Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
File:                     3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa (raw, json)
Hash identifier:          VVbB8CVEDgMpArp72vT582bvOzAEwVCZFsX40Ex8C2I=
Subject key identifier:   2F:DC:65:F8:A5:A4:65:84:BC:80:55:98:D2:66:B2:01:13:85:78:5E
Certificate issuer:       /CN=4BC414301D15F47EFA6717BCA32DE9066FCF3E0B
Certificate serial:       60CD14671958749511CF587C7CCE4FBE184148F6
Authority key identifier: 4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
Signing time:             Tue 24 Jun 2025 14:15:17 +0000
ROA not before:           Tue 24 Jun 2025 14:10:17 +0000
ROA not after:            Tue 23 Jun 2026 14:15:17 +0000
asID:                     265139
IP address blocks:        143.255.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cd:14:67:19:58:74:95:11:cf:58:7c:7c:ce:4f:be:18:41:48:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC414301D15F47EFA6717BCA32DE9066FCF3E0B
        Validity
            Not Before: Jun 24 14:10:17 2025 GMT
            Not After : Jun 23 14:15:17 2026 GMT
        Subject: CN=2FDC65F8A5A46584BC805598D266B2011385785E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:32:09:39:76:35:3c:93:e9:6a:12:30:40:
                    bf:69:3d:a9:de:4e:59:a6:8d:17:86:31:9a:34:0b:
                    61:7c:85:7c:ea:59:91:59:ba:dd:da:78:0c:f4:f7:
                    ea:94:0f:f7:66:c7:4e:a2:8e:c0:45:e3:29:9a:2f:
                    93:86:f5:d4:5b:d8:b1:34:6c:46:a9:53:9a:57:78:
                    34:68:50:e1:27:de:89:01:bf:04:58:21:98:c8:0a:
                    00:b9:04:ca:c7:af:8b:bb:37:c6:c3:cc:1c:e2:f9:
                    12:f9:13:15:7c:68:dd:15:36:ac:fc:8b:0a:73:f7:
                    66:cf:88:99:87:2e:d8:bd:a4:13:37:8f:4e:2c:32:
                    59:74:fc:60:77:7a:a8:df:76:26:5b:bb:90:06:43:
                    4b:52:4b:97:b5:cc:d0:59:74:db:6e:ac:cf:21:f1:
                    21:c1:71:23:ad:82:75:35:5c:af:f6:57:be:fb:ad:
                    72:0b:e7:31:b9:29:84:e5:cb:b1:db:01:f8:a9:36:
                    26:2d:da:6b:57:c0:95:3f:c9:80:ae:20:65:80:76:
                    cd:b9:b0:34:6c:3b:6d:94:8e:c0:03:62:25:13:96:
                    8a:9c:a7:ab:1f:e6:7a:14:c7:c9:86:0f:3b:e7:0a:
                    c6:83:fb:58:23:5b:d4:49:49:db:92:16:86:0f:50:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DC:65:F8:A5:A4:65:84:BC:80:55:98:D2:66:B2:01:13:85:78:5E
            X509v3 Authority Key Identifier:
                keyid:4B:C4:14:30:1D:15:F4:7E:FA:67:17:BC:A3:2D:E9:06:6F:CF:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC414301D15F47EFA6717BCA32DE9066FCF3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:8c:f5:23:2f:eb:a0:f2:a1:83:f3:27:da:de:12:6b:47:
         7f:89:80:aa:88:c2:a9:0e:2f:39:7f:46:8a:96:d2:7d:3e:5b:
         3e:e9:4c:60:fd:85:1c:07:21:0b:91:eb:b3:86:8d:39:3d:ca:
         ce:0d:b2:97:64:21:a5:a2:0a:13:de:62:70:85:86:5b:93:ce:
         a5:dd:39:ee:3b:81:23:36:cf:79:c6:c3:37:1d:c2:87:a2:69:
         8b:f8:c6:58:c5:3f:2a:6a:87:6d:4e:88:ef:a9:8e:bb:af:64:
         20:0b:2e:9e:35:46:98:b7:96:30:cf:20:ec:da:fa:6d:2a:3c:
         6f:25:a6:ac:9f:64:22:b4:d4:9b:15:02:42:f8:62:91:6f:d2:
         28:a7:be:e9:62:bd:4b:85:74:f9:5f:74:3f:de:cb:2d:54:3a:
         fe:65:d6:81:13:51:e9:f6:96:cb:7f:98:93:03:93:15:10:55:
         c8:fd:e7:dd:26:21:49:80:71:b0:aa:d9:9c:fb:57:e8:2a:fb:
         71:1b:99:92:cd:00:64:d2:5b:62:9c:88:b8:15:89:e1:43:7b:
         95:d5:8b:c2:31:50:95:ab:d4:5e:37:c5:f0:b8:0c:a9:64:a4:
         7f:64:dd:b1:f7:b5:a8:b1:81:6e:b3:73:88:f5:55:62:31:83:
         e7:4c:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:44:02 2025 by rpki-client