Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa
File:                     3134332e302e3230382e302f32342d3234203d3e20323634303732.roa (raw, json)
Hash identifier:          izZIrxvTng0zDaqPFRdcbQC4uwA4NRRjTDKUzGwdAw4=
Subject key identifier:   0F:EA:B1:59:B4:EC:E7:FF:F7:8D:69:19:4F:25:8F:3D:67:DC:A3:70
Certificate issuer:       /CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
Certificate serial:       6E2601F36A776BE2EC87E7CC71C7ECF639E24824
Authority key identifier: 6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa
Signing time:             Thu 30 Oct 2025 11:52:55 +0000
ROA not before:           Thu 30 Oct 2025 11:47:55 +0000
ROA not after:            Thu 29 Oct 2026 11:52:55 +0000
asID:                     264072
IP address blocks:        143.0.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:01:f3:6a:77:6b:e2:ec:87:e7:cc:71:c7:ec:f6:39:e2:48:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
        Validity
            Not Before: Oct 30 11:47:55 2025 GMT
            Not After : Oct 29 11:52:55 2026 GMT
        Subject: CN=0FEAB159B4ECE7FFF78D69194F258F3D67DCA370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:f8:38:49:5a:ff:fc:c3:34:c8:c7:c2:3c:
                    02:e9:5a:56:fd:a1:f4:41:c5:0c:65:2b:54:74:a9:
                    dc:50:f3:ee:18:99:c2:3e:e9:a3:01:9e:60:f9:d2:
                    1a:8d:0a:2e:56:f7:cd:65:cd:38:cb:f9:43:86:7d:
                    14:f6:5d:37:99:7d:87:aa:4b:a0:25:5b:e6:0f:f0:
                    66:14:30:be:b3:62:fc:83:85:a2:35:a8:4a:20:bc:
                    f3:89:93:b0:c0:11:3b:7f:5d:69:c0:4d:9a:fa:ab:
                    62:06:c2:06:8c:cd:13:08:c1:0a:7a:63:ed:bd:2e:
                    d4:42:3a:c1:41:f0:3f:6e:be:42:ad:a5:54:37:52:
                    39:7b:da:e5:c1:9c:28:7d:a5:77:f3:2b:bb:1c:a1:
                    60:87:fc:98:3e:00:99:83:66:4d:46:21:9f:53:a1:
                    75:de:1e:bd:3c:b5:c2:cf:c7:d1:de:f2:1b:5c:cf:
                    f0:31:86:12:34:f2:18:46:1a:38:ba:9a:24:cf:02:
                    3b:b2:0c:29:ff:80:1c:05:5c:9f:ae:11:fa:37:cf:
                    c7:8b:c3:9c:fe:4a:d9:c3:c9:af:6c:4b:e2:b4:48:
                    3d:fb:0c:5f:76:58:22:d4:3b:7b:b3:ee:1b:93:be:
                    bc:6b:cb:5c:55:2b:5c:63:2a:81:91:8b:52:97:6e:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:B1:59:B4:EC:E7:FF:F7:8D:69:19:4F:25:8F:3D:67:DC:A3:70
            X509v3 Authority Key Identifier:
                keyid:6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:b2:3a:ba:ec:dd:ac:97:4f:05:d3:61:1a:8c:98:ec:e5:
         31:8b:df:07:87:5b:18:ca:19:16:4c:ca:50:0d:57:a0:25:e8:
         de:63:54:2f:c0:f0:46:21:db:7a:8c:6c:a3:00:99:bc:bb:4d:
         76:72:1f:46:6b:01:6c:27:ac:17:27:90:e0:8b:2c:54:ef:ca:
         bc:95:cb:d9:c1:9a:99:f8:83:0f:e3:18:dc:57:2b:4d:36:ff:
         81:e6:b5:44:04:3e:ae:21:e5:b7:a9:cd:12:d0:2e:a3:32:2d:
         39:f5:76:88:14:b0:02:b6:80:f2:6c:e0:d4:ec:67:0b:6e:6e:
         93:a4:84:9d:6a:3a:5b:68:2a:6d:57:fe:48:bd:7f:22:bf:76:
         da:05:4c:2c:92:03:28:07:29:e9:60:2d:09:4c:1c:4a:22:9e:
         38:f1:86:7f:88:76:f1:81:8e:76:09:9c:11:d9:a0:bf:02:79:
         81:48:18:d3:98:01:8c:cf:f9:40:7d:8f:64:7f:14:0d:90:7e:
         72:8b:73:bf:d4:4f:19:d0:73:ac:35:24:44:f7:7a:f1:67:ea:
         f4:6f:08:3d:b2:58:fa:f5:e7:6f:74:6c:e3:a8:5b:1d:6c:a9:
         4b:85:10:7b:8d:b5:ed:1a:b6:de:98:6f:87:7c:ff:0c:47:91:
         15:3f:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:28:23 2025 by rpki-client