Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231302e302f32342d3234203d3e20323634303732.roa
File:                     3134332e302e3231302e302f32342d3234203d3e20323634303732.roa (raw, json)
Hash identifier:          bLEop41rDKRAkJVAZgorYA5H/c7Tn1bxRQ2YdXx7CR0=
Subject key identifier:   E2:09:F7:FF:EB:A9:C5:B5:0B:91:FE:DA:AD:C0:5B:34:E6:43:6B:40
Certificate issuer:       /CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
Certificate serial:       19C7FE1D3D930CE37CE301F3D4FCC9AD2FDF89D9
Authority key identifier: 6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231302e302f32342d3234203d3e20323634303732.roa
Signing time:             Thu 30 Oct 2025 11:53:02 +0000
ROA not before:           Thu 30 Oct 2025 11:48:02 +0000
ROA not after:            Thu 29 Oct 2026 11:53:02 +0000
asID:                     264072
IP address blocks:        143.0.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 17:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c7:fe:1d:3d:93:0c:e3:7c:e3:01:f3:d4:fc:c9:ad:2f:df:89:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E
        Validity
            Not Before: Oct 30 11:48:02 2025 GMT
            Not After : Oct 29 11:53:02 2026 GMT
        Subject: CN=E209F7FFEBA9C5B50B91FEDAADC05B34E6436B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:2d:d6:80:57:e0:88:36:1c:3a:45:59:56:
                    b8:5d:a4:3f:84:b5:16:09:41:13:fa:31:04:58:c6:
                    aa:52:a8:d1:b0:32:3e:e9:c8:16:6f:26:8b:47:2f:
                    bd:ef:96:fc:ea:e4:c2:76:5a:1f:9b:af:6f:e3:a0:
                    41:4d:87:8a:34:a4:c2:1c:c4:eb:2b:a9:c2:3e:ff:
                    ea:f2:c9:15:52:56:12:3e:44:ab:b8:39:f2:46:c8:
                    53:42:1d:8e:11:e0:2c:aa:ee:a4:33:33:99:10:d9:
                    fa:e1:da:87:7b:3c:14:33:11:77:8d:99:92:41:37:
                    cd:69:1b:a8:2e:02:e6:e6:cf:46:5d:b9:71:fc:25:
                    c9:5b:1c:66:8b:e2:8c:db:80:5b:22:a7:09:62:98:
                    97:ee:dc:70:e8:b8:ae:db:b1:3a:80:e3:34:5c:6e:
                    9b:6f:2c:f8:53:c8:3a:45:0d:1e:5c:84:f5:c5:70:
                    74:97:2f:d2:46:56:96:67:88:dc:22:7b:4b:6c:21:
                    08:8f:7e:e8:b7:5d:ad:54:cf:fc:8f:c0:2f:95:cb:
                    d0:b2:4f:13:96:76:f3:a0:e1:50:98:01:93:c4:7e:
                    ce:f5:bb:e7:4b:db:bf:28:0b:f4:e6:07:1f:1b:87:
                    2b:c3:c2:71:bc:e0:bf:58:37:17:8e:3a:31:27:d9:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:09:F7:FF:EB:A9:C5:B5:0B:91:FE:DA:AD:C0:5B:34:E6:43:6B:40
            X509v3 Authority Key Identifier:
                keyid:6B:BE:7D:34:36:64:A3:5C:8F:98:55:EF:B4:5A:CC:D9:08:3B:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BBE7D343664A35C8F9855EFB45ACCD9083B6D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231302e302f32342d3234203d3e20323634303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:dd:55:21:5b:70:c5:60:f4:34:15:bb:9d:3e:21:95:1b:
         26:11:4b:58:ef:9d:b2:16:24:6b:96:cf:1a:89:1b:5c:f8:b2:
         47:6a:11:a8:08:6b:39:44:8e:50:9e:b3:d3:24:1a:ad:12:5b:
         c2:13:32:c2:a4:7e:58:b5:b8:4d:0d:7e:25:78:ba:4a:07:fd:
         6c:5c:77:89:c7:90:92:55:a9:a2:c5:74:91:26:1e:75:f1:85:
         98:5c:63:3b:b4:d1:10:45:80:66:3e:56:1b:fe:16:76:50:01:
         f3:08:a8:e9:8a:26:57:a6:e6:ae:bf:c6:5c:fd:0c:a6:09:86:
         1e:59:ee:2e:10:ad:a5:fa:f9:c4:cb:2d:26:8b:3a:ea:8e:4a:
         ef:6d:b4:48:96:5e:3d:f1:7d:4d:a2:47:14:4b:7f:b2:83:c4:
         31:6d:fc:89:76:2a:ad:38:74:03:0e:09:ce:3a:91:18:57:55:
         a6:57:4f:90:48:c0:46:e9:27:e6:eb:e9:e0:5b:cd:69:17:09:
         de:1b:b0:e0:fb:22:52:45:e8:83:cb:8d:30:5e:4d:37:2c:32:
         ae:b9:f8:51:6e:bc:ce:32:1c:6b:84:78:b1:69:54:9f:30:8a:
         d7:14:c3:13:39:ea:55:0f:00:96:26:48:a6:25:17:66:22:d0:
         1d:1e:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:41:57 2025 by rpki-client