Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134332e302f32342d3234203d3e20323634303039.roa
File:                     3134332e302e3134332e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          mEuK5L8cqAFP2ipXml/u6wiIus3ycpeZ8oNcV0ag2qo=
Subject key identifier:   B1:27:70:D1:71:CB:46:90:D9:C7:EA:ED:65:38:68:2F:88:A6:F7:7B
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       5F3A0E5ED43CB78CBADEAAEBE5162A6DD791A666
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134332e302f32342d3234203d3e20323634303039.roa
Signing time:             Fri 25 Apr 2025 19:26:55 +0000
ROA not before:           Fri 25 Apr 2025 19:21:55 +0000
ROA not after:            Fri 24 Apr 2026 19:26:55 +0000
asID:                     264009
IP address blocks:        143.0.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 10:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3a:0e:5e:d4:3c:b7:8c:ba:de:aa:eb:e5:16:2a:6d:d7:91:a6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Apr 25 19:21:55 2025 GMT
            Not After : Apr 24 19:26:55 2026 GMT
        Subject: CN=B12770D171CB4690D9C7EAED6538682F88A6F77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:aa:72:76:8c:1b:9d:f7:e0:9b:a7:62:11:
                    5c:b2:12:ee:b1:bb:07:7e:17:39:8d:34:4c:19:36:
                    a9:22:79:3c:81:bd:47:f8:ce:ef:6f:e0:88:8f:72:
                    0e:f3:59:46:22:b8:84:cd:34:0d:76:25:b5:40:2b:
                    37:66:a3:d0:1a:d1:3f:43:d8:05:db:a6:7a:cc:e2:
                    c9:8d:04:9a:b4:59:a9:8c:72:75:ce:2c:e2:90:25:
                    15:e9:4a:f9:d5:2c:18:92:e0:00:f0:63:c5:e8:1d:
                    0e:6b:fe:00:52:02:4c:2c:52:f8:17:92:a2:e3:b4:
                    09:1e:bd:58:62:bd:4e:d7:6f:a5:d4:16:fa:c4:5d:
                    3a:44:30:5f:49:53:c2:5c:49:7c:7d:99:e5:3c:19:
                    6b:0e:f2:e4:13:9e:78:d9:6d:8c:10:af:3c:14:26:
                    c7:c9:65:bf:cf:a1:01:84:e5:5c:33:30:82:e4:2d:
                    53:60:01:f0:5b:7f:69:84:2e:72:63:21:59:11:bb:
                    2b:c5:0b:6e:65:1d:44:6c:93:53:37:ad:e0:54:01:
                    92:41:9a:1b:ed:87:a5:ce:5a:f8:69:05:8d:7b:fc:
                    1f:4f:fb:63:62:a4:68:71:fd:d4:f4:81:fa:b3:af:
                    7d:58:c7:d4:33:99:1d:c2:fa:e0:f2:aa:ea:e2:2d:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:27:70:D1:71:CB:46:90:D9:C7:EA:ED:65:38:68:2F:88:A6:F7:7B
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134332e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:bd:df:05:81:00:16:05:fe:23:cd:4f:2a:77:7a:f7:b1:
         65:5f:54:47:c4:72:fe:54:9c:68:7e:18:cd:10:d5:1a:72:55:
         9d:7f:5c:d1:1e:eb:f9:19:6c:c4:5d:d8:16:bc:3d:c1:4b:cb:
         ce:97:a5:d4:3d:e4:b6:e9:00:10:da:ba:83:d5:e5:bc:7b:79:
         40:ca:c8:d7:16:1f:0e:89:20:ea:4a:a7:2e:10:ca:b9:8b:44:
         26:74:b6:89:3d:fc:96:43:b3:d8:63:c4:d4:94:4b:da:35:ef:
         89:70:2e:f5:d6:58:f4:ae:17:2b:d1:52:79:d7:e1:53:ce:e6:
         6f:15:2a:1a:24:1f:d4:13:b9:12:88:13:be:8c:4d:64:73:6c:
         e1:ff:46:31:90:6e:1b:ee:7b:e9:88:7c:a4:a7:f1:09:25:8e:
         84:ad:7c:0e:89:e1:a7:19:cc:05:65:e1:60:51:5e:29:71:7a:
         ac:a1:b4:fa:f9:cf:7c:e6:75:24:49:98:4a:22:7e:e9:77:9d:
         b8:69:38:79:ef:03:71:3e:db:3e:3d:3d:e1:4e:48:f7:3d:8c:
         6f:70:68:d6:91:e1:5e:1e:84:0c:3e:6f:41:db:a6:43:1f:81:
         37:20:b3:ed:9b:d2:e7:90:39:7d:3b:93:45:d1:31:64:3f:e9:
         ed:c7:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:01:56 2025 by rpki-client