Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa
File:                     3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa (raw, json)
Hash identifier:          Pid4HUxWq/FT83vipd6Pe/SI4oaEGNlw1JLdIH23aE8=
Subject key identifier:   CD:28:FC:44:CE:AF:6C:C5:0C:26:17:3D:9D:DB:A8:CE:D8:81:62:72
Certificate issuer:       /CN=F7C4DEB12240FF8688C32C67939C04C380824025
Certificate serial:       797A304A92A907ED6A20DCF5FABB3E8D11583F0E
Authority key identifier: F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     263530
IP address blocks:        143.137.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl
                          rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 03:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7a:30:4a:92:a9:07:ed:6a:20:dc:f5:fa:bb:3e:8d:11:58:3f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:d9:5a:46:77:b3:69:5b:85:b7:3f:12:52:
                    ee:ac:e7:6e:d6:ce:a0:ca:00:bc:b4:3b:0a:b9:8e:
                    1b:af:cf:df:dc:42:d1:e3:75:d0:7b:1f:98:a2:d7:
                    75:0c:64:4e:9c:5d:87:69:0d:a0:b0:74:e6:63:5f:
                    d9:c4:24:37:25:a2:a8:5f:90:48:b7:60:10:3d:6a:
                    a1:c5:a0:b2:ee:c3:4a:27:60:24:1a:d4:04:c5:c7:
                    c8:f5:71:0a:99:8d:f5:57:08:b2:4a:a1:88:53:ee:
                    69:3b:a9:02:c2:59:28:a1:6a:6f:45:f5:f5:18:3e:
                    b5:39:58:1e:f7:4c:64:45:a3:ef:5e:a8:50:dc:91:
                    10:61:7b:9f:bb:82:42:c3:7e:9c:b4:f1:8b:16:84:
                    b9:94:5f:ed:5b:80:8c:d5:1b:5d:eb:16:34:d5:e5:
                    58:b9:a6:56:ac:3b:53:71:c9:2e:e1:86:86:36:80:
                    87:a3:21:cd:8d:d4:18:11:b5:42:2f:90:b3:01:86:
                    22:ad:46:7d:33:c7:56:68:58:ba:b0:b8:e2:48:ba:
                    b1:03:25:47:80:9a:68:73:d3:2c:b2:81:50:50:0b:
                    c6:08:fc:f9:3d:a2:36:f5:45:57:e1:3d:02:b8:04:
                    2e:80:13:e0:f1:ba:0c:e8:40:f1:a4:b4:ca:48:c8:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:28:FC:44:CE:AF:6C:C5:0C:26:17:3D:9D:DB:A8:CE:D8:81:62:72
            X509v3 Authority Key Identifier:
                keyid:F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/3134332e3133372e36342e302f32322d3234203d3e20323633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:cc:cb:b7:70:d0:b3:9d:12:e7:f2:9e:a1:1d:19:73:d6:
         9a:29:3a:d5:74:26:23:bb:a2:df:b5:61:6e:32:72:bf:fa:ff:
         4f:e4:da:be:43:1c:ff:5e:02:ba:9a:04:2a:94:56:e5:4d:b1:
         50:b2:8d:68:4d:2d:54:ce:5d:72:34:34:54:37:da:47:f6:8e:
         9f:ab:e4:0e:83:b5:e8:70:9c:e1:fb:b6:dc:49:7b:ed:b6:63:
         a6:c5:b6:4c:04:e9:79:80:92:a4:d0:82:fb:36:3f:27:ff:be:
         43:24:5e:67:23:66:73:7a:5e:02:68:fa:f6:7e:e2:3e:bb:8b:
         8c:90:7f:56:94:72:7d:62:20:b4:18:08:63:c3:58:20:73:fb:
         77:6d:d1:dc:b1:55:19:9e:b8:a0:39:99:aa:fa:bb:b3:3a:9c:
         e2:2d:19:91:a6:0b:34:40:da:f8:a4:16:e5:5c:af:0b:e0:d2:
         d9:8a:1e:43:0e:a9:7b:97:5f:4f:01:5b:94:c3:ca:9a:9d:d5:
         02:3d:e5:aa:29:f8:e7:60:38:7f:a0:dc:f9:66:fa:8c:05:91:
         07:68:75:e7:f4:e2:a1:db:60:d0:07:68:8f:5c:3d:67:cd:6c:
         81:73:f0:72:f4:b4:ae:2f:4e:c5:af:28:9b:8a:42:44:8f:d2:
         90:3b:ad:3d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUeXowSpKpB+1qINz1+rs+jRFYPw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdDNERFQjEyMjQwRkY4Njg4QzMyQzY3OTM5QzA0QzM4
MDgyNDAyNTAeFw0yNTAzMDUxODU1MDVaFw0yNjAzMDQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNGRUQ5NUE0Njc3QjM2OTVC
ODVCNzNGMTI1MkVFQUNFNzZFRDZDRUEwQ0EwMEJDQjQzQjBBQjk4RTFCQUZDRkRG
REM0MkQxRTM3NUQwN0IxRjk4QTJENzc1MEM2NDRFOUM1RDg3NjkwREEwQjA3NEU2
NjM1RkQ5QzQyNDM3MjVBMkE4NUY5MDQ4Qjc2MDEwM0Q2QUExQzVBMEIyRUVDMzRB
Mjc2MDI0MUFENDA0QzVDN0M4RjU3MTBBOTk4REY1NTcwOEIyNEFBMTg4NTNFRTY5
M0JBOTAyQzI1OTI4QTE2QTZGNDVGNUY1MTgzRUI1Mzk1ODFFRjc0QzY0NDVBM0VG
NUVBODUwREM5MTEwNjE3QjlGQkI4MjQyQzM3RTlDQjRGMThCMTY4NEI5OTQ1RkVE
NUI4MDhDRDUxQjVERUIxNjM0RDVFNTU4QjlBNjU2QUMzQjUzNzFDOTJFRTE4Njg2
MzY4MDg3QTMyMUNEOERENDE4MTFCNTQyMkY5MEIzMDE4NjIyQUQ0NjdEMzNDNzU2
Njg1OEJBQjBCOEUyNDhCQUIxMDMyNTQ3ODA5QTY4NzNEMzJDQjI4MTUwNTAwQkM2
MDhGQ0Y5M0RBMjM2RjU0NTU3RTEzRDAyQjgwNDJFODAxM0UwRjFCQTBDRTg0MEYx
QTRCNENBNDhDODQ1ODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs/7ZWkZ3s2lbhbc/ElLurOdu1s6gygC8tDsKuY4br8/f3ELR43XQ
ex+Yotd1DGROnF2HaQ2gsHTmY1/ZxCQ3JaKoX5BIt2AQPWqhxaCy7sNKJ2AkGtQE
xcfI9XEKmY31VwiySqGIU+5pO6kCwlkooWpvRfX1GD61OVge90xkRaPvXqhQ3JEQ
YXufu4JCw36ctPGLFoS5lF/tW4CM1Rtd6xY01eVYuaZWrDtTccku4YaGNoCHoyHN
jdQYEbVCL5CzAYYirUZ9M8dWaFi6sLjiSLqxAyVHgJpoc9MssoFQUAvGCPz5PaI2
9UVX4T0CuAQugBPg8boM6EDxpLTKSMhFhQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FM0o/ETOr2zFDCYXPZ3bqM7YgWJyMB8GA1UdIwQYMBaAFPfE3rEiQP+GiMMsZ5Oc
BMOAgkAlMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhpajVORDNVY1ZUWTVw
WE5kOEFqeHRIOFZUcXFTbXNCTTZQYTRIODFSYWVNLzEvRjdDNERFQjEyMjQwRkY4
Njg4QzMyQzY3OTM5QzA0QzM4MDgyNDAyNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GN0M0REVCMTIyNDBGRjg2ODhDMzJDNjc5MzlDMDRDMzgwODI0
MDI1LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84aWo1TkQzVWNWVFk1cFhOZDhB
anh0SDhWVHFxU21zQk02UGE0SDgxUmFlTS8xLzMxMzQzMzJlMzEzMzM3MmUzNjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzUzMzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
j4lAMA0GCSqGSIb3DQEBCwUAA4IBAQBY8MzLt3DQs50S5/KeoR0Zc9aaKTrVdCYj
u6LftWFuMnK/+v9P5Nq+Qxz/XgK6mgQqlFblTbFQso1oTS1Uzl1yNDRUN9pH9o6f
q+QOg7XocJzh+7bcSXvttmOmxbZMBOl5gJKk0IL7Nj8n/75DJF5nI2Zzel4CaPr2
fuI+u4uMkH9WlHJ9YiC0GAhjw1ggc/t3bdHcsVUZnrigOZmq+ruzOpziLRmRpgs0
QNr4pBblXK8L4NLZih5DDql7l19PAVuUw8qandUCPeWqKfjnYDh/oNz5ZvqMBZEH
aHXn9OKh22DQB2iPXD1nzWyBc/By9LSuL07FryibikJEj9KQO609
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:54 2025 by rpki-client on console.sobornost.net