Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa
File:                     3134332e302e3232342e302f32322d3233203d3e20323634303335.roa (raw, json)
Hash identifier:          bo8ofpJllN9UNbkJNi4fnygyalmPT8KjEIo7/b6SN4c=
Subject key identifier:   B0:1B:CC:AF:CE:BD:23:6B:A3:DD:9A:5A:23:BD:83:54:2A:10:CB:18
Certificate issuer:       /CN=5462822197AD1B709CF7359BB22855D78C54671B
Certificate serial:       6815E05CFCDB9EA6B89A4F6A65451684B73103BF
Authority key identifier: 54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa
Signing time:             Thu 06 Mar 2025 16:13:50 +0000
ROA not before:           Thu 06 Mar 2025 16:08:50 +0000
ROA not after:            Thu 05 Mar 2026 16:13:50 +0000
asID:                     264035
IP address blocks:        143.0.224.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl
                          rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:15:e0:5c:fc:db:9e:a6:b8:9a:4f:6a:65:45:16:84:b7:31:03:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5462822197AD1B709CF7359BB22855D78C54671B
        Validity
            Not Before: Mar  6 16:08:50 2025 GMT
            Not After : Mar  5 16:13:50 2026 GMT
        Subject: CN=B01BCCAFCEBD236BA3DD9A5A23BD83542A10CB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:37:9c:84:3b:91:d1:c7:32:fa:50:19:34:
                    fe:29:af:06:ca:6a:78:16:4d:3b:c9:28:ed:8d:97:
                    0e:f3:23:00:bb:99:34:4a:08:73:53:f8:03:3d:17:
                    6e:9d:bb:f0:84:aa:0f:c9:97:f3:a6:46:3a:b7:ec:
                    99:94:3e:6c:74:ce:1f:60:c3:6b:3e:a7:92:39:6c:
                    1c:3a:92:4d:3a:be:b1:24:93:a6:89:9d:f6:29:f6:
                    dc:f0:b3:66:43:65:cf:55:e5:6e:64:13:65:c1:de:
                    33:0c:fd:2e:58:bc:a5:c8:f9:76:44:cc:09:2f:f8:
                    c7:1d:14:04:8d:87:85:3c:8c:60:1a:30:7c:63:e1:
                    bf:92:0b:98:40:a6:a6:d0:1f:eb:0e:65:76:b5:79:
                    65:54:a6:cd:e0:db:5b:59:52:ce:87:d4:67:a0:be:
                    e0:d4:27:16:61:22:5b:2c:4a:c9:c2:fe:d7:3e:23:
                    43:25:e3:8f:88:d1:4a:4d:39:d9:82:c6:6d:f7:0d:
                    c9:2c:79:63:86:93:3b:12:f5:d5:a5:3d:4b:35:db:
                    0c:b1:49:92:66:cc:50:49:4c:c5:55:0c:6e:43:8f:
                    5b:19:f3:32:23:fa:cc:54:e8:00:83:3f:bd:43:37:
                    f6:5a:c5:8f:91:aa:85:bb:f2:61:62:d8:cf:0f:1b:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:CC:AF:CE:BD:23:6B:A3:DD:9A:5A:23:BD:83:54:2A:10:CB:18
            X509v3 Authority Key Identifier:
                keyid:54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:eb:16:9f:d6:67:3d:1e:35:54:96:57:a7:dc:ce:5d:93:
         59:e8:c8:83:c1:06:e9:cc:7c:5e:09:b9:c1:36:c6:3e:4d:c6:
         f2:91:00:eb:01:58:1a:b2:f3:ee:f8:a0:5d:16:cc:ca:c2:66:
         80:1e:22:d2:eb:83:fe:17:5f:6d:67:25:ef:10:00:13:f6:b4:
         31:97:ee:98:90:4f:69:27:dc:07:fb:cf:05:11:f4:2b:6a:44:
         06:2a:ea:09:4f:13:e1:3d:67:a9:d9:2f:8b:93:44:17:12:23:
         a5:fb:1d:d0:47:7b:93:bb:82:a0:96:87:68:8c:23:1a:78:b5:
         45:80:cc:42:7d:d5:57:e4:2e:5d:ab:97:c0:f3:1d:aa:6a:8f:
         cd:b8:4d:d1:73:63:b5:a1:cd:f7:b5:74:7c:4b:b5:27:3d:7e:
         f4:72:b2:70:db:05:55:0b:71:be:08:23:76:b5:b2:be:64:68:
         22:f3:3a:a1:d2:45:be:f6:1a:e4:6c:c5:8c:e3:8e:8f:9e:8a:
         26:78:89:35:48:5d:14:d1:c6:dc:fa:7a:06:9c:2f:2d:a4:5f:
         7d:64:2c:9a:53:08:0f:63:1d:86:45:c3:22:cd:bc:40:0c:63:
         c9:dd:59:cd:20:a5:6f:71:26:a6:c7:81:a0:0e:ee:0e:90:e1:
         fa:00:5e:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaBXgXPzbnqa4mk9qZUUWhLcxA78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ2MjgyMjE5N0FEMUI3MDlDRjczNTlCQjIyODU1RDc4
QzU0NjcxQjAeFw0yNTAzMDYxNjA4NTBaFw0yNjAzMDUxNjEzNTBaMDMxMTAvBgNV
BAMTKEIwMUJDQ0FGQ0VCRDIzNkJBM0REOUE1QTIzQkQ4MzU0MkExMENCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57TechDuR0ccy+lAZNP4prwbK
angWTTvJKO2Nlw7zIwC7mTRKCHNT+AM9F26du/CEqg/Jl/OmRjq37JmUPmx0zh9g
w2s+p5I5bBw6kk06vrEkk6aJnfYp9tzws2ZDZc9V5W5kE2XB3jMM/S5YvKXI+XZE
zAkv+McdFASNh4U8jGAaMHxj4b+SC5hApqbQH+sOZXa1eWVUps3g21tZUs6H1Geg
vuDUJxZhIlssSsnC/tc+I0Ml44+I0UpNOdmCxm33DckseWOGkzsS9dWlPUs12wyx
SZJmzFBJTMVVDG5Dj1sZ8zIj+sxU6ACDP71DN/ZaxY+RqoW78mFi2M8PG1pDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsBvMr869I2uj3ZpaI72DVCoQyxgwHwYDVR0j
BBgwFoAUVGKCIZetG3Cc9zWbsihV14xUZxswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtoQkc4VHVCR3I0RWRyNUJaYzlBNXcxczRGWFQydkNGc1RyRmpUSHlG
ZXcvMS81NDYyODIyMTk3QUQxQjcwOUNGNzM1OUJCMjI4NTVENzhDNTQ2NzFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NjI4MjIxOTdBRDFCNzA5
Q0Y3MzU5QkIyMjg1NUQ3OEM1NDY3MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FraEJHOFR1QkdyNEVkcjVCWmM5QTV3MXM0RlhUMnZDRnNUckZqVEh5RmV3LzEv
MzEzNDMzMmUzMDJlMzIzMjM0MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM0
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwDgMA0GCSqGSIb3DQEBCwUAA4IBAQBj0+sWn9Zn
PR41VJZXp9zOXZNZ6MiDwQbpzHxeCbnBNsY+TcbykQDrAVgasvPu+KBdFszKwmaA
HiLS64P+F19tZyXvEAAT9rQxl+6YkE9pJ9wH+88FEfQrakQGKuoJTxPhPWep2S+L
k0QXEiOl+x3QR3uTu4KglodojCMaeLVFgMxCfdVX5C5dq5fA8x2qao/NuE3Rc2O1
oc33tXR8S7UnPX70crJw2wVVC3G+CCN2tbK+ZGgi8zqh0kW+9hrkbMWM446Pnoom
eIk1SF0U0cbc+noGnC8tpF99ZCyaUwgPYx2GRcMizbxADGPJ3VnNIKVvcSamx4Gg
Du4OkOH6AF6p
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:36 2025 by rpki-client on console.sobornost.net