Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
File:                     3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (raw, json)
Hash identifier:          Q2JymKQF6NmDOXMRSwyKq2Je2bjCMsxjvwq3vjHVwnE=
Subject key identifier:   25:B5:1A:AE:19:D7:E6:F5:1F:C8:9F:28:41:6D:B0:07:FB:AE:B0:C5
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       1CFAC40F87AF87E5A69B20DA60B524732099F916
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa
Signing time:             Thu 06 Mar 2025 09:00:37 +0000
ROA not before:           Thu 06 Mar 2025 08:55:37 +0000
ROA not after:            Thu 05 Mar 2026 09:00:37 +0000
asID:                     262343
IP address blocks:        143.255.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fa:c4:0f:87:af:87:e5:a6:9b:20:da:60:b5:24:73:20:99:f9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Mar  6 08:55:37 2025 GMT
            Not After : Mar  5 09:00:37 2026 GMT
        Subject: CN=25B51AAE19D7E6F51FC89F28416DB007FBAEB0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:99:71:9c:61:69:07:a5:5f:34:b3:99:0b:
                    18:30:9c:8f:a5:08:d6:94:86:38:7c:d5:d0:3e:6c:
                    88:cd:4d:66:ed:17:ca:3a:82:74:c3:44:0b:06:81:
                    83:6e:c1:28:31:ea:bd:4e:d5:82:d6:b2:73:82:c3:
                    5d:69:55:b0:63:67:7b:06:98:3d:f7:be:8e:a6:26:
                    f0:a4:cf:45:b6:93:c1:8e:c4:3f:b2:80:e9:55:49:
                    b2:2a:a3:82:a9:4f:1b:97:49:a6:bc:5f:16:19:b0:
                    b8:d3:1e:9a:00:76:33:87:6f:fc:86:8d:41:69:97:
                    37:86:d2:6a:da:95:87:52:4d:a0:f7:64:18:74:c5:
                    2c:78:55:d4:92:bf:c2:a4:12:1a:9b:91:91:b6:b7:
                    43:ad:12:ed:58:18:a5:af:e6:cb:eb:c9:dd:1b:0d:
                    ef:61:65:03:f4:62:dc:6b:05:7b:48:21:16:e2:7c:
                    bf:23:f4:61:05:f4:61:0b:92:b5:c0:f3:db:68:a0:
                    6b:25:0e:2d:34:4f:57:22:3f:cb:ea:f6:dd:22:cb:
                    a9:13:b1:34:34:b6:0c:7c:58:08:71:55:44:f0:dd:
                    f1:b9:ac:59:2e:82:b7:16:55:6d:64:70:a1:01:3a:
                    9b:b9:aa:c0:f8:cf:d0:1d:03:2f:ca:ad:7c:2c:0f:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:1A:AE:19:D7:E6:F5:1F:C8:9F:28:41:6D:B0:07:FB:AE:B0:C5
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:98:b2:65:e2:61:14:9a:f4:4e:b7:42:40:e9:18:90:29:7a:
         56:87:fa:6e:76:06:da:fe:f8:64:07:db:2f:a9:e9:31:31:b0:
         95:57:f1:81:56:c4:4e:4b:47:2a:69:1f:b1:a5:b5:fe:99:dd:
         be:e0:7a:50:b6:a4:ee:fa:3d:3d:20:54:41:eb:fc:d8:02:9f:
         fa:00:92:3b:22:ef:0a:31:60:2a:1c:c2:6b:8e:83:4e:e5:fc:
         c6:1f:ed:82:24:ba:a9:54:58:4d:9d:d0:4b:23:35:84:5a:0c:
         6e:68:94:c9:8a:61:4e:e7:00:6c:4f:14:4e:bd:68:81:60:1d:
         95:e6:ff:59:24:ec:23:72:6a:92:44:9b:7a:e2:a9:cb:ee:3e:
         2f:8d:22:24:53:e1:02:ea:dc:80:2c:ef:1c:67:06:ff:41:1a:
         3c:64:15:b2:5b:bb:8f:92:7e:d9:fa:ff:7f:ed:3f:1b:e2:2b:
         e2:25:3a:8f:8f:ab:c4:79:31:f7:34:3a:b9:0e:d8:32:52:e5:
         dd:e3:4d:17:d8:c5:4b:6e:5a:4a:1f:9f:26:f0:12:bd:32:a6:
         11:7f:a9:56:e3:8e:62:d4:f9:9f:7f:dc:26:31:99:77:c5:c8:
         84:50:45:7a:3f:74:1d:3c:b4:ae:75:82:b5:b5:30:7b:b1:ca:
         eb:a5:b9:0e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHPrED4evh+WmmyDaYLUkcyCZ+RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0NTVFRTI1QzZGRUIxNUExMjc4OUYxNUU5NzU0NzQy
ODlDRTgwMDAeFw0yNTAzMDYwODU1MzdaFw0yNjAzMDUwOTAwMzdaMDMxMTAvBgNV
BAMTKDI1QjUxQUFFMTlEN0U2RjUxRkM4OUYyODQxNkRCMDA3RkJBRUIwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgplxnGFpB6VfNLOZCxgwnI+l
CNaUhjh81dA+bIjNTWbtF8o6gnTDRAsGgYNuwSgx6r1O1YLWsnOCw11pVbBjZ3sG
mD33vo6mJvCkz0W2k8GOxD+ygOlVSbIqo4KpTxuXSaa8XxYZsLjTHpoAdjOHb/yG
jUFplzeG0mralYdSTaD3ZBh0xSx4VdSSv8KkEhqbkZG2t0OtEu1YGKWv5svryd0b
De9hZQP0YtxrBXtIIRbifL8j9GEF9GELkrXA89tooGslDi00T1ciP8vq9t0iy6kT
sTQ0tgx8WAhxVUTw3fG5rFkugrcWVW1kcKEBOpu5qsD4z9AdAy/KrXwsD0obAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJbUarhnX5vUfyJ8oQW2wB/uusMUwHwYDVR0j
BBgwFoAUpUVe4lxv6xWhJ4nxXpdUdCic6AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX
b2ovMi9BNTQ1NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDU1RUUyNUM2RkVCMTVB
MTI3ODlGMTVFOTc1NDc0Mjg5Q0U4MDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrMzR4ZzVBWWpObjF2U2ZaN3p3NEtyeXd6WkQ4djZZRTd5bzM0dktwV29qLzIv
MzEzNDMzMmUzMjM1MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//fDANBgkqhkiG9w0BAQsFAAOCAQEAOJiy
ZeJhFJr0TrdCQOkYkCl6Vof6bnYG2v74ZAfbL6npMTGwlVfxgVbETktHKmkfsaW1
/pndvuB6ULak7vo9PSBUQev82AKf+gCSOyLvCjFgKhzCa46DTuX8xh/tgiS6qVRY
TZ3QSyM1hFoMbmiUyYphTucAbE8UTr1ogWAdleb/WSTsI3JqkkSbeuKpy+4+L40i
JFPhAurcgCzvHGcG/0EaPGQVslu7j5J+2fr/f+0/G+Ir4iU6j4+rxHkx9zQ6uQ7Y
MlLl3eNNF9jFS25aSh+fJvASvTKmEX+pVuOOYtT5n3/cJjGZd8XIhFBFej90HTy0
rnWCtbUwe7HK66W5Dg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:20 2025 by rpki-client