Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
File:                     3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa (raw, json)
Hash identifier:          chFvUqDC6tgC166zl+6J0kC2KwKIVKv+PeH7SmEsaY8=
Subject key identifier:   93:BC:C1:11:13:18:CE:7C:AA:1B:B3:37:0A:C3:7C:37:07:0F:27:B0
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       595B397C0AE1EAC3555DF6037C9F6DBEB6252FAC
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa
Signing time:             Mon 03 Mar 2025 12:19:53 +0000
ROA not before:           Mon 03 Mar 2025 12:14:53 +0000
ROA not after:            Mon 02 Mar 2026 12:19:53 +0000
asID:                     264036
IP address blocks:        143.137.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:39:7c:0a:e1:ea:c3:55:5d:f6:03:7c:9f:6d:be:b6:25:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Mar  3 12:14:53 2025 GMT
            Not After : Mar  2 12:19:53 2026 GMT
        Subject: CN=93BCC1111318CE7CAA1BB3370AC37C37070F27B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:d8:4b:89:6c:2d:9d:06:90:a8:b5:32:65:
                    04:b9:06:12:08:42:4f:b1:58:b1:52:a6:9b:3c:57:
                    0c:0f:27:2c:ef:b9:0b:f5:3c:ee:17:b6:12:9e:1c:
                    2d:76:41:25:1e:df:36:d5:8a:ca:89:8c:fb:7e:f4:
                    71:76:4e:f3:a7:21:87:16:77:52:e4:31:67:9b:68:
                    2f:2d:e8:f9:b0:9e:d3:6e:ee:7e:19:9d:54:5b:e7:
                    46:e8:3d:ea:31:34:bc:0a:21:27:2d:60:d6:c5:3a:
                    ea:e3:28:d3:cf:a2:f2:fe:a0:de:ba:d4:23:53:4d:
                    de:52:11:cf:1a:41:2f:83:71:a2:55:39:5a:d3:d7:
                    19:9e:71:2c:f6:49:69:7d:c3:9c:d9:4b:4a:3e:1e:
                    77:dd:ac:37:80:92:be:29:dc:00:22:82:ac:66:a5:
                    e1:78:23:7d:8a:35:c3:be:39:67:4d:a6:58:42:ac:
                    0c:97:c1:1a:9a:27:ec:71:09:ed:f9:ea:19:7e:cd:
                    e6:17:d9:e2:76:4a:9b:b9:6b:7c:0b:92:a3:69:46:
                    52:dc:a0:58:29:5c:d9:cf:57:9a:f2:b2:dc:0b:78:
                    15:fc:4c:e5:d4:ee:d4:fd:26:b5:32:08:07:1b:e3:
                    ce:2c:45:bf:c2:6d:c5:0c:de:ff:57:b8:ba:9d:96:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:C1:11:13:18:CE:7C:AA:1B:B3:37:0A:C3:7C:37:07:0F:27:B0
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:8d:33:1e:20:92:58:08:5f:04:40:00:51:3e:cf:e1:52:
         e1:57:b0:e9:56:98:b9:21:5d:2b:19:5a:5a:d2:46:1c:88:91:
         0f:da:5f:9d:b9:b4:f7:a8:35:2f:c6:2f:3d:d3:9a:5a:3d:7b:
         45:92:8e:e9:36:51:ad:c5:7f:71:9a:0c:95:22:ed:e9:c3:4a:
         3c:3c:0c:e2:b3:3d:43:02:de:7e:ee:84:63:f6:87:fb:67:ac:
         c5:15:72:24:dd:c9:5b:9c:59:5d:ec:63:7f:41:c2:75:1b:d1:
         28:3a:6a:72:23:4e:83:70:a6:c8:ea:27:3e:d8:fc:35:95:07:
         03:ad:0e:e9:52:f5:18:95:b5:1e:fb:87:b7:8b:cc:54:07:b0:
         ed:49:8f:06:10:92:43:94:41:ed:b3:5c:31:84:7b:ae:79:e4:
         d4:6d:23:44:07:f4:f1:47:d4:be:6e:d3:fa:c0:e7:dc:19:57:
         bb:0a:54:cc:fb:a7:88:d1:32:6b:fc:3f:7d:a0:b7:d0:7f:6f:
         1a:e1:15:42:ee:af:71:79:f0:85:19:d9:d3:5d:d2:65:b8:ad:
         9f:2e:16:14:0d:08:30:98:4b:c4:00:2b:de:94:b1:ec:80:9e:
         fc:e0:f4:51:20:58:c3:8a:33:84:cd:11:25:64:4e:66:7e:93:
         80:14:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:20:28 2025 by rpki-client