Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa
File:                     3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa (raw, json)
Hash identifier:          jgpCeiVl5VcAxrlh5lsh3HgP60adidMsy6nP7U3SIB4=
Subject key identifier:   E3:42:BD:F5:0E:81:47:EB:46:81:8F:5D:2D:96:6F:9C:CD:AC:19:BC
Certificate issuer:       /CN=AEE053558C2B180DC12DAFF1D4AA19D44F354D88
Certificate serial:       5F63CCF66E0756E224E2B848BF9F8041569EA087
Authority key identifier: AE:E0:53:55:8C:2B:18:0D:C1:2D:AF:F1:D4:AA:19:D4:4F:35:4D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa
Signing time:             Tue 06 May 2025 18:09:22 +0000
ROA not before:           Tue 06 May 2025 18:04:22 +0000
ROA not after:            Tue 05 May 2026 18:09:22 +0000
asID:                     264078
IP address blocks:        143.137.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.crl
                          rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:63:cc:f6:6e:07:56:e2:24:e2:b8:48:bf:9f:80:41:56:9e:a0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE053558C2B180DC12DAFF1D4AA19D44F354D88
        Validity
            Not Before: May  6 18:04:22 2025 GMT
            Not After : May  5 18:09:22 2026 GMT
        Subject: CN=E342BDF50E8147EB46818F5D2D966F9CCDAC19BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:63:d2:e5:87:e7:6d:8a:5d:b9:87:1d:f2:11:
                    cc:df:9a:bc:e8:08:1e:a1:f7:ba:e4:5c:90:8b:fe:
                    c6:cc:31:f0:81:be:e9:6a:20:64:a9:64:f7:c0:38:
                    1e:2e:ec:2f:d7:04:12:a7:e9:78:fa:1d:74:fa:06:
                    3b:a0:89:80:14:56:d8:b2:2a:0e:04:a2:c2:d3:0b:
                    ba:16:cf:5c:33:fc:ed:01:ab:bd:b6:c1:d5:8d:c1:
                    e2:78:3c:f8:cd:41:d9:d3:46:ff:9f:91:f0:1a:c9:
                    56:8a:8d:8d:40:77:ff:d8:50:9b:9f:b0:78:33:d8:
                    2b:11:64:82:bf:83:ff:c7:49:2d:c6:86:51:15:a7:
                    50:67:28:cd:3e:6c:a1:db:62:52:5f:d4:a7:53:28:
                    85:5d:5f:a9:1a:13:9a:51:8d:77:2a:1c:22:84:bb:
                    52:c8:83:39:67:83:3e:b8:ee:f1:ee:ff:d1:97:5a:
                    6b:48:cf:95:2e:98:60:4e:f3:d3:f4:fc:81:71:94:
                    8f:92:60:9f:9f:a8:cf:7e:d6:72:24:38:9a:8b:0b:
                    df:e1:53:6a:6d:5b:d9:74:48:b7:9a:3a:68:ae:fb:
                    50:05:cf:87:f4:a5:f5:06:12:ce:2c:08:c0:e5:ff:
                    a6:e5:c1:47:49:0d:14:4b:a4:c9:88:44:b9:b6:06:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:BD:F5:0E:81:47:EB:46:81:8F:5D:2D:96:6F:9C:CD:AC:19:BC
            X509v3 Authority Key Identifier:
                keyid:AE:E0:53:55:8C:2B:18:0D:C1:2D:AF:F1:D4:AA:19:D4:4F:35:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:62:67:ac:d4:ba:5e:d2:fc:99:cc:38:27:27:f1:e2:47:06:
         63:26:8e:a2:ac:69:d3:bb:7c:00:14:29:27:f3:6d:75:48:36:
         a8:83:8f:23:e7:ec:06:d7:b0:9c:5d:4d:3f:fb:6b:c3:8f:47:
         05:63:f2:25:7f:06:4a:24:49:21:ff:4f:bc:b5:38:21:df:54:
         a4:76:96:59:14:4b:d6:7d:a4:aa:eb:a4:e1:81:25:92:cd:b3:
         8a:7b:b8:cf:fa:72:0d:e2:75:5c:1b:ae:d0:11:d5:5a:07:af:
         04:48:0c:7b:00:04:d2:bf:72:2a:c7:34:c1:cd:82:96:0c:22:
         57:25:b0:46:3c:b3:06:ec:84:f0:3c:f6:4c:41:b8:3f:50:1c:
         ad:6d:0c:ed:e8:26:bb:5d:74:c7:06:8f:db:84:01:61:aa:d6:
         43:a0:ba:d2:94:ef:3c:2a:23:77:24:c7:b9:7a:8e:cf:55:5b:
         ad:ff:2d:a8:be:6c:19:4f:6e:ec:3d:59:38:76:ef:af:6c:3a:
         40:ae:9e:63:07:54:c0:02:2a:ae:2c:9a:96:c1:80:e0:92:f1:
         cb:95:c9:81:af:37:ab:c9:34:53:5d:45:05:a2:2e:d7:3c:34:
         c1:4c:cd:26:91:f8:ec:52:2e:d1:03:f8:40:18:32:59:11:f7:
         15:7f:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:39 2025 by rpki-client