Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa
File:                     3134332e302e3132382e302f32322d3234203d3e20323634353433.roa (raw, json)
Hash identifier:          HKF2V4S5MvGr0pcZVSb1p3ub57RgMvfuMJ5vE/4e/n0=
Subject key identifier:   6F:26:1A:C5:21:7A:F3:87:35:12:DE:35:82:B4:90:0A:D3:4F:88:57
Certificate issuer:       /CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
Certificate serial:       3E06AE764161717F96CA7C4932DDB894702646DF
Authority key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa
Signing time:             Thu 31 Jul 2025 14:52:20 +0000
ROA not before:           Thu 31 Jul 2025 14:47:20 +0000
ROA not after:            Thu 30 Jul 2026 14:52:20 +0000
asID:                     264543
IP address blocks:        143.0.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl
                          rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 02:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:06:ae:76:41:61:71:7f:96:ca:7c:49:32:dd:b8:94:70:26:46:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
        Validity
            Not Before: Jul 31 14:47:20 2025 GMT
            Not After : Jul 30 14:52:20 2026 GMT
        Subject: CN=6F261AC5217AF3873512DE3582B4900AD34F8857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:89:6a:98:d8:d3:67:cb:0e:a4:e2:55:ed:93:
                    3a:2b:91:d4:36:34:74:b5:74:a9:6d:a3:13:92:9f:
                    c6:b7:da:a4:58:0a:65:ab:65:f8:9f:98:3c:54:4d:
                    0e:80:93:c6:0f:3e:e0:58:d2:3b:0e:79:44:12:e4:
                    28:83:83:61:38:0a:75:6d:b2:f3:a9:31:4f:c8:05:
                    25:31:46:3f:9c:13:10:91:09:c7:76:98:2d:46:87:
                    62:6a:67:e0:72:3c:fb:aa:7b:80:a5:a2:33:45:7a:
                    fa:cc:24:e2:8f:d9:57:03:50:96:cb:8f:0d:98:53:
                    5f:41:aa:41:a3:01:ba:fa:93:83:1c:86:31:7a:e8:
                    22:57:0c:42:e2:a5:fe:9e:a1:38:68:66:e4:89:d8:
                    f7:0d:ad:69:f5:85:0a:fc:96:9c:48:c4:7e:23:90:
                    96:2d:0f:d6:1b:cc:b4:75:18:e5:9a:46:20:04:9e:
                    cf:f0:3e:75:e5:2d:e9:4a:63:f5:1f:62:b4:78:e5:
                    69:6f:db:0c:a8:b2:f1:07:3d:8b:de:13:45:3e:d2:
                    a7:a8:b5:95:a3:15:6f:bb:0a:2d:7d:ad:a8:c8:ef:
                    da:dd:43:89:cf:b4:a5:e4:60:23:74:ff:77:de:45:
                    42:bb:a0:e4:af:83:d5:2e:b7:eb:f3:fb:b4:23:70:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:1A:C5:21:7A:F3:87:35:12:DE:35:82:B4:90:0A:D3:4F:88:57
            X509v3 Authority Key Identifier:
                keyid:09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:bc:33:db:c6:44:20:64:f2:f4:e4:0e:d7:45:55:1a:b3:
         ec:5e:38:04:7c:ed:1e:5d:be:83:87:f3:c6:95:3a:86:3b:7c:
         65:eb:81:f6:7b:29:e8:9c:e7:aa:e3:95:56:96:db:75:78:72:
         c6:4b:a1:ec:2a:23:6d:87:77:11:ed:14:72:d8:c8:00:05:22:
         d2:ba:23:30:94:16:3f:44:9c:67:31:05:e1:50:fc:c9:f7:b5:
         45:b9:03:e8:b8:0d:a8:12:2d:1f:7d:ea:97:36:6e:77:13:97:
         e0:f1:92:7a:db:4d:ff:3b:59:d6:33:62:6e:53:ee:bd:32:95:
         aa:bb:51:f1:b0:e1:1a:a0:c9:54:ea:9f:ee:67:3a:f1:12:d7:
         18:25:89:b7:00:a9:e8:be:27:dc:b3:38:0f:f0:ae:cc:9a:84:
         60:05:ce:2e:c4:d4:42:28:c6:1f:2c:af:2e:d8:71:53:ed:bf:
         6a:6c:91:d1:30:9e:8e:d8:0f:58:df:29:41:8d:d3:b7:62:1b:
         a9:9d:1c:e4:8a:59:1e:79:90:63:40:4a:90:ec:d9:3d:de:cf:
         d6:79:4a:9c:05:a3:71:97:34:41:42:25:99:6c:78:06:5b:dc:
         ab:3b:41:a6:c9:e6:25:c1:a0:f9:19:65:7c:c2:11:87:bd:27:
         98:46:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:33 2025 by rpki-client