Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier:          sJF5kaZSNuE0sBFuCOc7NRYOtvcy/fJkJiGQj8ED2To=
Subject key identifier:   54:76:CA:EF:B3:05:52:41:F8:2A:9F:18:B2:EA:DD:F5:7D:23:8E:26
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       6AF3D9170DFD00C8893AED172852158DBE6FFB5C
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
Signing time:             Thu 06 Mar 2025 11:17:51 +0000
ROA not before:           Thu 06 Mar 2025 11:12:51 +0000
ROA not after:            Thu 05 Mar 2026 11:17:51 +0000
asID:                     264001
IP address blocks:        143.0.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f3:d9:17:0d:fd:00:c8:89:3a:ed:17:28:52:15:8d:be:6f:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Mar  6 11:12:51 2025 GMT
            Not After : Mar  5 11:17:51 2026 GMT
        Subject: CN=5476CAEFB3055241F82A9F18B2EADDF57D238E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:9b:e3:38:48:4a:9d:3e:af:76:b8:ee:d9:
                    79:d4:b4:07:cf:0c:65:f8:e0:94:e2:8a:40:5a:79:
                    4a:fc:a6:2b:9a:d5:b5:c9:8e:6e:d1:44:95:77:00:
                    c9:f6:31:04:d5:68:c6:d3:45:1b:78:48:dc:8b:1c:
                    fd:68:46:3a:19:b9:3e:99:2b:ad:62:c1:57:03:e3:
                    d8:5b:58:8a:8b:dd:00:9c:3d:17:11:45:ba:1c:e9:
                    f2:0b:bb:a7:9d:9c:8a:f6:c1:43:55:ef:b6:a8:43:
                    78:a1:6b:ae:e4:d9:ea:e4:f2:18:5d:bb:c5:6d:10:
                    9d:78:d0:06:05:fd:88:5c:25:f3:8b:cb:44:c7:95:
                    a7:85:e7:14:75:b9:68:82:51:c2:9e:b4:79:40:d5:
                    ea:bb:b2:5a:25:3e:0c:9b:d2:3d:ce:03:81:0a:dc:
                    fb:81:b1:4c:08:38:65:07:d6:9a:98:09:82:43:58:
                    71:75:2e:a1:a2:5c:fd:90:c1:61:ce:00:1a:ae:eb:
                    60:4a:b9:8d:b0:d5:89:62:d4:c2:38:3e:d1:87:4c:
                    17:d2:34:bd:0b:21:03:9c:4b:b3:9b:b0:7c:e9:ea:
                    64:b4:13:77:f6:d2:45:b3:37:13:d0:49:aa:0f:f0:
                    42:12:44:48:58:a9:9a:5b:19:70:1f:db:32:6a:f7:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:76:CA:EF:B3:05:52:41:F8:2A:9F:18:B2:EA:DD:F5:7D:23:8E:26
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:2f:63:7a:52:8d:0c:6f:7e:70:d0:5c:1d:de:91:fd:8f:ee:
         f6:5d:75:c5:2b:80:c6:64:6a:f2:08:e2:df:7f:72:57:93:9b:
         c4:99:b1:26:a8:47:63:77:55:8e:b4:68:a8:82:a4:63:0e:f9:
         6d:d0:d0:3b:41:70:fa:b2:82:00:e5:64:a7:b1:01:23:1f:80:
         3a:ca:fe:75:81:a7:18:e3:9f:06:14:1c:31:a9:72:e5:71:99:
         0a:8e:28:4c:67:7d:df:15:09:c4:59:33:b3:07:cf:13:ac:cb:
         70:3a:4b:1b:14:26:d5:50:1e:27:1f:87:9b:97:c8:20:68:62:
         5f:0e:4a:38:ce:0d:18:6f:23:95:8b:ed:b6:55:91:08:d4:c7:
         f0:9c:c1:c2:f8:23:47:ad:1a:22:dd:64:66:7d:fd:20:d4:46:
         1d:e3:52:86:12:a4:d0:94:c3:31:5d:e8:06:41:03:1b:8d:94:
         4d:d9:bd:cd:60:5b:27:c9:af:72:5e:ed:dc:68:45:af:f9:c4:
         a5:82:dd:56:0e:d2:ea:b0:95:94:2d:9d:6a:7a:20:c7:e8:0d:
         ca:3e:7e:48:d2:70:1d:85:33:ac:75:c2:a2:81:93:17:49:62:
         ad:35:82:96:c2:de:b7:9c:4f:db:7f:01:45:11:48:fe:99:57:
         b9:55:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:24:16 2025 by rpki-client