Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32342d3234203d3e20323634303232.roa
File:                     3134332e302e3232322e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          t7bb47e8Src7Ct2fUqzr9d8BWkVE8OMNCMwpAZPx20k=
Subject key identifier:   9C:E9:5C:7E:68:25:63:FA:D0:61:AA:88:B1:B7:8F:AF:65:96:57:F2
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       373CC62D06A249B1B615D216854CFB3042695053
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 22 Aug 2025 17:19:56 +0000
ROA not before:           Fri 22 Aug 2025 17:14:56 +0000
ROA not after:            Fri 21 Aug 2026 17:19:56 +0000
asID:                     264022
IP address blocks:        143.0.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3c:c6:2d:06:a2:49:b1:b6:15:d2:16:85:4c:fb:30:42:69:50:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Aug 22 17:14:56 2025 GMT
            Not After : Aug 21 17:19:56 2026 GMT
        Subject: CN=9CE95C7E682563FAD061AA88B1B78FAF659657F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:c8:39:0d:cc:54:8f:6c:6a:c1:f0:98:0c:
                    be:57:46:9a:69:27:24:0d:79:06:c5:4f:c5:c0:2c:
                    f3:c1:d3:74:63:cf:59:21:cf:fe:6b:b0:de:b6:8a:
                    a3:03:ba:7c:7e:39:a5:bc:05:fe:ed:33:76:88:5f:
                    40:bf:bf:92:c0:10:54:ba:ac:c2:f5:84:b8:a2:61:
                    33:34:f4:59:9c:42:a2:f3:c0:ac:b9:41:5d:d0:0b:
                    5f:10:c9:13:4a:69:fb:21:6e:fc:a8:53:13:45:4a:
                    44:6c:e5:3c:38:7d:43:4c:e9:be:74:43:18:a9:9a:
                    28:0d:36:57:96:8f:b3:95:1e:05:9f:98:36:1d:77:
                    a1:64:99:e4:21:2b:d6:db:6e:9e:35:9f:77:83:7b:
                    e2:e6:86:eb:9e:24:54:d4:cb:5c:9b:00:68:ec:f1:
                    60:04:b5:07:3a:2b:8d:c8:b4:29:7b:92:1e:69:16:
                    fe:35:5b:5e:97:50:5e:1b:b3:fc:5d:69:7d:51:d4:
                    6e:00:6e:93:f2:96:81:8a:56:80:3c:a7:9e:49:98:
                    97:73:25:c0:9e:0d:d9:d3:1c:29:8c:d7:c9:e1:2f:
                    4f:e6:8e:c0:ef:eb:18:78:43:65:83:2f:77:e9:db:
                    b0:5f:6e:77:93:57:c5:6c:24:d0:82:35:d1:22:77:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:5C:7E:68:25:63:FA:D0:61:AA:88:B1:B7:8F:AF:65:96:57:F2
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232322e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:4c:cb:1e:fc:17:53:0a:09:2a:74:50:5b:be:56:62:af:
         87:e9:47:37:b7:f1:65:38:d6:ff:95:63:d5:56:af:fd:d4:21:
         ff:d4:00:6c:5f:2a:9e:90:07:d0:9d:0c:89:de:de:f6:82:da:
         29:4c:e9:e0:3c:b5:4e:7e:f2:94:c4:85:d8:70:59:9a:e6:ca:
         0e:04:cc:99:be:42:5c:71:56:ea:9a:d6:43:11:f4:42:41:b3:
         c5:fb:54:ff:5d:b6:31:10:3a:08:6c:f0:73:1d:0a:a1:b8:21:
         dc:45:6e:8a:8f:19:53:81:b9:c5:a0:f8:02:87:cc:bd:56:65:
         ca:b6:1d:e4:73:e3:05:0f:26:ad:52:67:01:19:5e:23:17:fb:
         73:d9:8f:aa:7b:02:8f:23:e0:85:d5:8a:9a:cd:38:00:7f:99:
         2e:47:a8:1b:7a:49:50:5d:dd:32:f8:12:c5:54:ed:9e:15:79:
         ca:a4:94:69:49:de:a2:fa:02:92:f7:c5:72:9b:49:9c:23:15:
         85:95:ee:1f:ad:79:2c:77:f6:d4:28:0b:52:da:19:3e:be:f1:
         45:b2:ce:d6:b6:b1:02:04:df:dd:ac:6f:d7:c1:b8:93:d2:14:
         9d:ad:0b:4b:50:f3:f4:fc:b8:98:af:99:73:17:da:73:f0:07:
         6a:da:48:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNzzGLQaiSbG2FdIWhUz7MEJpUFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzMDQ3Q0ZDQTczMjc3MDI2QzQxQkZEOTMwQ0MzMDRG
NUYzNDJCNzAeFw0yNTA4MjIxNzE0NTZaFw0yNjA4MjExNzE5NTZaMDMxMTAvBgNV
BAMTKDlDRTk1QzdFNjgyNTYzRkFEMDYxQUE4OEIxQjc4RkFGNjU5NjU3RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Qcg5DcxUj2xqwfCYDL5XRppp
JyQNeQbFT8XALPPB03Rjz1khz/5rsN62iqMDunx+OaW8Bf7tM3aIX0C/v5LAEFS6
rML1hLiiYTM09FmcQqLzwKy5QV3QC18QyRNKafshbvyoUxNFSkRs5Tw4fUNM6b50
QxipmigNNleWj7OVHgWfmDYdd6FkmeQhK9bbbp41n3eDe+LmhuueJFTUy1ybAGjs
8WAEtQc6K43ItCl7kh5pFv41W16XUF4bs/xdaX1R1G4AbpPyloGKVoA8p55JmJdz
JcCeDdnTHCmM18nhL0/mjsDv6xh4Q2WDL3fp27BfbneTV8VsJNCCNdEid/XpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnOlcfmglY/rQYaqIsbePr2WWV/IwHwYDVR0j
BBgwFoAU9jBHz8pzJ3AmxBv9kwzDBPXzQrcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJXTHVYd2N3N0N5Yzh2WGh2YXllM0RHNHJhZkxjZ0xQOVFkQ2UzWXFN
ZHEvMC9GNjMwNDdDRkNBNzMyNzcwMjZDNDFCRkQ5MzBDQzMwNEY1RjM0MkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MzA0N0NGQ0E3MzI3NzAy
NkM0MUJGRDkzMENDMzA0RjVGMzQyQjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyV0x1WHdjdzdDeWM4dlhodmF5ZTNERzRyYWZMY2dMUDlRZENlM1lxTWRxLzAv
MzEzNDMzMmUzMDJlMzIzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDeMA0GCSqGSIb3DQEBCwUAA4IBAQBETkzLHvwX
UwoJKnRQW75WYq+H6Uc3t/FlONb/lWPVVq/91CH/1ABsXyqekAfQnQyJ3t72gtop
TOngPLVOfvKUxIXYcFma5soOBMyZvkJccVbqmtZDEfRCQbPF+1T/XbYxEDoIbPBz
HQqhuCHcRW6KjxlTgbnFoPgCh8y9VmXKth3kc+MFDyatUmcBGV4jF/tz2Y+qewKP
I+CF1YqazTgAf5kuR6gbeklQXd0y+BLFVO2eFXnKpJRpSd6i+gKS98Vym0mcIxWF
le4frXksd/bUKAtS2hk+vvFFss7WtrECBN/drG/XwbiT0hSdrQtLUPP0/LiYr5lz
F9pz8Adq2kga
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:19 2025 by rpki-client