Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa
File:                     3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa (raw, json)
Hash identifier:          milfsChlSce8Ty8Wmc9/1dVm/gyI51KCbUZSvP5Qkrg=
Subject key identifier:   D5:FF:8D:F1:FC:84:95:60:68:5B:76:97:4B:CF:70:09:F6:77:4F:7E
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       4CC6F21F9CAFD85D733633C1C2FCD812B007EA5D
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa
Signing time:             Mon 03 Mar 2025 12:19:53 +0000
ROA not before:           Mon 03 Mar 2025 12:14:53 +0000
ROA not after:            Mon 02 Mar 2026 12:19:53 +0000
asID:                     264036
IP address blocks:        143.137.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c6:f2:1f:9c:af:d8:5d:73:36:33:c1:c2:fc:d8:12:b0:07:ea:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Mar  3 12:14:53 2025 GMT
            Not After : Mar  2 12:19:53 2026 GMT
        Subject: CN=D5FF8DF1FC849560685B76974BCF7009F6774F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:fd:af:c5:12:b0:90:d6:ba:b0:08:52:9f:
                    9f:61:95:30:a3:d1:9d:16:b3:cf:6b:86:4b:f3:b3:
                    d6:33:92:61:3e:b5:be:5a:c9:b0:13:ac:5b:c0:78:
                    c1:ac:20:31:15:02:46:68:b1:8e:20:54:fe:97:4c:
                    e8:f8:0b:0e:64:52:9e:8f:b7:05:34:1b:dd:9b:01:
                    61:63:5c:46:56:66:8e:3c:76:b5:62:6e:e0:03:98:
                    0e:11:96:62:6e:31:18:e1:80:bf:f2:31:aa:b5:a5:
                    68:c2:10:29:a9:eb:4a:be:a6:94:b9:92:16:86:84:
                    3d:d8:17:94:2c:4b:19:09:61:71:67:2c:f0:e2:1f:
                    1c:23:bc:e8:3d:c1:f1:15:0a:af:71:ad:8d:60:52:
                    a4:9b:fe:4f:27:24:1e:05:fc:b3:e4:f4:eb:48:5d:
                    ef:44:ef:71:01:ac:38:71:60:46:68:49:e9:d7:85:
                    56:f1:f7:fc:b8:90:5a:2b:2e:5e:9b:cd:83:3d:e4:
                    4a:ec:ec:6d:8f:c4:4e:89:87:fc:74:a6:d1:0c:6c:
                    cd:8c:ab:01:61:fb:7e:ee:56:db:c7:bc:61:47:93:
                    ea:bb:27:e2:96:4f:41:ce:69:02:df:dd:ca:5c:b0:
                    e7:10:8c:b0:b5:39:92:58:e5:cb:88:b7:24:02:01:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:8D:F1:FC:84:95:60:68:5B:76:97:4B:CF:70:09:F6:77:4F:7E
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:97:9c:07:ee:fb:0c:60:39:f8:aa:c3:3a:aa:a8:96:ec:a6:
         0e:a3:3d:e3:fe:57:60:7e:01:c8:89:2c:64:11:53:11:9c:92:
         d2:4c:8d:43:06:d1:1a:79:cf:fc:8e:7b:21:29:56:de:e3:88:
         8f:14:56:50:82:d1:5e:f2:34:ea:ad:6c:87:50:4d:5b:10:93:
         e2:b8:03:e8:94:d3:60:50:f5:8b:8e:e7:92:de:07:ad:9a:16:
         6a:40:c7:18:c0:28:80:3d:b2:ef:3a:18:0e:21:e1:40:6b:47:
         93:d1:4a:8c:c9:f4:ec:a6:b0:85:c2:b2:ba:ff:c2:25:f9:ca:
         fe:9e:ab:c4:18:cb:50:0e:e6:ef:62:5f:2d:fa:25:3d:3f:1a:
         60:27:3f:a9:2f:64:a8:59:3b:2d:f4:31:3a:f5:00:b2:db:f7:
         1a:f3:bc:f6:4b:55:0e:78:a9:40:6c:46:b9:db:a5:97:fa:28:
         ec:91:dc:60:fd:0e:25:72:3a:68:e1:1a:f9:31:94:e8:d5:52:
         69:3e:3a:a8:1d:3c:fa:44:48:80:be:95:b6:87:24:57:8a:be:
         a7:97:34:0d:7d:18:b9:fe:6a:94:cf:ae:7b:29:db:56:22:54:
         43:6f:44:92:74:70:09:1d:56:79:8c:76:53:b4:78:e8:5f:e2:
         e6:d8:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:52:23 2025 by rpki-client