Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32332d3233203d3e20323634303838.roa
File:                     3134332e3230382e342e302f32332d3233203d3e20323634303838.roa (raw, json)
Hash identifier:          A87SjTkNiYNkhkeXAgkm9fRRUZsLBHycuvuPYXpQ4vU=
Subject key identifier:   F5:65:19:71:E0:8D:8B:92:27:AE:CF:50:AB:04:70:0C:32:3A:1D:74
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       72315B5CA50845EF649454F9DFE4410738A82704
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32332d3233203d3e20323634303838.roa
Signing time:             Fri 25 Apr 2025 14:50:38 +0000
ROA not before:           Fri 25 Apr 2025 14:45:38 +0000
ROA not after:            Fri 24 Apr 2026 14:50:38 +0000
asID:                     264088
IP address blocks:        143.208.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 23:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:31:5b:5c:a5:08:45:ef:64:94:54:f9:df:e4:41:07:38:a8:27:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:38 2025 GMT
            Not After : Apr 24 14:50:38 2026 GMT
        Subject: CN=F5651971E08D8B9227AECF50AB04700C323A1D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:dc:68:10:91:f5:c1:ac:fb:e3:79:4d:1f:
                    4d:7d:b5:b0:0d:6f:ca:12:b4:d3:8e:d7:1f:4e:1a:
                    04:7f:af:d9:6e:21:7f:e0:c8:20:b0:96:fb:5a:05:
                    0a:53:f0:76:58:ba:33:17:72:f9:25:a4:55:0a:a5:
                    43:c2:67:be:53:9e:7c:91:53:27:29:a7:cc:26:90:
                    53:98:a9:74:d0:5e:21:93:12:b3:af:ea:da:fd:ea:
                    a9:7f:40:be:31:19:b5:9e:69:7a:7f:38:ea:80:f2:
                    5b:72:ba:26:e3:01:e5:7b:41:3f:52:b1:28:3e:7e:
                    1e:67:fb:eb:a3:a9:e3:0c:fa:68:64:a3:19:9d:9b:
                    63:95:c9:9f:7f:f9:ce:b1:f1:77:2f:de:dd:52:98:
                    ef:d8:a1:ad:54:6d:02:c8:62:0b:51:0b:5f:46:55:
                    af:4c:2c:40:72:40:c9:b3:df:f9:3c:6d:1c:81:01:
                    03:60:0f:8f:33:99:59:39:61:45:58:d9:01:55:ca:
                    7f:04:19:dd:e2:fa:f0:28:8b:c0:e3:dd:64:ae:ad:
                    05:e4:e9:7e:a4:fc:94:19:97:1b:84:f9:c1:d5:28:
                    9e:5c:9f:c6:e4:13:7f:f6:16:ea:d6:e1:3d:1c:52:
                    95:96:f6:b7:df:55:67:97:18:d8:b2:80:8d:71:85:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:65:19:71:E0:8D:8B:92:27:AE:CF:50:AB:04:70:0C:32:3A:1D:74
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32332d3233203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:38:15:d2:fc:e3:94:c6:a2:ef:7b:68:c2:14:27:71:88:0c:
         d4:71:ea:ed:46:37:58:a0:23:86:50:4e:4e:13:58:e1:c2:ba:
         f9:3c:df:1f:f3:fd:c3:f5:03:ac:3e:d0:55:85:46:59:20:67:
         53:62:76:22:9a:68:d9:db:90:5d:be:bc:01:be:21:6f:1a:01:
         5c:8f:bd:89:cc:0f:24:3f:91:ab:31:4a:71:7c:d3:3f:36:9d:
         86:9c:a4:e4:28:70:f4:88:4d:de:b6:74:05:38:07:0e:03:89:
         d5:43:7e:89:4b:69:1d:24:31:a7:3c:7d:74:b6:bd:89:b4:58:
         65:ce:02:1b:63:f8:50:b7:0b:1f:e5:58:73:9e:e4:01:88:2a:
         21:5f:83:30:ad:ed:dc:d3:0a:e4:29:41:a9:53:fb:9f:a7:de:
         7b:83:48:4f:d9:c4:48:ac:36:08:43:9f:be:5a:04:bb:4f:77:
         f3:11:8a:0b:de:5c:ae:fe:ef:35:57:c4:d9:c7:ad:ac:f7:73:
         c8:35:11:db:22:f1:cb:29:de:51:c3:f3:2c:f9:d5:2a:1f:e7:
         ba:6e:62:87:35:c9:0c:b1:38:5b:19:d4:cc:51:0d:f3:ee:b6:
         80:34:69:5e:6f:64:f9:ca:ff:35:bb:a4:48:37:db:ba:f0:2d:
         eb:54:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:36 2025 by rpki-client