Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31382e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          DpEUWkGRsxqvTvw4U4a6mIP8ODEKCRvXXSYQUokxBAQ=
Subject key identifier:   A9:28:01:E2:E6:9C:A8:09:E8:FD:51:3B:6E:B9:95:7D:CF:BC:38:99
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       11FD18644CA30DC85207AE0CEAFF9AC4F6301F10
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 05 Mar 2025 21:16:10 +0000
ROA not before:           Wed 05 Mar 2025 21:11:10 +0000
ROA not after:            Wed 04 Mar 2026 21:16:10 +0000
asID:                     52916
IP address blocks:        143.255.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fd:18:64:4c:a3:0d:c8:52:07:ae:0c:ea:ff:9a:c4:f6:30:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Mar  5 21:11:10 2025 GMT
            Not After : Mar  4 21:16:10 2026 GMT
        Subject: CN=A92801E2E69CA809E8FD513B6EB9957DCFBC3899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:45:25:4a:99:75:f8:89:d2:c4:d0:ee:3c:74:
                    43:c9:9d:23:53:44:7e:97:1f:e9:2f:68:60:0b:44:
                    b4:6b:33:56:c3:93:e6:58:a8:c4:a9:95:64:e7:fc:
                    1d:04:a1:b0:7f:24:39:ed:44:1a:39:57:61:70:5b:
                    3c:f5:cb:f4:ff:cd:97:20:61:b4:c4:19:27:7f:44:
                    c3:74:ed:f3:0f:5f:88:13:a8:89:6a:e3:e1:91:58:
                    af:17:1d:73:85:69:b8:98:79:c3:6a:0a:7a:df:d9:
                    11:b5:2a:fa:a5:ae:9b:ac:db:60:9b:27:92:15:16:
                    9c:9c:a4:26:90:be:89:18:f6:d0:2c:e1:c8:e3:6f:
                    22:b1:91:e6:cb:97:01:7f:60:e7:9d:16:01:d1:f8:
                    50:dd:cb:14:e4:6b:97:be:a3:4b:f0:fe:70:52:f9:
                    dc:96:06:51:07:fe:c2:80:e9:b5:57:81:5a:c3:1f:
                    f3:91:44:ef:ef:ab:4b:13:fe:4b:6e:17:58:06:60:
                    32:05:63:10:c5:ac:1d:b5:16:d7:60:4a:77:53:65:
                    59:f6:8a:bc:c3:b2:c9:a2:2a:58:40:4d:c4:d4:53:
                    0e:6a:ec:6a:37:69:90:55:4d:87:d0:22:8f:d9:ed:
                    a9:d7:e6:34:08:27:f3:e0:d5:a1:b1:d3:03:a2:53:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:28:01:E2:E6:9C:A8:09:E8:FD:51:3B:6E:B9:95:7D:CF:BC:38:99
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31382e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:95:1e:13:12:d4:c6:c9:a7:ff:f8:03:f8:0c:ec:0e:d7:aa:
         3a:25:60:ff:2f:54:fd:cd:93:b2:1b:11:23:7e:fa:bf:c8:9d:
         b4:79:2e:67:52:78:b2:31:73:2e:ae:65:96:12:7c:dd:e9:9b:
         d0:49:4f:59:ca:2b:3c:36:13:5b:c2:a7:29:82:bf:8c:33:27:
         f5:a3:de:9a:3f:dd:fd:17:ea:4c:07:8a:e9:f1:6a:b0:2a:72:
         fe:86:7c:d5:f3:32:aa:b5:e8:5b:16:2d:2e:2f:d0:11:ec:d5:
         06:e8:7d:59:f7:cd:24:bd:13:04:21:b9:60:04:98:a1:55:60:
         24:bf:4a:b7:d7:bb:9f:6f:70:b1:3c:7b:a4:0b:bb:22:53:5b:
         67:8b:a0:65:3d:5f:97:51:2e:95:05:e6:d2:9c:4f:a0:35:43:
         97:bd:c9:85:a1:88:96:22:7e:d7:78:3e:95:66:b3:a1:75:69:
         28:db:d2:f8:58:bf:1d:8b:9c:f8:86:58:01:6c:10:7e:fe:97:
         90:b1:8c:18:f7:7f:be:1a:f0:e4:7d:c7:fe:54:db:6f:31:c9:
         37:5d:ff:aa:9d:8b:71:6f:a2:1d:5e:4f:12:94:30:15:3a:c2:
         c8:53:c0:ac:89:12:a0:b4:60:12:73:93:1b:fb:57:f6:fc:cd:
         b9:d4:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:01 2025 by rpki-client