Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa
File:                     3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          WiVvnuL6aUIaeaOScnCpFo6S2dH+TxVb1qlGACZavYI=
Subject key identifier:   88:95:AF:A9:B8:4B:C4:2D:26:AB:58:BA:9D:9F:19:D2:30:26:14:6F
Certificate issuer:       /CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
Certificate serial:       4CEB060776D1FDAFA3360A0757EA1D2F3C4DF5C0
Authority key identifier: FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa
Signing time:             Tue 19 Aug 2025 14:02:52 +0000
ROA not before:           Tue 19 Aug 2025 13:57:52 +0000
ROA not after:            Tue 18 Aug 2026 14:02:52 +0000
asID:                     262293
IP address blocks:        143.202.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:eb:06:07:76:d1:fd:af:a3:36:0a:07:57:ea:1d:2f:3c:4d:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
        Validity
            Not Before: Aug 19 13:57:52 2025 GMT
            Not After : Aug 18 14:02:52 2026 GMT
        Subject: CN=8895AFA9B84BC42D26AB58BA9D9F19D23026146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:44:0e:8e:41:84:82:ec:da:45:a5:99:51:
                    08:a8:a1:c2:a8:de:7a:44:9e:22:b6:b7:ca:cc:dc:
                    2f:ac:12:db:b7:9e:54:92:88:09:49:a0:b2:d4:a0:
                    29:96:5f:7f:8a:19:66:50:c7:17:37:6a:d6:2e:a6:
                    64:cd:8f:a6:6a:86:25:3b:a2:95:13:b3:81:fa:1f:
                    18:65:a3:84:f6:88:c2:3d:e8:95:10:2d:6f:15:2c:
                    23:ad:71:9c:cd:85:83:f4:03:25:fb:63:1a:2a:27:
                    f5:46:35:e4:d5:87:9c:dc:81:09:5e:41:d3:5c:80:
                    68:d4:14:ec:4a:7a:d8:b1:6e:8d:81:09:9a:2e:d0:
                    f4:9b:61:85:83:39:cd:90:be:d1:ab:d9:46:3e:88:
                    af:68:a0:2a:3f:ac:07:77:96:30:74:b6:e2:2f:1d:
                    31:f2:51:cc:a8:c1:13:25:13:59:c1:d8:02:08:d4:
                    31:c2:03:1c:e2:3a:e2:ce:4d:c7:bd:45:41:2c:9d:
                    67:97:2a:bf:be:6b:48:5d:e1:91:c5:19:a9:38:f4:
                    0e:e6:86:10:5a:3a:4a:90:bb:d1:cf:e6:87:f9:f4:
                    3c:c4:88:a6:9a:46:89:be:6d:ad:13:da:51:00:a3:
                    84:1f:c3:fd:4d:cd:07:a6:65:b9:43:2c:f5:07:51:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:95:AF:A9:B8:4B:C4:2D:26:AB:58:BA:9D:9F:19:D2:30:26:14:6F
            X509v3 Authority Key Identifier:
                keyid:FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3134332e3230322e3234302e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:4a:43:62:1d:51:09:1d:d3:67:0e:dc:d1:c1:b1:8f:b2:0c:
         50:13:b4:57:61:f2:fd:d8:66:9b:51:e8:50:3b:92:f3:c2:71:
         60:d1:2d:4e:8d:fa:37:09:97:34:ea:97:f5:1b:e6:60:c8:56:
         70:89:a0:59:e2:62:ed:2c:d4:3a:7d:4d:db:4e:20:cf:b8:fb:
         88:52:9c:ec:00:01:83:f9:b3:20:11:a6:9d:a6:f5:58:0f:21:
         e6:e1:73:c3:55:99:2f:e9:05:98:38:92:89:fa:a8:01:be:4a:
         80:c6:69:a0:23:cc:92:2d:ce:c0:a9:c1:86:e7:90:6a:57:e3:
         a3:53:b3:92:65:62:31:2d:76:0a:46:e0:b0:b1:db:db:8a:5f:
         43:07:01:1e:1f:0a:cd:b9:aa:8c:08:d4:08:a9:53:8d:0d:7e:
         81:6d:8f:b8:44:34:84:1d:35:9c:ee:4f:a1:f2:a3:cb:6a:18:
         4e:2d:a1:65:6e:a8:ca:59:6c:82:db:93:86:19:37:35:4d:18:
         67:a9:89:45:90:80:ab:aa:80:af:eb:d6:ad:2c:4f:6c:f1:6e:
         c2:a2:20:c7:bb:61:1c:db:6c:0b:f0:e6:cb:5a:b1:e6:1d:5f:
         4b:1a:33:9c:40:b6:31:69:4d:77:de:75:1b:82:5a:d5:fd:51:
         9b:1e:f5:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTOsGB3bR/a+jNgoHV+odLzxN9cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMzMkY1RTc3QkI1NTNBMzA5NkEzM0JCREU3NjgyODdE
MEIxNEIyNjAeFw0yNTA4MTkxMzU3NTJaFw0yNjA4MTgxNDAyNTJaMDMxMTAvBgNV
BAMTKDg4OTVBRkE5Qjg0QkM0MkQyNkFCNThCQTlEOUYxOUQyMzAyNjE0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVakQOjkGEguzaRaWZUQioocKo
3npEniK2t8rM3C+sEtu3nlSSiAlJoLLUoCmWX3+KGWZQxxc3atYupmTNj6ZqhiU7
opUTs4H6Hxhlo4T2iMI96JUQLW8VLCOtcZzNhYP0AyX7YxoqJ/VGNeTVh5zcgQle
QdNcgGjUFOxKetixbo2BCZou0PSbYYWDOc2QvtGr2UY+iK9ooCo/rAd3ljB0tuIv
HTHyUcyowRMlE1nB2AII1DHCAxziOuLOTce9RUEsnWeXKr++a0hd4ZHFGak49A7m
hhBaOkqQu9HP5of59DzEiKaaRom+ba0T2lEAo4Qfw/1NzQemZblDLPUHUbEdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiJWvqbhLxC0mq1i6nZ8Z0jAmFG8wHwYDVR0j
BBgwFoAU/DL153u1U6MJajO73naCh9CxSyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC9GQzMyRjVFNzdCQjU1M0EzMDk2QTMzQkJERTc2ODI4N0QwQjE0QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDMzJGNUU3N0JCNTUzQTMw
OTZBMzNCQkRFNzY4Mjg3RDBCMTRCMjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNDMzMmUzMjMwMzIyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/K8DANBgkqhkiG9w0BAQsFAAOCAQEARUpD
Yh1RCR3TZw7c0cGxj7IMUBO0V2Hy/dhmm1HoUDuS88JxYNEtTo36NwmXNOqX9Rvm
YMhWcImgWeJi7SzUOn1N204gz7j7iFKc7AABg/mzIBGmnab1WA8h5uFzw1WZL+kF
mDiSifqoAb5KgMZpoCPMki3OwKnBhueQalfjo1OzkmViMS12CkbgsLHb24pfQwcB
Hh8KzbmqjAjUCKlTjQ1+gW2PuEQ0hB01nO5PofKjy2oYTi2hZW6oyllsgtuThhk3
NU0YZ6mJRZCAq6qAr+vWrSxPbPFuwqIgx7thHNtsC/Dmy1qx5h1fSxoznEC2MWlN
d951G4Ja1f1Rmx71KA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:58 2025 by rpki-client