Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3134332e302e38382e302f32322d3234203d3e20323634343236.roa
File:                     3134332e302e38382e302f32322d3234203d3e20323634343236.roa (raw, json)
Hash identifier:          SxkF3FK+BQg4H3sKHMWotYzlK/tzSKvmIH5dT7XpKYg=
Subject key identifier:   D8:28:6D:D6:28:E6:FF:C3:23:20:3A:BA:A7:54:46:9B:77:F5:8F:77
Certificate issuer:       /CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
Certificate serial:       45233C65C82622396674F92AE27A731B756082F8
Authority key identifier: 6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3134332e302e38382e302f32322d3234203d3e20323634343236.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     264426
IP address blocks:        143.0.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl
                          rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:23:3c:65:c8:26:22:39:66:74:f9:2a:e2:7a:73:1b:75:60:82:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B28FAFEC514EC712BA58E039BC893491ECD0FD1
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:c8:c5:3e:d6:65:90:dd:6a:3b:cb:25:b0:
                    e8:b3:e0:d5:af:dc:96:b6:b8:1d:ce:13:28:4c:88:
                    a2:6e:df:b7:40:44:fc:1d:15:9d:1e:a9:1d:b3:0c:
                    30:69:82:71:c4:e1:51:ad:c0:88:55:c0:d9:46:82:
                    af:33:b7:67:be:f9:37:e3:9e:36:f1:0e:c1:3f:13:
                    2b:91:1c:a1:a0:e0:35:5f:8a:8a:c1:92:a6:be:52:
                    0c:87:18:af:88:ce:01:44:eb:dd:c7:45:23:a3:2e:
                    cc:c5:9c:2a:a4:2f:e9:e9:53:47:6b:9a:20:61:9b:
                    2e:89:55:1d:2b:c1:b6:2b:f8:d9:db:b2:03:ae:1f:
                    20:5b:38:4e:c5:df:65:83:6e:70:b0:ec:e1:e9:e5:
                    89:b7:7a:53:24:ac:64:60:18:9d:99:e4:5d:c8:71:
                    62:23:d7:47:f3:b0:b8:3f:c3:9e:61:77:00:7d:07:
                    50:21:cd:e9:0e:18:f4:11:69:62:23:dc:62:2e:9b:
                    d0:3a:37:c1:7a:ec:4f:3a:9b:83:8d:06:76:2c:ca:
                    01:7b:ee:1d:97:d1:20:c1:8e:ce:f3:00:2a:00:f9:
                    96:64:d0:13:73:fb:89:30:2c:23:df:d5:e5:15:aa:
                    72:66:32:58:15:ba:cf:2c:62:77:39:2d:f2:16:45:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:28:6D:D6:28:E6:FF:C3:23:20:3A:BA:A7:54:46:9B:77:F5:8F:77
            X509v3 Authority Key Identifier:
                keyid:6B:28:FA:FE:C5:14:EC:71:2B:A5:8E:03:9B:C8:93:49:1E:CD:0F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B28FAFEC514EC712BA58E039BC893491ECD0FD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gUR1PzPvvnsHDHvMjBtxGEz2xPBMcvWut6dGjLRRqgB/1/3134332e302e38382e302f32322d3234203d3e20323634343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:83:d5:5c:e9:b8:a7:49:a8:a1:6c:06:d9:70:ce:96:79:11:
         b5:52:9d:40:39:ee:2d:10:2d:1a:c2:43:de:05:71:ad:10:80:
         86:5e:a9:ba:1d:e9:12:b3:31:2c:b7:e4:87:f1:1c:f9:3b:ed:
         d2:41:5f:d6:2d:18:5c:59:a6:6c:7f:fc:ed:f7:52:62:77:08:
         67:4c:7e:04:b9:2c:91:92:16:cf:35:ec:45:9f:f0:67:14:f0:
         31:5f:20:b6:52:6d:92:b4:6e:51:a3:e1:ae:7f:a1:2f:ec:34:
         f3:8c:09:31:57:a0:c6:d9:8d:c1:6c:59:7c:02:80:11:83:cf:
         34:71:9b:5f:57:96:3c:b4:e4:c5:15:22:b3:6b:f1:e4:60:fa:
         8f:1c:0b:34:99:31:05:90:b2:96:5b:68:59:b4:b5:59:98:92:
         be:38:bd:ab:a0:45:25:72:fc:cc:2a:ed:8e:c6:aa:c8:8d:d5:
         02:cd:75:ea:1f:fe:70:d7:d5:6a:e1:c8:11:72:27:fc:89:3a:
         08:b0:21:01:5d:23:31:c0:f0:36:b5:cc:d1:b3:73:e1:db:c0:
         3f:5b:04:bf:33:37:49:79:58:d3:a4:51:d1:17:b8:8f:5d:70:
         44:3a:18:ce:b9:1c:c5:b8:2c:3c:08:a4:ad:1c:08:ca:38:6f:
         0d:ab:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:34 2025 by rpki-client on console.sobornost.net