Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa (raw, json)
Hash identifier:          1EPafl6/j4xS5Z9rsZ4zDN5lPIhIVttNgxoQkt7bNl4=
Subject key identifier:   9A:24:B4:6C:51:86:9F:35:4C:67:00:C7:13:F6:1D:2D:58:98:47:0D
Certificate issuer:       /CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
Certificate serial:       78CC0FFC6275A6DFFCAD6416CF2514622E22444B
Authority key identifier: 18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa
Signing time:             Wed 24 Sep 2025 18:14:26 +0000
ROA not before:           Wed 24 Sep 2025 18:09:26 +0000
ROA not after:            Wed 23 Sep 2026 18:14:26 +0000
asID:                     263604
IP address blocks:        143.202.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cc:0f:fc:62:75:a6:df:fc:ad:64:16:cf:25:14:62:2e:22:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D2B9D6E54ED795E9B7828E042E38E75E901E9F
        Validity
            Not Before: Sep 24 18:09:26 2025 GMT
            Not After : Sep 23 18:14:26 2026 GMT
        Subject: CN=9A24B46C51869F354C6700C713F61D2D5898470D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:44:36:02:07:9d:2a:bc:75:d5:98:8c:40:
                    b4:f7:08:ae:c1:ae:75:e5:61:d7:d9:fa:09:40:d8:
                    47:63:82:3b:4f:a0:96:8d:bd:7f:1c:dc:46:79:ec:
                    6b:1a:cf:05:a6:eb:d0:72:df:64:47:90:4e:ed:d8:
                    3c:7d:d9:ce:cb:89:ab:81:e6:39:e1:b6:82:be:31:
                    b2:cd:6e:36:44:83:54:f2:31:39:ee:28:5f:77:49:
                    32:5a:98:08:4e:b2:23:6e:e7:bd:40:67:78:b3:02:
                    c6:d4:a6:c1:49:58:2d:d0:71:99:bb:a2:9a:2f:a6:
                    37:48:c2:15:c9:f8:53:40:62:50:b2:a8:40:24:2f:
                    46:56:42:35:d9:eb:a7:81:51:a6:60:8d:0a:ef:b8:
                    8f:96:ef:2c:88:8f:be:7e:8c:87:32:92:fb:63:f8:
                    93:54:4b:6a:b8:c8:41:59:2d:be:01:5f:49:df:d8:
                    4c:2f:90:7d:0a:8c:20:ca:a8:58:60:25:21:5e:05:
                    1c:84:3e:28:37:f6:d5:17:49:84:aa:f6:5c:60:d9:
                    37:1d:1d:e1:26:6f:d4:a1:f8:a8:bf:aa:67:c1:ce:
                    ef:0f:32:9d:e2:ee:a7:fe:d1:42:2d:1f:4c:27:09:
                    52:b0:54:c5:c3:b7:25:39:7c:20:a9:4b:0e:3f:2c:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:B4:6C:51:86:9F:35:4C:67:00:C7:13:F6:1D:2D:58:98:47:0D
            X509v3 Authority Key Identifier:
                keyid:18:D2:B9:D6:E5:4E:D7:95:E9:B7:82:8E:04:2E:38:E7:5E:90:1E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18D2B9D6E54ED795E9B7828E042E38E75E901E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/3134332e3230322e3131342e302f32332d3233203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:70:bd:9d:a1:af:2f:5b:3e:73:15:6f:55:5f:98:9e:ad:da:
         59:70:05:38:db:71:98:14:9c:ea:26:c8:14:c7:21:4e:37:d8:
         d7:23:95:f9:2a:e9:3e:0d:20:85:84:24:f5:ca:02:79:18:24:
         de:2d:b2:83:98:ad:c3:2c:11:5d:51:c3:56:6e:a5:6c:7d:aa:
         53:51:65:09:72:13:b0:2b:9b:d9:81:8f:8a:38:03:e6:63:a7:
         92:77:1f:8b:cc:8c:d7:82:38:c9:3a:a2:a9:28:c3:d4:97:06:
         8f:6e:69:f2:5d:40:9b:d6:52:5f:45:3e:cc:a1:a9:fb:23:41:
         42:80:c1:bd:fa:62:63:73:55:04:9e:3b:3f:3e:7d:78:db:63:
         1e:7b:89:5a:fe:6c:6e:1b:8b:22:f7:86:46:f6:a8:a5:7f:77:
         e5:24:98:12:d4:07:b7:a4:f1:92:37:7e:34:1d:f8:87:28:da:
         fb:81:c9:c1:d1:fe:a8:67:68:71:5d:a5:6c:15:5f:62:3f:38:
         05:2e:0d:4c:c4:be:4d:c8:c9:c9:fa:48:21:3a:ee:c1:12:26:
         07:8f:d6:20:86:85:24:7b:82:00:2a:a0:ef:1e:04:c4:11:3a:
         e1:27:7b:99:64:85:74:5f:3b:21:2e:cf:48:9e:9a:17:54:54:
         24:c4:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:20 2025 by rpki-client