identifier:          bxnR3mV3SvcoFfyzCyCLrnUeCoaKcgDgjUZwBVZRfRE=
Subject key identifier:   30:C6:06:8B:45:5C:DA:FA:FE:14:06:61:75:DB:37:D4:09:99:76:B5
Certificate issuer:       /CN=99B8055C0E1571E458C85ADC0655D744D588871C
Certificate serial:       7CC52817796F6242C2A07F29E016C5A87933C8EB
Authority key identifier: 99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa
Signing time:             Sat 08 Mar 2025 16:10:58 +0000
ROA not before:           Sat 08 Mar 2025 16:05:58 +0000
ROA not after:            Sat 07 Mar 2026 16:10:58 +0000
asID:                     264428
IP address blocks:        143.0.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.crl
                          rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:28:17:79:6f:62:42:c2:a0:7f:29:e0:16:c5:a8:79:33:c8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99B8055C0E1571E458C85ADC0655D744D588871C
        Validity
            Not Before: Mar  8 16:05:58 2025 GMT
            Not After : Mar  7 16:10:58 2026 GMT
        Subject: CN=30C6068B455CDAFAFE14066175DB37D4099976B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:5c:1d:bf:ce:d5:ca:3a:b5:a9:c7:00:ea:
                    b6:0e:5c:e2:e9:f2:1c:2e:83:37:70:04:1d:b8:68:
                    a7:93:29:73:c4:e5:b9:68:ca:62:41:57:9f:d4:19:
                    af:1c:be:84:aa:25:02:da:ab:eb:95:00:74:80:71:
                    f9:f1:c1:65:f7:7d:08:6a:0e:97:69:76:94:ae:01:
                    f1:86:03:90:e9:2d:2f:aa:3a:1e:a6:f0:81:43:04:
                    f3:db:58:5f:18:65:6c:fb:c7:25:4c:02:ec:6c:ad:
                    e1:5f:3c:8e:9b:3d:61:b2:58:c8:a3:e0:1f:b4:07:
                    37:62:03:4d:4a:ee:11:b8:6b:3e:07:31:90:47:a2:
                    a4:97:48:8e:64:00:1a:82:34:50:6b:63:ea:ee:cd:
                    e7:e8:c2:f2:0c:8e:20:83:36:06:c2:a6:83:9f:5e:
                    36:f8:4e:05:b3:2c:9b:d0:f1:ea:45:94:a1:d7:0f:
                    31:22:10:22:31:8c:87:43:14:7c:01:9a:74:6d:27:
                    e3:cb:73:9e:f2:f4:87:08:aa:e5:5f:58:8a:57:e9:
                    d6:1d:c2:e0:ad:e3:d6:f3:2f:35:23:63:07:74:4d:
                    58:10:2a:83:38:29:59:07:15:0f:e3:30:cf:91:bd:
                    3c:62:2c:02:e5:0b:ba:7e:b9:a7:f2:8f:96:ba:f2:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:06:8B:45:5C:DA:FA:FE:14:06:61:75:DB:37:D4:09:99:76:B5
            X509v3 Authority Key Identifier:
                keyid:99:B8:05:5C:0E:15:71:E4:58:C8:5A:DC:06:55:D7:44:D5:88:87:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/99B8055C0E1571E458C85ADC0655D744D588871C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99B8055C0E1571E458C85ADC0655D744D588871C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:19:7a:98:0a:de:7c:cd:6e:13:93:b7:7a:ee:5e:b1:04:1d:
         58:bc:8a:dd:3e:e3:4e:94:c1:47:5c:9a:da:e3:b4:09:15:2a:
         76:d0:eb:89:ac:f4:2f:0d:d4:01:55:15:3d:da:f7:78:55:a1:
         4c:ee:42:8e:c0:70:5b:6d:30:36:27:6e:40:53:a5:fb:a3:52:
         d5:97:a0:c6:e9:15:8d:9f:6c:08:65:1c:eb:74:d1:4c:37:34:
         f3:c3:07:e5:71:32:14:fe:97:04:85:db:cb:d2:2f:8f:0f:10:
         08:88:6f:1d:dc:b8:3d:90:80:28:6e:e0:6e:bd:9d:38:59:2c:
         af:3a:ef:81:79:ac:68:9d:a0:9e:0c:9f:ce:8e:d1:c7:b0:a0:
         c2:e6:80:8f:cc:7c:2f:42:8f:76:d6:35:ce:91:a8:f1:c4:10:
         0d:13:39:06:48:c3:8c:6e:9a:9c:c9:59:b1:56:10:e2:36:a7:
         ee:80:52:eb:76:d5:fc:aa:06:03:fe:2f:d4:f3:f8:02:b6:a5:
         fb:8b:08:ba:29:9c:67:1d:92:48:f5:d7:1c:45:ac:a9:52:5f:
         68:73:95:14:ee:6f:09:07:f5:c0:e8:8c:0d:cc:0a:8a:c1:96:
         7c:30:41:09:1e:7e:4f:fc:4b:94:bb:bd:be:c2:d1:94:a3:2c:
         95:b9:b9:26
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUfMUoF3lvYkLCoH8p4BbFqHkzyOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlCODA1NUMwRTE1NzFFNDU4Qzg1QURDMDY1NUQ3NDRE
NTg4ODcxQzAeFw0yNTAzMDgxNjA1NThaFw0yNjAzMDcxNjEwNThaMDMxMTAvBgNV
BAMTKDMwQzYwNjhCNDU1Q0RBRkFGRTE0MDY2MTc1REIzN0Q0MDk5OTc2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5H1wdv87Vyjq1qccA6rYOXOLp
8hwugzdwBB24aKeTKXPE5bloymJBV5/UGa8cvoSqJQLaq+uVAHSAcfnxwWX3fQhq
DpdpdpSuAfGGA5DpLS+qOh6m8IFDBPPbWF8YZWz7xyVMAuxsreFfPI6bPWGyWMij
4B+0BzdiA01K7hG4az4HMZBHoqSXSI5kABqCNFBrY+ruzefowvIMjiCDNgbCpoOf
Xjb4TgWzLJvQ8epFlKHXDzEiECIxjIdDFHwBmnRtJ+PLc57y9IcIquVfWIpX6dYd
wuCt49bzLzUjYwd0TVgQKoM4KVkHFQ/jMM+RvTxiLALlC7p+uafyj5a68md7AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUMMYGi0Vc2vr+FAZhdds31AmZdrUwHwYDVR0j
BBgwFoAUmbgFXA4VceRYyFrcBlXXRNWIhxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWJ1ZnVSTmNnaVZobWhITUw1Sm43d1d2N1RwVGNodk5oYmJLU0dYeHhX
QnovMC85OUI4MDU1QzBFMTU3MUU0NThDODVBREMwNjU1RDc0NEQ1ODg4NzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5QjgwNTVDMEUxNTcxRTQ1
OEM4NUFEQzA2NTVENzQ0RDU4ODg3MUMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FidWZ1Uk5jZ2lWaG1oSE1MNUpuN3dXdjdUcFRjaHZOaGJiS1NHWHh4V0J6LzAv
MzEzNDMzMmUzMDJlMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzQzNDMy
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKPAAQwDQYJKoZIhvcNAQELBQADggEBAEEZepgK3nzNbhOT
t3ruXrEEHVi8it0+406UwUdcmtrjtAkVKnbQ64ms9C8N1AFVFT3a93hVoUzuQo7A
cFttMDYnbkBTpfujUtWXoMbpFY2fbAhlHOt00Uw3NPPDB+VxMhT+lwSF28vSL48P
EAiIbx3cuD2QgChu4G69nThZLK8674F5rGidoJ4Mn86O0cewoMLmgI/MfC9Cj3bW
Nc6RqPHEEA0TOQZIw4xumpzJWbFWEOI2p+6AUut21fyqBgP+L9Tz+AK2pfuLCLop
nGcdkkj11xxFrKlSX2hzlRTubwkH9cDojA3MCorBlnwwQQkefk/8S5S7vb7C0ZSj
LJW5uSY=
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:21 2025 by rpki-client