Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (raw, json)
Hash identifier:          +P2QZO0Wb8NsjyeDXMlGqXcelYO0EBe/w+d+dtWlSzQ=
Subject key identifier:   44:EA:5C:56:7F:93:BC:47:B4:F3:53:EC:D7:1C:4F:7E:26:FC:C8:B5
Certificate issuer:       /CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
Certificate serial:       21DD91E9DEAC1AF3C9851C63C46AEF23A155375A
Authority key identifier: 44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa
Signing time:             Sat 21 Jun 2025 23:48:59 +0000
ROA not before:           Sat 21 Jun 2025 23:43:59 +0000
ROA not after:            Sat 20 Jun 2026 23:48:59 +0000
asID:                     264011
IP address blocks:        143.0.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 21:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:91:e9:de:ac:1a:f3:c9:85:1c:63:c4:6a:ef:23:a1:55:37:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443BA13DE0ABBA767490BA2BABF46C62BC39424A
        Validity
            Not Before: Jun 21 23:43:59 2025 GMT
            Not After : Jun 20 23:48:59 2026 GMT
        Subject: CN=44EA5C567F93BC47B4F353ECD71C4F7E26FCC8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7f:d8:d1:d8:e8:82:f4:81:98:7b:6e:ac:eb:
                    ce:9b:26:ad:7c:74:55:7f:0a:57:01:48:95:c3:79:
                    a4:8e:a7:f3:65:ab:5e:a0:26:62:96:d8:ab:fe:6e:
                    67:f3:6e:d8:29:b8:ce:94:f3:92:1e:40:55:a2:6e:
                    d1:8f:2a:90:1a:7a:27:f6:bf:33:28:78:13:bf:71:
                    60:d8:46:86:f5:16:54:a7:ef:64:37:4e:8d:f8:7e:
                    1d:8d:23:1a:d3:7f:95:db:eb:e4:00:ca:07:bf:bd:
                    0b:08:57:3b:5f:ef:dd:53:9c:12:b1:26:f3:94:23:
                    6d:4c:64:4a:21:a0:52:af:35:49:5d:81:e8:51:62:
                    af:13:e8:af:8d:21:f1:46:5a:eb:c2:95:d7:44:02:
                    fb:8a:30:40:68:a4:e6:bf:82:5b:e5:33:80:33:a1:
                    6d:b6:34:d9:41:53:0d:03:e0:ed:ac:a6:0a:34:3a:
                    28:56:10:ce:28:06:f7:c2:60:61:32:c1:12:a9:4a:
                    5a:c5:ee:4d:e4:e8:f3:7e:fb:a5:1a:a4:a9:5e:ff:
                    1e:84:07:73:5b:55:fe:2b:fb:b6:f1:08:5c:ba:6d:
                    de:31:19:ce:14:3b:c9:27:6f:c0:25:d8:6a:da:4a:
                    bd:11:30:18:99:7f:3e:ab:53:cb:56:8a:4c:92:9f:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:5C:56:7F:93:BC:47:B4:F3:53:EC:D7:1C:4F:7E:26:FC:C8:B5
            X509v3 Authority Key Identifier:
                keyid:44:3B:A1:3D:E0:AB:BA:76:74:90:BA:2B:AB:F4:6C:62:BC:39:42:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/443BA13DE0ABBA767490BA2BABF46C62BC39424A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443BA13DE0ABBA767490BA2BABF46C62BC39424A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:fb:9f:98:77:59:be:80:4e:e8:9e:72:0d:91:b2:33:62:
         30:1c:c4:db:d2:a4:fa:b2:cb:e6:12:22:10:cb:de:40:56:df:
         f3:aa:20:46:ff:44:6d:a9:bb:fc:e1:7e:3e:a7:58:13:0a:f0:
         9f:e2:5a:4a:f2:9f:a9:a0:c7:03:35:dc:3c:05:3b:79:c0:61:
         4d:c8:93:5c:79:70:5e:17:95:7d:f8:3e:ff:d0:2b:15:20:4b:
         24:5f:db:a7:4c:c2:f3:9c:ca:cc:cb:fa:5a:55:b1:62:98:8c:
         d4:c9:c9:53:17:e1:42:b2:d3:77:91:ad:cf:2b:40:5c:0d:de:
         ed:5e:c1:9e:64:c0:d9:b7:fa:cf:21:bd:47:d3:a3:ab:63:f1:
         2a:12:d1:7f:fe:32:77:1e:b1:9c:86:44:0c:5d:0f:49:24:78:
         b1:33:4b:8f:92:f3:9a:95:9b:1a:af:b6:bd:28:27:dc:4b:f2:
         0b:53:a1:4b:43:ed:94:00:a8:6c:40:91:77:4d:a7:c8:cb:dd:
         95:ad:64:63:ce:ec:11:1b:2d:08:02:c5:b1:8e:e3:ee:5d:0d:
         b2:6a:73:b6:f3:e9:63:22:91:ba:3e:7c:03:da:e8:3f:27:b7:
         89:4d:b4:1f:ec:02:b1:7f:48:2a:5a:44:f7:18:8d:59:d3:de:
         1a:1d:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 10:10:45 2025 by rpki-client