Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa
File:                     3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (raw, json)
Hash identifier:          I90zbyBG2whs0dTRQGJLRzcosI7RATOACQ2suyEescs=
Subject key identifier:   02:E1:8F:50:46:F5:21:DA:DF:04:AB:C0:01:F9:EF:77:EE:81:26:2F
Certificate issuer:       /CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
Certificate serial:       435E56442E24E4D3352C53BCB2906ACAEF8DC23C
Authority key identifier: B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa
Signing time:             Fri 31 Oct 2025 12:26:45 +0000
ROA not before:           Fri 31 Oct 2025 12:21:45 +0000
ROA not after:            Fri 30 Oct 2026 12:26:45 +0000
asID:                     265122
IP address blocks:        143.208.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl
                          rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 22:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5e:56:44:2e:24:e4:d3:35:2c:53:bc:b2:90:6a:ca:ef:8d:c2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
        Validity
            Not Before: Oct 31 12:21:45 2025 GMT
            Not After : Oct 30 12:26:45 2026 GMT
        Subject: CN=02E18F5046F521DADF04ABC001F9EF77EE81262F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:82:b5:f4:b7:39:65:fd:e1:61:71:ee:38:
                    ff:12:02:85:f7:02:51:30:71:04:74:30:7b:05:b4:
                    1e:4f:8b:58:8d:28:60:df:dc:b4:da:59:a3:07:86:
                    22:d7:3e:23:d5:b6:5e:01:24:2f:fa:f0:72:50:49:
                    0c:f3:4f:e4:8d:4d:65:93:99:1b:e0:1b:31:42:e3:
                    69:2f:9e:83:40:72:0c:8b:14:fb:9f:76:23:8d:37:
                    ea:28:62:7f:5d:8e:ac:5f:84:ca:12:f0:aa:62:17:
                    6d:30:1f:4c:23:b1:e7:f3:3c:83:e7:a3:f3:b7:e6:
                    26:4d:ac:a3:a5:11:49:8d:c7:ac:32:a1:d1:6a:84:
                    cd:f9:01:70:ff:d0:21:26:fc:6d:67:3c:3e:bc:c8:
                    1a:24:3c:cd:26:83:b5:b1:75:fd:12:45:3b:a4:fe:
                    50:b8:2f:9f:71:92:5f:4e:0d:b7:cb:5c:64:a2:19:
                    f3:e4:a7:e0:ec:7a:6f:fa:0c:44:9f:87:00:fe:29:
                    ca:bf:45:af:26:c2:19:d4:b0:72:0b:ab:9f:5f:02:
                    ca:47:8c:75:56:17:5a:fb:89:24:2e:0b:10:4c:bd:
                    dc:42:34:bc:f7:c8:74:a7:35:48:2a:81:f3:8b:d3:
                    b0:c7:d8:4d:e7:47:18:52:70:56:59:2d:ee:1d:ee:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:8F:50:46:F5:21:DA:DF:04:AB:C0:01:F9:EF:77:EE:81:26:2F
            X509v3 Authority Key Identifier:
                keyid:B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:55:13:61:70:e3:38:20:32:31:48:75:b0:da:c4:9f:2d:59:
         03:07:1e:08:86:a3:61:2c:72:43:2e:18:79:dd:8b:8d:f4:87:
         43:0b:de:34:16:08:dd:35:fb:26:a5:97:e9:56:5a:2f:c7:cb:
         fd:66:c7:96:0b:93:14:c7:f3:63:cc:1b:46:1d:b7:ce:9b:82:
         97:5d:56:1a:65:f8:7d:a3:dd:0e:61:30:b7:68:14:1d:69:31:
         61:62:2f:2f:20:1e:62:fd:c7:ec:38:e7:e9:96:96:ea:db:9e:
         37:40:68:af:87:c8:5b:ce:7a:3d:0b:35:41:ce:33:ff:41:0f:
         1c:32:7a:b8:67:67:79:f9:e5:a5:70:27:35:c6:2e:b2:ce:43:
         a5:03:9e:9d:b3:a2:73:a0:27:e2:96:20:fa:60:c3:ec:a0:c6:
         cb:7a:9d:c5:b7:e8:05:03:42:41:7b:dc:8c:3b:16:63:c2:a5:
         23:8f:ba:9d:60:a7:ba:fa:e3:90:af:0b:8a:cf:07:95:84:d2:
         6e:8b:48:5f:5f:52:11:35:05:33:54:ff:5d:57:04:86:e4:bd:
         00:ab:64:cf:2f:20:b0:30:ec:97:74:11:9a:91:ef:85:fa:23:
         e1:64:fa:ae:a1:45:50:6f:3e:c4:eb:2f:64:7f:85:f7:c5:34:
         4b:d3:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:21:38 2025 by rpki-client