Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa
File:                     3134332e3230382e352e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          JjHC11b09cE3OYo3oBz+6cQoeRntFYhl33e1LFV/CVQ=
Subject key identifier:   32:2D:00:1B:10:A5:55:0F:5E:3D:E4:F8:97:74:E9:E6:58:CE:0E:A9
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       7DEAA0E21DC4F771FA54DED7C85657A72180F35F
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa
Signing time:             Fri 25 Apr 2025 14:50:41 +0000
ROA not before:           Fri 25 Apr 2025 14:45:41 +0000
ROA not after:            Fri 24 Apr 2026 14:50:41 +0000
asID:                     264088
IP address blocks:        143.208.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 11:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ea:a0:e2:1d:c4:f7:71:fa:54:de:d7:c8:56:57:a7:21:80:f3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:41 2025 GMT
            Not After : Apr 24 14:50:41 2026 GMT
        Subject: CN=322D001B10A5550F5E3DE4F89774E9E658CE0EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:01:24:60:55:b2:36:ef:e8:30:ba:27:f4:
                    87:2a:a4:ca:cd:4a:fb:f4:69:2a:3b:bd:19:a4:ed:
                    32:ca:ab:61:c9:75:03:63:9a:59:1d:3c:5c:dc:90:
                    46:6b:ee:82:83:75:2f:86:55:7e:ad:74:b9:7b:77:
                    73:0d:a5:72:8a:04:11:a9:c1:eb:60:6c:c5:48:6e:
                    b9:f2:98:34:cb:e8:96:5f:3b:aa:07:3f:32:41:c3:
                    6a:a0:2e:b9:ad:e7:f4:c1:b3:cf:bd:ed:fb:9f:66:
                    8c:1a:9b:71:ec:82:78:ae:e2:49:4d:65:94:4a:43:
                    86:8e:37:cd:eb:7d:91:49:55:af:4e:be:58:c7:a7:
                    4c:69:9a:94:cb:20:b6:42:7f:7f:f8:9d:0d:30:5c:
                    e0:76:82:d7:80:ab:87:5c:9b:a7:5a:c0:d5:9b:12:
                    1a:01:e2:1b:9a:75:e3:ee:6e:ff:96:ab:b9:7d:90:
                    b1:3f:79:09:72:41:09:e6:09:12:e5:43:00:4a:89:
                    c2:89:e5:0e:30:c2:c6:e9:dc:a5:97:6b:4a:a4:77:
                    cc:12:2b:89:97:23:35:45:0a:39:cf:fe:81:6e:b8:
                    a6:c2:49:df:96:c9:62:8c:05:f4:6c:88:5a:99:7a:
                    38:b6:86:86:6b:8f:46:29:42:9c:42:1b:0c:66:1b:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:00:1B:10:A5:55:0F:5E:3D:E4:F8:97:74:E9:E6:58:CE:0E:A9
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:78:42:2d:dc:58:50:e0:e0:66:17:ca:6b:00:fa:22:c5:28:
         54:51:a4:c9:67:37:55:2a:b1:fd:57:57:69:b3:98:94:47:05:
         b0:d9:a0:36:35:cf:87:53:52:3b:e6:90:1d:95:fa:1a:f2:4d:
         a2:86:a3:80:cd:b8:56:2c:89:06:fe:83:71:ba:b0:0f:d3:8c:
         53:a4:29:10:2c:9c:1d:5d:85:24:82:82:d4:63:7e:77:74:19:
         06:c0:de:84:ae:ec:79:c6:e3:e5:3b:b7:f6:2b:0a:51:78:d3:
         83:7b:04:e2:e8:14:44:88:30:ba:b8:b7:9d:32:ba:22:21:34:
         81:86:86:f0:f6:83:85:55:7f:cd:b0:cc:b4:e7:b0:fa:30:2e:
         39:92:1e:5a:fe:be:a4:02:b4:ca:ba:dd:fe:4c:47:0e:65:c3:
         16:81:bd:c8:74:6c:4f:6a:98:26:f2:ef:b4:6d:2c:3d:2a:07:
         ec:f9:95:e4:b3:d0:6b:1e:88:00:da:d1:d2:4b:43:51:7f:82:
         0f:8b:92:51:60:b9:09:39:f2:b9:01:bf:2b:11:f2:ed:ee:00:
         4e:cf:97:b5:aa:5b:ba:d8:f7:0e:a1:ff:42:a8:e0:0a:57:53:
         91:d5:1a:8c:87:ec:21:e3:dc:76:57:02:dd:ab:b0:f5:e6:db:
         42:ae:46:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfeqg4h3E93H6VN7XyFZXpyGA818wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNGMTcyQjRDNjkyQUFBOTU4QTkzRjBDN0Q1NzdBNUFF
OEQ3MDgyRjAeFw0yNTA0MjUxNDQ1NDFaFw0yNjA0MjQxNDUwNDFaMDMxMTAvBgNV
BAMTKDMyMkQwMDFCMTBBNTU1MEY1RTNERTRGODk3NzRFOUU2NThDRTBFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOAEkYFWyNu/oMLon9IcqpMrN
Svv0aSo7vRmk7TLKq2HJdQNjmlkdPFzckEZr7oKDdS+GVX6tdLl7d3MNpXKKBBGp
wetgbMVIbrnymDTL6JZfO6oHPzJBw2qgLrmt5/TBs8+97fufZowam3Hsgniu4klN
ZZRKQ4aON83rfZFJVa9OvljHp0xpmpTLILZCf3/4nQ0wXOB2gteAq4dcm6dawNWb
EhoB4huadePubv+Wq7l9kLE/eQlyQQnmCRLlQwBKicKJ5Q4wwsbp3KWXa0qkd8wS
K4mXIzVFCjnP/oFuuKbCSd+WyWKMBfRsiFqZeji2hoZrj0YpQpxCGwxmGwpdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMi0AGxClVQ9ePeT4l3Tp5ljODqkwHwYDVR0j
BBgwFoAU4/FytMaSqqlYqT8MfVd6WujXCC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJSelB1MjNaM2FkSkM5ZHF2ZVdLc2pSaHVyVnpXem1iNEphQm9BQlhZ
cWUvMC9FM0YxNzJCNEM2OTJBQUE5NThBOTNGMEM3RDU3N0E1QUU4RDcwODJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzRjE3MkI0QzY5MkFBQTk1
OEE5M0YwQzdENTc3QTVBRThENzA4MkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSUnpQdTIzWjNhZEpDOWRxdmVXS3NqUmh1clZ6V3ptYjRKYUJvQUJYWXFlLzAv
MzEzNDMzMmUzMjMwMzgyZTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj9AFMA0GCSqGSIb3DQEBCwUAA4IBAQAGeEIt3FhQ
4OBmF8prAPoixShUUaTJZzdVKrH9V1dps5iURwWw2aA2Nc+HU1I75pAdlfoa8k2i
hqOAzbhWLIkG/oNxurAP04xTpCkQLJwdXYUkgoLUY353dBkGwN6Erux5xuPlO7f2
KwpReNODewTi6BREiDC6uLedMroiITSBhobw9oOFVX/NsMy057D6MC45kh5a/r6k
ArTKut3+TEcOZcMWgb3IdGxPapgm8u+0bSw9Kgfs+ZXks9BrHogA2tHSS0NRf4IP
i5JRYLkJOfK5Ab8rEfLt7gBOz5e1qlu62PcOof9CqOAKV1OR1RqMh+wh49x2VwLd
q7D15ttCrkab
-----END CERTIFICATE-----
Generated at Sat May 3 18:34:06 2025 by rpki-client