Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa
File:                     3134332e302e342e302f32322d3332203d3e20323634343238.roa (raw, json)
Hash identifier:          UiGt78b5HXPaEBzl1pxgQuJWZuZqwimP/wzyBo7gWNM=
Subject key identifier:   8F:16:73:66:5A:20:8D:FD:DE:2D:29:5C:A4:04:D8:78:55:D1:BD:28
Certificate issuer:       /CN=46FD62111CFE62986F4EDE8B04CEB71789F3CB20
Certificate serial:       4C3CCD3288B9DE2F1955137A9B1A436E8E504224
Authority key identifier: 46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa
Signing time:             Thu 17 Jul 2025 19:37:37 +0000
ROA not before:           Thu 17 Jul 2025 19:32:37 +0000
ROA not after:            Thu 16 Jul 2026 19:37:37 +0000
asID:                     264428
IP address blocks:        143.0.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.crl
                          rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 05:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3c:cd:32:88:b9:de:2f:19:55:13:7a:9b:1a:43:6e:8e:50:42:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46FD62111CFE62986F4EDE8B04CEB71789F3CB20
        Validity
            Not Before: Jul 17 19:32:37 2025 GMT
            Not After : Jul 16 19:37:37 2026 GMT
        Subject: CN=8F1673665A208DFDDE2D295CA404D87855D1BD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:a3:53:5f:ba:a5:48:f4:89:fd:8e:38:b8:
                    20:4f:6d:98:97:4f:78:1b:66:3f:04:4d:03:51:ce:
                    51:8b:47:3b:7a:50:ec:71:bf:a5:fe:c8:c8:bf:c9:
                    0f:c9:c4:71:35:84:30:37:16:6a:2f:75:28:53:e5:
                    c2:d6:19:d0:35:9e:89:5a:19:86:6d:63:7b:44:ff:
                    c5:6e:dc:9a:58:3a:dc:ce:3a:3d:42:4f:5d:b1:21:
                    dd:55:c6:f2:1a:51:f1:66:ca:ba:f5:0d:0e:64:39:
                    63:32:19:e2:6e:cf:b4:a6:5c:da:d9:bf:75:6b:b2:
                    2f:ec:52:6d:1c:67:02:95:79:20:64:9f:71:5f:07:
                    a1:5f:a4:5c:64:6e:ac:66:2e:55:ea:dc:df:74:bd:
                    91:6e:94:25:c4:fe:03:5d:89:33:b3:1e:87:7e:bf:
                    25:35:2a:f1:ea:3c:41:b1:26:d4:55:5e:cf:29:68:
                    e8:db:96:a5:6f:ed:75:9c:f1:58:af:fb:f4:80:02:
                    db:d4:69:ef:04:80:6f:14:14:e1:3c:39:78:31:5e:
                    f3:34:bf:3f:04:81:27:48:81:d6:16:e8:c2:da:93:
                    db:1e:0f:cd:41:ae:9b:38:2c:33:3b:72:a0:36:d9:
                    0c:5d:33:ef:2d:13:89:a0:d4:c4:c7:94:07:37:9d:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:73:66:5A:20:8D:FD:DE:2D:29:5C:A4:04:D8:78:55:D1:BD:28
            X509v3 Authority Key Identifier:
                keyid:46:FD:62:11:1C:FE:62:98:6F:4E:DE:8B:04:CE:B7:17:89:F3:CB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46FD62111CFE62986F4EDE8B04CEB71789F3CB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AbufuRNcgiVhmhHML5Jn7wWv7TpTchvNhbbKSGXxxWBz/0/3134332e302e342e302f32322d3332203d3e20323634343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:a2:9c:d1:36:dd:a3:68:26:32:08:0d:6e:2d:5e:82:be:ef:
         35:67:8e:c3:c7:96:49:1e:df:c9:c9:a6:60:f4:ec:f0:3d:12:
         88:2c:5d:20:03:6e:ee:7b:ba:a6:62:f1:5a:33:14:24:6e:f0:
         59:c3:40:71:58:43:f9:95:23:6c:f5:2c:6d:db:a2:dd:aa:c1:
         77:ac:b4:d5:a4:7f:e9:5f:5e:cf:d3:02:54:e7:6c:58:2f:22:
         79:49:57:3c:77:25:37:db:34:2f:01:b1:e3:2b:6d:98:b7:f4:
         c2:4b:b6:1f:5c:ac:e6:6c:a3:c9:7d:36:09:8e:bf:ef:cd:90:
         09:c1:8a:a3:ac:2f:7b:df:00:03:d1:10:82:14:3d:6c:5a:0f:
         63:e1:f5:94:08:94:54:9d:b8:62:92:95:b6:62:14:19:c5:19:
         7d:15:bf:50:86:65:aa:be:54:5d:06:0a:54:a5:e0:ba:de:e8:
         7f:68:b1:85:a5:be:c6:8d:72:12:c2:a8:cc:24:81:58:48:a8:
         f5:22:32:58:8c:fc:d5:d9:4a:48:4f:27:d0:8b:6b:82:ab:c6:
         7b:05:3b:b6:ef:48:23:c5:b2:52:52:60:c3:31:ec:a2:e0:98:
         f2:3a:cb:55:90:a0:58:3c:a6:21:76:86:a4:15:c7:a1:37:3a:
         df:e5:8d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:12 2025 by rpki-client