Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa
File:                     3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa (raw, json)
Hash identifier:          xIz3vaEwp+Rd/0KJXu3fapmSsHN6tZ8Mhz5bKAccjGI=
Subject key identifier:   5B:EA:1A:E7:1F:5C:69:23:F3:40:68:89:7E:FF:DD:81:FC:CC:F7:25
Certificate issuer:       /CN=4BC414301D15F47EFA6717BCA32DE9066FCF3E0B
Certificate serial:       5E795F3C64BE10FB4F9D63CC9286E5C7A1B5E63C
Authority key identifier: 4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa
Signing time:             Tue 24 Jun 2025 14:15:37 +0000
ROA not before:           Tue 24 Jun 2025 14:10:37 +0000
ROA not after:            Tue 23 Jun 2026 14:15:37 +0000
asID:                     265139
IP address blocks:        143.255.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:79:5f:3c:64:be:10:fb:4f:9d:63:cc:92:86:e5:c7:a1:b5:e6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC414301D15F47EFA6717BCA32DE9066FCF3E0B
        Validity
            Not Before: Jun 24 14:10:37 2025 GMT
            Not After : Jun 23 14:15:37 2026 GMT
        Subject: CN=5BEA1AE71F5C6923F34068897EFFDD81FCCCF725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:90:bf:e4:46:55:31:52:8f:35:8e:d6:bc:f4:
                    5e:91:4f:71:76:61:40:e6:cc:ae:27:1e:de:4c:c1:
                    c4:55:1b:d8:75:53:e5:02:e2:cc:9a:44:f3:d7:ad:
                    ac:8e:1a:9f:68:1a:df:d2:cd:5b:3f:fa:71:ef:91:
                    a5:63:2e:1a:b8:e2:85:7c:79:04:f3:68:f1:ed:b0:
                    d6:63:b8:5b:fd:20:43:00:26:55:66:61:06:f8:95:
                    65:fe:e3:f7:ba:44:19:2e:71:f8:fe:0b:5e:61:91:
                    fe:04:95:6d:55:f5:1e:f0:1d:ad:6a:18:ff:73:40:
                    4d:8a:c2:12:40:48:72:b4:79:9e:6e:20:a3:fb:6f:
                    3b:3a:f1:af:2f:72:4d:fa:9d:f4:3d:77:5d:22:da:
                    51:a6:b7:da:62:df:7e:3f:e9:6b:4c:87:64:34:54:
                    fb:be:d9:ae:db:cf:02:96:b0:6e:e5:82:7d:ba:76:
                    69:14:50:78:f3:62:1a:5e:e5:c3:85:d1:30:01:99:
                    5f:69:de:fb:ea:ff:33:cb:f5:78:20:e9:ff:86:0d:
                    d7:e6:ee:dc:ff:57:0d:8a:d2:36:21:e8:f9:19:69:
                    d4:c6:2f:70:97:f0:ee:fc:36:a1:53:23:6d:f0:cc:
                    03:76:de:32:f6:2a:25:6d:c4:da:e8:41:ee:5c:6a:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:1A:E7:1F:5C:69:23:F3:40:68:89:7E:FF:DD:81:FC:CC:F7:25
            X509v3 Authority Key Identifier:
                keyid:4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:f7:89:19:75:0a:36:28:c3:b7:a4:04:9a:b7:65:c6:3c:
         fc:5f:88:d9:1c:ad:09:45:78:dc:fc:5e:9c:6d:6c:06:8b:84:
         ed:86:61:9b:ad:ea:bc:49:49:49:f2:7b:a5:33:f3:ab:fd:a4:
         7e:f0:61:a7:e9:4f:76:34:1e:0f:b4:13:1c:16:08:82:4f:a7:
         d2:c0:ae:fa:6c:fb:6d:78:ac:9f:73:f0:45:6d:2f:f3:f1:8a:
         d0:43:d7:14:fd:af:ce:42:79:74:3e:29:f2:5f:8b:6c:36:6e:
         81:fa:5a:2d:fc:df:15:9a:4d:72:28:a3:e6:3b:ca:ad:1f:70:
         03:47:a1:5b:b3:06:30:b3:79:2b:36:42:ae:a1:57:38:4a:76:
         60:d1:7f:f7:18:ff:b9:92:3e:2c:c7:c0:5c:33:b4:96:4b:ae:
         c2:2e:c8:80:b8:54:b6:79:12:c0:5c:71:c0:2c:0b:c9:87:2e:
         32:72:2d:3e:47:a3:d2:45:25:f5:02:39:ac:ab:a8:af:93:fe:
         54:c9:7a:cf:99:f1:17:bc:2e:fa:05:1e:25:bf:4c:3d:40:4b:
         32:0b:3a:69:06:42:92:07:66:89:38:76:01:21:c2:21:76:23:
         45:53:0a:9f:69:02:dc:c3:fe:40:5b:fa:ad:16:ae:da:c5:0f:
         f7:b8:3e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:42:31 2025 by rpki-client