Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (raw, json)
Hash identifier:          kWYkqeJL8ZF4RYR3DzlyfYsKf6cO0kjoeXavqNftg4k=
Subject key identifier:   6B:78:00:ED:DB:D7:A3:D6:87:55:DB:85:42:6D:99:77:15:9A:40:EF
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       61161CF913D409A072AB61B89345F794FB8B3EA2
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa
Signing time:             Sun 03 Aug 2025 14:53:35 +0000
ROA not before:           Sun 03 Aug 2025 14:48:35 +0000
ROA not after:            Sun 02 Aug 2026 14:53:35 +0000
asID:                     52916
IP address blocks:        143.255.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 21:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:16:1c:f9:13:d4:09:a0:72:ab:61:b8:93:45:f7:94:fb:8b:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Aug  3 14:48:35 2025 GMT
            Not After : Aug  2 14:53:35 2026 GMT
        Subject: CN=6B7800EDDBD7A3D68755DB85426D9977159A40EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:fb:aa:51:b1:fb:64:8e:8d:79:f6:f7:70:
                    a6:e0:0c:0a:5a:4c:06:3c:db:48:3e:f9:b0:e9:05:
                    99:ca:b1:12:e6:19:d2:98:5d:0f:ab:4e:d0:f6:b4:
                    98:23:31:e5:f9:c7:61:d3:6c:95:62:4f:45:fb:b4:
                    f2:46:b9:7e:a6:52:95:cc:4f:93:f0:d6:f4:7e:97:
                    01:24:6e:bb:b7:ac:8e:1b:c4:c6:69:1c:aa:68:40:
                    c2:c7:de:6a:d9:5e:6f:f8:5b:16:53:e7:c9:dc:d1:
                    47:83:db:ee:80:4f:59:65:76:2e:74:90:3e:d9:18:
                    5c:6b:50:2c:ec:f5:c5:66:e4:f8:cf:c1:8a:b7:7b:
                    35:f7:6c:c1:1f:92:1f:25:52:a7:e0:32:f3:f1:61:
                    12:47:b9:8a:e0:b6:79:7d:fd:ef:9b:b9:a4:ab:f3:
                    a6:13:38:86:3a:70:de:8e:cd:de:63:a2:7a:a5:8f:
                    3b:5d:7e:9b:d6:09:c5:cb:33:57:91:93:92:e2:c8:
                    46:79:f9:f3:16:ea:6f:63:7f:a4:e0:0b:b0:29:77:
                    a6:13:4e:e9:28:cf:f3:89:14:7b:ff:f8:8e:1f:1f:
                    0c:2a:e3:d8:7f:e5:f5:de:56:c9:d4:b9:03:9a:12:
                    d6:09:ee:11:87:04:5c:20:aa:9a:a4:11:ad:f0:6c:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:78:00:ED:DB:D7:A3:D6:87:55:DB:85:42:6D:99:77:15:9A:40:EF
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:f1:f5:9a:0b:ef:a0:a7:9b:8e:58:41:cc:fc:bf:78:65:
         60:ef:59:f6:0e:92:fd:00:7d:76:88:b6:22:35:a9:d2:39:d2:
         ec:11:ef:45:74:4c:53:a6:72:d5:f6:3f:1e:51:c0:02:45:0c:
         17:a4:e3:f2:49:ab:3a:59:f9:12:24:63:4a:50:f8:9d:0e:6e:
         be:12:d7:7f:f9:58:a0:38:49:86:ea:3d:cf:31:8e:7e:02:32:
         fd:15:cb:c9:ef:1b:ef:f5:9b:77:d6:ca:b3:39:2c:46:ae:43:
         7f:0c:06:fd:fa:db:fd:a8:da:3c:bc:bd:1f:d6:7f:e7:ec:42:
         54:b3:54:bc:45:51:b6:ac:98:d1:a6:74:47:e7:cd:41:67:c4:
         bd:64:b2:93:67:3a:5e:ec:0f:5c:ce:8b:34:ff:a8:0a:b4:61:
         f9:15:da:8b:44:fe:da:a6:1f:32:68:98:a2:29:59:82:d3:55:
         6c:b1:9b:88:99:23:df:58:65:5a:35:ba:77:19:ad:d4:a9:f3:
         ea:60:1a:8d:e7:38:1e:4f:da:92:f2:5a:cb:c8:34:d5:fe:90:
         94:a1:af:38:a2:79:78:63:73:8b:c5:ba:9d:c0:75:b0:40:98:
         c5:cc:9b:98:50:05:49:b0:a0:98:c4:b1:e9:e2:fd:df:89:30:
         28:37:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:49 2025 by rpki-client