Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
File:                     3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa (raw, json)
Hash identifier:          QRdvC885yYg9HszvNcA+1hvvDqUhHq/0APZ813IQInc=
Subject key identifier:   1B:41:60:C6:91:DD:48:AC:A3:B0:C4:E8:10:E6:47:B2:3E:4C:FF:73
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       67202D6F830F79EE5ABD6151A1487F6B1F053E76
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Thu 05 Mar 2026 19:00:00 +0000
asID:                     52863
IP address blocks:        143.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl
                          rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 11:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:20:2d:6f:83:0f:79:ee:5a:bd:61:51:a1:48:7f:6b:1f:05:3e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  5 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:ac:77:78:a9:ca:11:b3:54:10:09:42:40:
                    9b:94:e7:b4:e5:8e:44:42:a9:ac:10:bb:d0:80:36:
                    14:73:df:f5:bd:88:94:4b:7f:b6:9f:c1:23:30:96:
                    47:79:8b:3f:33:d4:b2:ba:52:05:66:2d:ce:3b:aa:
                    1d:a7:97:a7:53:31:67:bd:96:8a:26:f5:2d:ad:df:
                    9e:a4:2a:2c:d4:2c:9c:77:34:f6:8d:4a:dc:72:42:
                    aa:80:64:1b:6a:aa:1a:8b:b0:fb:26:8e:e5:e7:84:
                    3d:69:42:85:99:ac:a3:28:0d:77:e5:7a:05:db:37:
                    11:3c:66:52:7c:a0:57:4c:34:ec:c0:83:5b:4c:c4:
                    22:70:47:f9:95:aa:4a:b8:cf:5e:81:17:01:d3:2f:
                    a6:26:16:c2:16:7e:42:e8:68:e5:59:65:25:7d:5a:
                    98:dc:14:94:a6:13:23:e3:32:50:99:2a:4a:83:34:
                    49:e4:c6:32:d6:c9:ca:f8:5b:a4:0c:07:f2:10:ca:
                    d8:09:8b:0c:de:d3:1f:0e:af:4a:0a:98:48:eb:9b:
                    1f:d3:86:03:fd:ea:e4:a3:8d:a7:1f:ca:d6:23:df:
                    09:c6:49:6c:65:43:4e:3a:60:47:e2:e0:35:c2:f4:
                    a5:ad:ae:39:3c:e4:7b:67:21:d2:b7:dd:00:e7:26:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:41:60:C6:91:DD:48:AC:A3:B0:C4:E8:10:E6:47:B2:3E:4C:FF:73
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230302e302f32322d3234203d3e203532383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:38:59:19:e6:e6:f5:1d:6d:ac:9b:3e:4a:e7:8c:7f:74:bf:
         af:65:f8:cd:30:e0:10:cc:57:07:66:ca:6b:e1:10:7c:aa:b6:
         6d:73:d3:de:d3:b5:8d:23:48:0b:e6:4e:3b:b3:28:e4:f1:b3:
         a7:8b:c5:bc:ba:4e:e3:55:b0:1c:16:c4:b8:20:98:2c:23:de:
         83:00:90:d2:6d:a1:67:f5:8b:52:58:98:b2:cd:70:88:86:ce:
         69:9b:5f:4d:cd:d5:74:05:db:fd:69:47:1a:48:32:14:6d:08:
         89:9e:e0:05:61:e9:2c:0a:d6:83:e7:ef:32:5a:65:ad:06:40:
         73:ba:7e:27:19:e8:ed:f7:7c:2e:36:c9:0b:7c:2b:90:3b:07:
         9b:56:43:60:39:1f:d9:ba:a4:e6:97:db:50:04:8f:1e:dc:b9:
         36:30:4d:4b:ce:2e:eb:77:0a:f0:23:b1:5b:1c:14:0d:e4:ed:
         03:35:48:2b:db:c0:2f:23:e9:46:f4:8e:52:e8:be:6f:e3:e6:
         d9:74:5b:ea:0f:d2:77:50:5e:b3:14:95:1b:bb:93:9b:a1:d7:
         e6:81:7a:ed:f9:29:d5:dc:aa:cc:ad:3f:14:e0:3a:ae:16:b7:
         15:6a:bc:04:2e:64:7b:5b:fb:67:c2:99:d7:f2:71:10:7d:1a:
         c3:4d:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:28:14 2025 by rpki-client