Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa
File:                     3134332e302e3232312e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          +haxQEQvB6KD8yX8ZfUc2dGJw2I4MKio5IZPxQA6BdE=
Subject key identifier:   D9:CD:8B:9A:9B:69:70:C9:39:36:8C:B1:07:8D:C3:C3:60:17:56:09
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       34366A7732F0186E2E845505786E66470779E2A5
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:04 +0000
ROA not before:           Fri 25 Apr 2025 14:00:04 +0000
ROA not after:            Fri 24 Apr 2026 14:05:04 +0000
asID:                     264022
IP address blocks:        143.0.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 16:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:36:6a:77:32:f0:18:6e:2e:84:55:05:78:6e:66:47:07:79:e2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:04 2025 GMT
            Not After : Apr 24 14:05:04 2026 GMT
        Subject: CN=D9CD8B9A9B6970C939368CB1078DC3C360175609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:c9:c9:ee:70:e1:cd:65:cc:6f:2c:1f:ea:
                    a2:ab:d7:bc:9e:90:86:29:8c:01:96:f4:3e:f4:30:
                    7e:87:7a:1d:0d:0d:1b:2a:04:68:e4:90:e3:c3:df:
                    3c:ae:32:0d:d7:89:8b:f4:f8:c6:22:6f:1e:e2:3e:
                    ca:86:06:3f:ab:fc:de:02:96:5d:73:02:d7:43:70:
                    b5:d2:b6:67:38:53:38:c2:fb:8c:78:4a:6c:b5:b8:
                    5d:63:f8:26:c9:94:56:61:0d:66:75:42:6b:78:a4:
                    49:a9:ae:10:7b:69:aa:49:fc:19:33:63:4d:20:22:
                    38:91:a1:b5:93:ba:83:18:5b:58:0b:6d:a2:3f:fa:
                    39:7b:93:65:36:3b:bc:e8:73:50:86:02:b2:45:90:
                    e0:05:30:a3:09:36:ff:74:6e:81:b5:72:a1:30:6b:
                    8d:32:56:e9:4a:b2:92:98:aa:2d:ef:db:81:dc:93:
                    52:73:e3:f9:fb:76:2e:3f:d6:35:3d:5a:00:77:6b:
                    49:e0:66:06:ac:de:a3:5e:ea:d9:41:67:be:31:c4:
                    d3:55:72:f0:a7:ad:a6:0f:8d:4e:41:03:05:64:8d:
                    8f:85:6d:91:21:83:7d:70:2a:39:cc:22:69:f0:48:
                    ad:e9:1e:b9:40:9a:f7:01:be:28:2c:24:34:66:13:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:8B:9A:9B:69:70:C9:39:36:8C:B1:07:8D:C3:C3:60:17:56:09
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:77:08:3e:ac:19:15:08:b9:91:6c:8d:1e:21:9c:b6:31:80:
         80:79:ca:3c:2f:a4:78:1e:f4:25:28:f3:c5:07:4d:1e:b3:1b:
         07:00:44:46:32:a2:7b:f2:b2:41:92:57:f9:03:8c:de:47:09:
         d0:5f:79:73:ce:c7:69:4b:45:4b:d9:03:f7:d0:c3:9d:cf:68:
         aa:ab:ec:46:c8:ad:77:e5:d0:f8:15:a3:ea:b6:97:fb:1f:97:
         64:a4:aa:a5:73:21:62:b1:b4:01:2b:7a:0c:f1:ee:7e:46:fa:
         61:fd:b7:f9:d9:9a:45:a4:5c:72:d2:b7:0d:a8:41:6c:49:21:
         fe:be:7d:0c:60:ba:6e:7f:67:22:50:83:5d:35:93:4d:4b:76:
         ac:e6:1e:0e:a1:62:e8:11:ac:b4:39:8d:7a:ee:04:e8:73:8b:
         a5:5e:ee:9c:53:4b:8d:36:c1:a9:30:c6:40:6c:44:08:38:1d:
         60:e3:b8:b4:19:37:71:74:a4:31:16:3f:57:19:3a:69:21:47:
         13:14:85:97:33:0e:65:72:a6:6f:22:ff:a2:e6:3f:41:b9:82:
         5a:9a:82:1e:a6:94:c2:0c:31:bf:35:49:d4:35:cd:d7:02:8d:
         9d:d0:0b:13:a5:0b:a4:7a:2e:61:a5:13:7f:9c:54:2b:c5:82:
         b5:87:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:08 2025 by rpki-client on console.sobornost.net