Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa
File:                     3134332e3230322e35322e302f32322d3234203d3e203631373534.roa (raw, json)
Hash identifier:          azUKg9nBo9/Pv0lTAl5OPE6gD6gqM8i4okzPXaJc8hU=
Subject key identifier:   4D:E9:DC:4A:9C:55:6F:E7:EF:60:89:FA:F0:44:4B:B6:24:06:E4:D1
Certificate issuer:       /CN=B92001871A07D03B31A6C890436B41249FAC3A6E
Certificate serial:       45D318F237885524C1A3425E50CDE7E017A92236
Authority key identifier: B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa
Signing time:             Thu 06 Mar 2025 22:33:30 +0000
ROA not before:           Thu 06 Mar 2025 22:28:30 +0000
ROA not after:            Thu 05 Mar 2026 22:33:30 +0000
asID:                     61754
IP address blocks:        143.202.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 23:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d3:18:f2:37:88:55:24:c1:a3:42:5e:50:cd:e7:e0:17:a9:22:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92001871A07D03B31A6C890436B41249FAC3A6E
        Validity
            Not Before: Mar  6 22:28:30 2025 GMT
            Not After : Mar  5 22:33:30 2026 GMT
        Subject: CN=4DE9DC4A9C556FE7EF6089FAF0444BB62406E4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:3d:d0:1b:5c:f8:af:7a:d9:44:76:c2:24:
                    76:57:1a:fc:2f:ca:55:93:c9:f2:e3:89:9c:4f:46:
                    31:86:ca:7d:54:c4:b1:b8:17:ff:40:9f:26:bc:98:
                    57:01:6f:61:de:a8:ed:9f:e7:0b:0c:c0:b3:0d:cf:
                    24:2a:ae:9a:4e:6e:02:3d:89:11:aa:71:0f:7a:dd:
                    3d:69:e9:60:10:b6:27:a1:e9:a9:90:70:cd:cd:11:
                    44:29:87:6b:47:37:f7:03:37:cc:3c:ea:4e:78:94:
                    06:f2:67:e8:22:0d:9d:9a:38:3b:33:87:5e:d3:17:
                    b1:9e:87:e2:b4:06:6b:b1:72:fe:34:5d:82:10:2b:
                    eb:bd:6d:1b:85:b6:7c:a6:a3:f4:0f:f1:ed:96:04:
                    0b:38:10:52:dd:34:6a:e4:36:fb:05:8e:af:90:cc:
                    ab:f2:cc:88:ae:be:72:ae:c8:d3:8f:e7:ae:fc:3d:
                    ca:86:88:13:34:e1:2f:22:0d:b5:1f:dc:b3:eb:eb:
                    0c:3c:22:65:c8:95:b3:f9:34:67:ce:1f:cc:cd:4d:
                    4b:53:8f:a6:d1:d7:d4:d9:e0:90:be:3b:69:6f:e6:
                    1e:f1:6b:11:f5:71:4d:a0:86:f1:20:f6:4c:5d:c4:
                    ee:f3:26:39:47:13:1e:df:bd:34:b6:78:ac:7d:91:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:DC:4A:9C:55:6F:E7:EF:60:89:FA:F0:44:4B:B6:24:06:E4:D1
            X509v3 Authority Key Identifier:
                keyid:B9:20:01:87:1A:07:D0:3B:31:A6:C8:90:43:6B:41:24:9F:AC:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/B92001871A07D03B31A6C890436B41249FAC3A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92001871A07D03B31A6C890436B41249FAC3A6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/1/3134332e3230322e35322e302f32322d3234203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:f8:a9:a6:7b:52:76:3f:11:11:99:07:32:8f:3c:85:86:
         ac:4d:27:d7:cb:1f:54:ca:72:36:1f:fa:a6:22:d6:c5:33:72:
         dc:cc:a4:46:f9:1d:6d:06:38:eb:cf:f2:03:bd:71:37:63:12:
         33:b2:fd:f7:87:71:0f:03:f7:3a:42:18:ac:5e:e5:19:41:c2:
         2a:1d:1c:42:dd:58:8b:8f:d0:d0:5c:e0:01:28:6d:26:f7:97:
         ea:fe:c1:eb:d6:d1:da:a2:7a:ae:10:83:4b:35:83:20:de:41:
         20:2a:82:fc:a3:93:1e:14:a2:14:a6:6b:de:bd:62:1f:54:8d:
         d6:65:71:e5:9c:64:e2:3b:f0:bf:c8:ad:ba:b9:bb:2d:2c:40:
         74:67:dc:a4:1a:24:67:24:72:3e:30:f9:6c:23:86:72:4a:f8:
         1a:60:cb:0d:a5:65:2a:3f:0c:b8:7a:d7:20:d2:dd:34:a8:f1:
         80:14:56:8e:6e:81:52:0a:09:4c:df:d0:9c:ad:f5:b8:dd:9c:
         94:2c:52:04:40:61:57:4c:f9:a6:bf:22:8c:fc:75:05:4b:66:
         aa:cd:3b:7f:b8:34:34:fd:e5:26:49:49:2b:1c:78:d4:92:4b:
         d2:49:6e:87:a3:92:91:04:7b:b7:31:d2:d1:e7:91:65:54:83:
         d3:0e:00:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:58 2025 by rpki-client