Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa (raw, json)
Hash identifier:          Qlj8UKH/h2/0c7K+tv+akm1E65FaOZLYN64n3Mn7ink=
Subject key identifier:   B0:DB:30:80:68:12:D5:71:E7:86:21:D5:CB:B9:75:A9:E8:BA:86:3F
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       3D66FB865BD14632EAAF255455F9060C9BB9722F
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:45 +0000
ROA not before:           Mon 16 Jun 2025 14:05:45 +0000
ROA not after:            Mon 15 Jun 2026 14:10:45 +0000
asID:                     262729
IP address blocks:        143.208.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 14:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:66:fb:86:5b:d1:46:32:ea:af:25:54:55:f9:06:0c:9b:b9:72:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:45 2025 GMT
            Not After : Jun 15 14:10:45 2026 GMT
        Subject: CN=B0DB30806812D571E78621D5CBB975A9E8BA863F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:78:60:9e:7b:92:b7:f5:63:4b:0f:14:07:
                    94:57:a4:da:d4:f4:ff:fb:cc:a4:29:eb:81:9e:c1:
                    20:e1:06:bb:47:18:63:ba:92:2f:76:9b:43:35:ba:
                    c3:10:bb:54:46:43:4d:83:31:92:43:1c:e1:f3:73:
                    a0:13:2f:91:47:23:23:4d:1f:f7:39:2a:f0:3f:26:
                    24:a3:11:1d:48:e6:cb:e7:7b:56:e0:66:ce:85:7d:
                    35:b5:d8:30:15:e3:5a:e5:2c:45:d5:0c:43:f4:f4:
                    77:a5:70:31:02:30:ba:1f:86:4f:23:91:74:60:13:
                    e0:07:70:95:3f:8a:d9:b7:06:4c:37:35:1f:11:35:
                    95:dd:bc:eb:22:ae:99:93:80:03:5b:e1:3f:5b:e1:
                    0b:6b:7f:b0:bb:41:8a:b0:1b:71:14:fc:35:d1:b6:
                    a4:4b:fb:93:bf:7c:a2:44:b3:c7:6c:67:68:f5:8f:
                    12:8f:d2:4a:66:2f:74:87:10:87:31:fa:1a:16:f2:
                    5b:2c:d2:3d:dd:0c:84:27:aa:04:d4:d2:4a:b4:ba:
                    5f:00:da:ff:39:b1:3a:31:a3:ad:c0:1d:d4:10:d4:
                    c6:54:68:58:83:83:b1:d3:b8:bd:d6:dd:d9:6d:9e:
                    e5:bf:59:c6:d2:4e:b5:2d:75:f0:dc:d0:ba:d0:cf:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DB:30:80:68:12:D5:71:E7:86:21:D5:CB:B9:75:A9:E8:BA:86:3F
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:83:85:f0:b3:da:b8:ad:3b:a7:e9:e8:c8:a1:ef:e2:c3:dd:
         eb:6d:39:cf:cf:c8:c7:c2:d0:8a:97:74:0e:6e:d0:c1:88:1e:
         45:2b:9d:6e:b1:3e:6b:1b:a4:d4:0e:ea:c2:df:80:72:de:5a:
         b4:14:a2:a8:2e:0c:65:e5:e3:cf:5e:48:11:bd:8d:22:33:ca:
         5e:d6:42:9d:12:dc:db:41:82:77:c3:0c:b3:98:b9:b1:1f:fd:
         87:7c:ae:31:a8:bb:d6:0b:38:7b:35:ca:52:d1:ae:0f:97:ea:
         74:01:4f:38:cf:cd:c6:c7:bd:74:2a:3b:16:f2:e3:d9:a4:7f:
         c8:6d:3c:af:e3:a7:cd:88:a2:ee:52:e2:0b:c3:26:6a:9a:db:
         35:1d:b5:0a:0e:8d:7e:71:e4:73:97:27:65:49:30:90:52:75:
         53:bd:8e:53:97:56:71:0b:31:f2:09:7b:9b:41:7f:bc:8c:ce:
         d8:df:e3:6f:0e:94:41:f7:65:cb:64:e9:c8:ef:b1:f4:6b:50:
         bb:5b:9d:40:73:05:dc:c4:cf:f0:ec:84:3a:d0:ec:d0:9c:86:
         cb:10:fe:ad:84:15:78:74:73:10:98:c6:85:2e:45:7e:68:f2:
         90:9a:00:69:1f:d6:c9:a2:a6:a4:f9:14:55:74:3d:87:11:5e:
         81:dc:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:42:23 2025 by rpki-client