Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa
File:                     3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (raw, json)
Hash identifier:          7vlAhbb3FI7QyEjtwP0+o0wEbBe10eFGaDw+xDEygn0=
Subject key identifier:   05:8A:D3:76:E2:88:C9:E1:F4:5B:5E:54:6C:D4:1A:60:C9:F9:19:24
Certificate issuer:       /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
Certificate serial:       2C3750E21AB6CE79CA86B8BBD46753B2C6ACFFAF
Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa
Signing time:             Mon 13 Oct 2025 14:36:19 +0000
ROA not before:           Mon 13 Oct 2025 14:31:19 +0000
ROA not after:            Mon 12 Oct 2026 14:36:19 +0000
asID:                     263623
IP address blocks:        143.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:37:50:e2:1a:b6:ce:79:ca:86:b8:bb:d4:67:53:b2:c6:ac:ff:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8
        Validity
            Not Before: Oct 13 14:31:19 2025 GMT
            Not After : Oct 12 14:36:19 2026 GMT
        Subject: CN=058AD376E288C9E1F45B5E546CD41A60C9F91924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:3a:30:6a:3a:19:c3:12:b2:a4:06:f3:75:
                    bf:1b:f7:a0:05:c4:19:ca:de:11:c1:fb:42:65:9e:
                    d3:92:93:7e:67:4b:73:32:97:af:e8:19:e0:19:49:
                    41:89:92:08:d5:09:22:a4:1e:e2:8a:a3:56:1d:36:
                    79:99:bb:07:5e:11:02:50:2b:09:c6:54:89:85:34:
                    5c:6a:be:cc:69:4e:21:e9:12:2a:d7:a7:0a:7c:96:
                    c7:e5:47:e4:c7:06:2b:7e:78:67:aa:9a:73:69:a2:
                    c9:2d:de:95:90:f0:71:24:d3:02:43:dc:c4:58:90:
                    e5:b5:9f:6e:56:de:13:68:79:ff:94:72:47:64:3c:
                    65:6b:f8:b4:fb:32:fb:be:87:11:04:87:88:20:ea:
                    30:15:68:ed:38:a6:ef:f2:12:29:4d:00:7d:6d:72:
                    0d:e8:6d:98:8c:bf:f5:7f:3d:65:32:65:8d:c6:af:
                    a1:fd:ef:2c:2b:41:de:98:13:2d:68:6a:ef:69:90:
                    49:ac:62:21:ff:8b:a9:0e:c0:3c:da:f4:3e:c2:d0:
                    b6:08:45:24:80:fc:88:49:01:80:35:c0:4a:92:5a:
                    92:21:0f:87:4c:3b:3e:99:2c:a3:77:94:5a:53:82:
                    19:fc:d0:95:3e:40:59:a3:fd:b1:39:81:cd:7b:45:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8A:D3:76:E2:88:C9:E1:F4:5B:5E:54:6C:D4:1A:60:C9:F9:19:24
            X509v3 Authority Key Identifier:
                keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:b2:ed:a8:e2:c0:85:67:f1:43:60:7f:67:97:c6:92:70:f7:
         ae:69:7e:e4:e6:d0:17:3f:d1:41:47:8e:e3:bd:7e:b7:14:db:
         a3:ba:cf:ae:52:fa:2c:af:06:e9:9a:ef:34:07:c4:0d:5d:68:
         97:0c:08:9c:0e:49:ff:09:84:34:9d:3a:88:5b:8a:b8:9f:66:
         f6:27:f0:fc:16:0b:95:b9:01:e2:51:85:04:65:9d:8a:58:d5:
         6f:6d:72:22:ea:a6:2e:ca:9b:0d:6c:af:11:a9:74:3a:e0:5b:
         3f:52:3b:18:e9:7f:d7:fc:d6:a1:2b:0a:4a:26:34:4f:fc:d5:
         da:a8:b0:a4:94:f0:3f:75:ed:10:70:59:4d:4b:99:ee:1c:be:
         b8:c3:02:a6:80:20:ec:ae:ca:72:5e:cb:16:92:54:66:da:b9:
         83:bb:39:46:84:f0:3a:b1:bc:05:39:9a:55:e0:ed:4b:44:e8:
         70:85:8e:53:ff:55:96:14:4b:d0:fb:04:dd:61:c1:d3:1b:9e:
         51:1f:77:88:5c:58:73:de:58:54:5c:30:62:eb:ce:30:de:99:
         d1:9c:50:92:7e:ef:87:c7:dc:7a:5e:64:ea:09:d4:ef:63:28:
         b1:16:2b:11:4e:a9:e5:76:5f:91:e3:9d:d5:2f:38:bb:4c:64:
         64:87:37:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:44 2025 by rpki-client