Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
File:                     3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          L580iqc/JuZ1mUfcfb9t06erOFLmMZ71GFiSoXOsccI=
Subject key identifier:   B6:DF:95:3C:CC:9F:06:40:4A:FE:E7:F9:22:A9:6D:0A:C8:21:72:87
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       6B30B5090DD2F380727229E2C6D49A15FBC7FFFB
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa
Signing time:             Sat 02 Aug 2025 12:58:20 +0000
ROA not before:           Sat 02 Aug 2025 12:53:20 +0000
ROA not after:            Sat 01 Aug 2026 12:58:20 +0000
asID:                     262669
IP address blocks:        143.202.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 02:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:b5:09:0d:d2:f3:80:72:72:29:e2:c6:d4:9a:15:fb:c7:ff:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Aug  2 12:53:20 2025 GMT
            Not After : Aug  1 12:58:20 2026 GMT
        Subject: CN=B6DF953CCC9F06404AFEE7F922A96D0AC8217287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:80:c4:45:f1:da:96:1f:bb:54:ef:60:5a:
                    79:65:27:af:8f:2b:9b:55:a6:42:ee:21:7f:20:cc:
                    1b:f4:1a:61:1b:6c:6f:71:73:a8:c3:93:4d:c6:3f:
                    69:e1:ef:75:21:7e:7b:58:dd:78:92:d4:eb:85:72:
                    2d:8d:73:f9:fe:90:ae:dc:da:71:83:bc:c9:4b:14:
                    c1:71:54:10:66:20:d7:c2:ac:48:56:e6:26:ce:94:
                    f5:88:5c:fd:26:77:c2:bd:a4:5c:96:9c:06:5f:3d:
                    8b:fc:c0:54:a9:56:23:ff:89:5b:8b:55:04:0d:15:
                    97:fd:46:f6:a3:88:9e:e3:7d:fa:c8:b4:4d:b5:cc:
                    66:81:73:5b:e7:f5:40:37:d8:ae:1e:e0:d6:86:d0:
                    b6:73:80:50:14:ef:bb:4a:7f:dc:f2:ff:36:23:f8:
                    e6:21:15:75:73:b4:c4:9e:0f:82:6b:d9:21:1d:bc:
                    04:f7:55:a2:90:73:5c:df:d8:6b:5c:e1:bd:77:c0:
                    20:65:10:9f:4e:0f:00:a6:34:44:5e:86:ba:3f:8a:
                    47:0e:5d:84:f2:68:80:22:31:98:43:9c:bb:dc:3c:
                    bb:b5:75:1a:75:51:9b:f1:3e:72:e9:c2:79:7a:37:
                    aa:bf:ec:61:fb:78:b1:67:44:85:74:6e:5f:dd:33:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:95:3C:CC:9F:06:40:4A:FE:E7:F9:22:A9:6D:0A:C8:21:72:87
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3134332e3230322e3134382e302f32322d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:3e:39:f4:63:a3:fe:ec:e0:ff:16:75:e0:fa:cf:d7:83:aa:
         b7:50:7f:d9:7a:c5:8c:19:bf:70:d6:6f:eb:a9:72:7b:31:98:
         5a:d3:c7:e7:7e:40:71:ea:6f:d7:d2:e3:e9:e4:6a:53:14:9c:
         bd:fb:6a:0d:5d:46:8f:61:de:7e:84:8c:c4:eb:4d:e9:c9:ab:
         d2:07:e4:d2:39:0b:a8:da:e3:02:d7:71:61:ca:65:af:2a:32:
         b3:dc:8b:a1:7d:ed:0e:0b:ff:34:24:f2:16:ec:f8:64:ad:05:
         67:33:c9:8e:f1:29:04:13:bb:bd:47:35:0d:df:d0:80:08:f7:
         65:f9:aa:fa:49:8a:7e:e0:09:8c:c4:65:50:92:88:cb:93:b0:
         10:3c:ea:72:b2:40:7c:be:a8:09:85:57:0f:d5:5b:53:68:fd:
         5c:e0:2f:bb:3e:7e:a9:b3:fc:a7:4d:cc:09:44:f0:2c:9d:bc:
         bc:c7:15:df:54:3f:ce:44:d1:f9:48:9e:87:3a:ff:ef:e6:0d:
         04:c4:31:10:1e:db:7a:1f:28:8e:30:83:b3:c4:5d:90:b5:e2:
         90:63:4f:c4:5a:db:f6:00:38:9b:2f:cb:9c:50:88:f0:88:a5:
         63:75:1d:ce:c7:2d:79:2e:8b:51:3b:7c:53:42:da:ac:e4:00:
         8e:41:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:37:33 2025 by rpki-client