Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32342d3234203d3e20323634303838.roa
File:                     3134332e3230382e342e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          cbHpUMPOIR8OjPBKLSQnocMxOBWtKd0OqJU74WSq12s=
Subject key identifier:   BD:DD:32:D6:4B:2D:FE:89:62:15:E9:EF:ED:86:4B:E0:9E:F1:28:2B
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       30BE4523AB3B2A382B8A5545CF3E076B3BE0B7A6
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32342d3234203d3e20323634303838.roa
Signing time:             Fri 25 Apr 2025 14:50:40 +0000
ROA not before:           Fri 25 Apr 2025 14:45:40 +0000
ROA not after:            Fri 24 Apr 2026 14:50:40 +0000
asID:                     264088
IP address blocks:        143.208.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 19:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:be:45:23:ab:3b:2a:38:2b:8a:55:45:cf:3e:07:6b:3b:e0:b7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:40 2025 GMT
            Not After : Apr 24 14:50:40 2026 GMT
        Subject: CN=BDDD32D64B2DFE896215E9EFED864BE09EF1282B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:97:af:8a:92:90:32:97:bb:cb:73:5f:74:
                    60:9e:47:42:5e:4b:bf:1e:89:4d:0e:60:ca:b5:ea:
                    48:9c:9f:82:79:3d:60:5e:d8:fc:19:b6:dd:09:e1:
                    3a:c8:a2:c1:00:96:e7:9a:3e:2d:94:02:3e:b8:0b:
                    f4:07:c9:4b:43:a5:ae:8c:11:23:4a:6e:95:3a:70:
                    05:0c:75:ff:01:9d:c4:cf:64:0f:af:27:72:ac:c1:
                    fa:e5:23:42:10:6a:cf:d0:a8:8c:86:f5:66:f0:03:
                    38:a1:1c:70:4d:5e:50:90:b1:9b:7b:35:bb:dd:d4:
                    d1:e4:a9:3b:2b:bf:5a:e2:ab:fa:42:61:3e:3a:d7:
                    c1:bf:cf:ee:28:34:54:98:06:11:04:8c:3a:69:ec:
                    34:53:a8:68:48:e6:55:1f:1e:72:f0:c7:43:1b:d6:
                    a9:d1:0c:35:23:14:7c:3e:a9:27:21:02:4f:04:a8:
                    8d:96:ff:43:af:af:f0:a0:26:9d:89:a2:bb:2a:82:
                    86:34:06:1e:84:37:33:65:b9:d5:e5:12:84:2e:d3:
                    9b:a6:26:3a:44:c2:f9:46:bc:65:56:ab:a3:3e:b0:
                    b2:86:a8:ea:4d:2f:9e:53:71:65:b2:ae:a4:33:27:
                    d9:5c:d5:3b:c4:7e:12:07:1b:c5:ba:1d:ee:83:14:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DD:32:D6:4B:2D:FE:89:62:15:E9:EF:ED:86:4B:E0:9E:F1:28:2B
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32342d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:aa:43:71:88:89:47:ba:bc:e0:69:eb:a3:c6:29:7c:1c:
         a3:06:6a:b4:73:7a:aa:74:61:b2:11:73:08:ea:6f:df:00:d2:
         9e:ff:ff:3c:bc:77:74:66:81:d9:da:bb:4b:3f:55:dc:74:35:
         17:54:ba:09:83:c8:d4:b5:cb:e1:97:70:ff:bb:1a:7d:fa:46:
         f5:11:96:94:78:88:68:f9:7e:39:28:2d:ac:ee:9e:d5:76:ed:
         3b:9b:f0:70:c7:c1:08:01:bb:cc:65:fc:c7:bb:1e:5f:ae:99:
         0a:d5:9f:62:85:08:37:2e:33:59:92:8b:bb:73:25:2f:2b:a9:
         8a:db:d9:4c:b7:4e:0a:81:ae:33:7e:f7:85:c6:db:fb:36:44:
         73:e2:b4:af:f3:e3:1e:93:93:9d:51:0b:b1:b2:b7:67:25:b9:
         93:5c:38:e7:3b:af:b4:fd:30:04:d4:b0:41:2e:dc:8b:21:c8:
         eb:1f:4a:0f:12:31:0c:3a:31:7f:df:37:dd:5e:a0:65:d0:6f:
         ff:77:8a:ea:a4:dc:2b:91:e1:cc:2f:55:f0:e4:f8:fc:fc:a0:
         1e:d2:2e:9f:97:1f:e6:62:d4:e5:01:b3:d5:29:1c:11:0f:8f:
         f2:6a:97:9a:3c:d9:9c:89:35:28:6d:db:eb:8e:ed:e7:af:cb:
         c1:06:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:37:14 2025 by rpki-client