Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138342e302f32332d3233203d3e20323635313138.roa
File:                     3134332e3230382e3138342e302f32332d3233203d3e20323635313138.roa (raw, json)
Hash identifier:          9Xmyzp1Mvd6kzM43cx47/ZTNO+rPkJuRlb3nRtfQEic=
Subject key identifier:   51:74:F0:C6:67:91:3B:69:AC:46:23:E3:B5:29:C5:94:03:8B:14:65
Certificate issuer:       /CN=165675A1928929FF394AAD05FDC9293D274BED5D
Certificate serial:       23922BAA0CAD871F767759C7C9679A4BEF0F0CB1
Authority key identifier: 16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138342e302f32332d3233203d3e20323635313138.roa
Signing time:             Wed 09 Apr 2025 14:10:25 +0000
ROA not before:           Wed 09 Apr 2025 14:05:25 +0000
ROA not after:            Wed 08 Apr 2026 14:10:25 +0000
asID:                     265118
IP address blocks:        143.208.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:92:2b:aa:0c:ad:87:1f:76:77:59:c7:c9:67:9a:4b:ef:0f:0c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165675A1928929FF394AAD05FDC9293D274BED5D
        Validity
            Not Before: Apr  9 14:05:25 2025 GMT
            Not After : Apr  8 14:10:25 2026 GMT
        Subject: CN=5174F0C667913B69AC4623E3B529C594038B1465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:8d:a5:63:f1:b2:0e:20:df:81:5a:1c:27:
                    b8:65:16:f2:c2:31:38:03:72:68:be:2f:1c:1c:8b:
                    87:18:c1:7a:12:d1:d9:65:4e:d5:53:43:85:4b:c5:
                    0b:74:c1:e6:32:2f:41:85:ee:e7:a4:d0:a1:0e:54:
                    08:03:2b:0b:7f:9d:ce:17:78:0b:50:33:0b:bf:6e:
                    d6:7b:ac:8c:e3:a4:bf:b5:d1:f4:d1:25:d9:cb:7c:
                    04:97:bd:94:fb:b8:f0:ba:1b:8c:ae:12:99:1c:52:
                    2c:8b:5e:13:e6:7c:e7:12:38:08:bb:42:6e:0f:2c:
                    de:9a:1b:86:1b:b6:8b:45:d3:dd:31:ff:83:93:c5:
                    97:7a:df:d1:fb:82:5a:91:53:c9:b6:44:73:4d:99:
                    61:42:d8:98:c2:ab:29:07:1c:01:39:6a:b8:08:e1:
                    94:31:a9:8b:7b:3b:55:08:d3:f3:65:8c:5a:56:41:
                    d0:f9:a0:e1:c4:d9:bd:71:26:10:b6:2c:4d:d3:62:
                    b8:cb:21:95:53:66:a7:1c:29:a5:b5:29:25:c3:ef:
                    41:c1:04:db:24:e3:5c:37:a7:ad:5c:3b:86:fe:01:
                    bc:fc:05:57:a8:1b:48:88:5e:ee:e5:15:4a:28:ec:
                    bb:4b:5f:0d:0a:44:00:08:74:5e:83:4c:6e:d9:53:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:F0:C6:67:91:3B:69:AC:46:23:E3:B5:29:C5:94:03:8B:14:65
            X509v3 Authority Key Identifier:
                keyid:16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138342e302f32332d3233203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:ec:3f:45:36:f1:06:44:01:4e:74:c8:7c:ad:86:0f:ed:
         14:77:52:73:97:df:ee:09:7b:30:94:4d:91:67:19:36:11:15:
         72:67:b3:c2:e1:f9:93:5d:ff:d0:e1:07:59:e7:29:10:c8:35:
         46:be:5c:bf:40:74:f9:f3:7b:82:32:ab:a5:65:bf:b5:70:e6:
         e4:8e:45:f4:56:32:87:72:81:13:85:42:dd:38:cc:10:58:ba:
         a5:a3:c1:35:09:ff:09:f5:b3:3e:10:51:10:b8:f9:98:e5:3b:
         2d:1f:46:19:e1:17:2a:6f:63:05:37:e0:6b:a0:92:2e:b0:67:
         0c:f8:d5:17:74:16:ae:66:0e:17:1d:bd:0b:33:e7:9b:00:fd:
         f4:da:65:88:b1:44:18:ba:fe:57:3c:14:54:3a:b5:fa:e6:c1:
         fa:63:09:83:7c:4e:30:e4:30:0b:98:18:07:90:2f:c6:59:c0:
         03:17:f2:02:ad:f1:99:2f:5f:18:ac:6e:a8:20:95:79:98:04:
         9f:4e:33:8d:99:62:f2:be:4e:b7:3a:58:b2:69:6e:d4:31:77:
         dc:12:90:de:c4:a5:9e:74:b0:2e:5a:44:84:dc:02:71:96:f2:
         7b:4a:26:fd:46:47:21:9d:87:d5:7d:05:48:dd:04:7a:bf:0a:
         a3:42:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:53 2025 by rpki-client