Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa
File:                     3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa (raw, json)
Hash identifier:          AuklAcaYEO67Ag62IqqvLQlj/Ce39O34K14bP6boYIg=
Subject key identifier:   D7:C8:6E:FB:AC:C3:8E:35:37:26:40:84:51:52:82:99:4F:CB:1D:72
Certificate issuer:       /CN=F4735C985E6A593DA454F47D310B234BEA1E0A2E
Certificate serial:       629556C85AC5F29761CA8B6A2F39244FFDCA1CD0
Authority key identifier: F4:73:5C:98:5E:6A:59:3D:A4:54:F4:7D:31:0B:23:4B:EA:1E:0A:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa
Signing time:             Wed 01 Oct 2025 17:56:06 +0000
ROA not before:           Wed 01 Oct 2025 17:51:06 +0000
ROA not after:            Wed 30 Sep 2026 17:56:06 +0000
asID:                     265118
IP address blocks:        143.208.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 13:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:95:56:c8:5a:c5:f2:97:61:ca:8b:6a:2f:39:24:4f:fd:ca:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4735C985E6A593DA454F47D310B234BEA1E0A2E
        Validity
            Not Before: Oct  1 17:51:06 2025 GMT
            Not After : Sep 30 17:56:06 2026 GMT
        Subject: CN=D7C86EFBACC38E3537264084515282994FCB1D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:b8:ba:c4:85:c2:54:e1:8b:9d:f3:88:dc:
                    44:16:e6:aa:3e:3a:43:33:0b:cf:a5:89:08:3b:d7:
                    1b:2b:bc:af:cb:d4:5d:a3:7a:62:ce:27:82:c3:b8:
                    75:a1:9e:90:db:50:75:39:e9:1a:cb:60:22:ae:d0:
                    ad:48:17:33:87:cd:6c:f2:c5:84:1b:82:43:ec:80:
                    31:78:0d:9a:8b:f1:d6:8d:d1:23:29:c6:d4:7a:62:
                    30:c7:b7:bd:1f:8f:32:38:5c:96:7a:f4:15:ca:f8:
                    d8:5d:62:d2:42:c4:ee:46:e4:72:e7:9d:1e:ae:f8:
                    d3:61:f3:a6:61:c2:eb:13:ff:3a:ed:f9:82:64:b7:
                    de:cd:53:4e:04:50:c1:63:5f:b5:d1:31:0f:58:28:
                    8d:c1:07:bb:af:e6:17:e6:56:aa:a0:a3:af:32:58:
                    61:e0:c9:d3:fa:70:2b:7a:7b:47:c8:21:72:e5:f7:
                    c3:7d:8b:e8:09:12:63:1a:d9:9f:27:0b:98:05:f8:
                    b0:af:ac:c3:9b:17:5c:26:eb:24:17:f8:f0:6a:91:
                    8b:09:b6:c6:35:00:fb:b2:42:fa:2b:77:23:d0:74:
                    7d:23:4c:8b:ec:4b:54:29:66:24:c8:f9:e1:82:66:
                    59:fc:82:ac:84:f9:25:3b:d2:c1:6d:c1:68:34:8b:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C8:6E:FB:AC:C3:8E:35:37:26:40:84:51:52:82:99:4F:CB:1D:72
            X509v3 Authority Key Identifier:
                keyid:F4:73:5C:98:5E:6A:59:3D:A4:54:F4:7D:31:0B:23:4B:EA:1E:0A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/F4735C985E6A593DA454F47D310B234BEA1E0A2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4735C985E6A593DA454F47D310B234BEA1E0A2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138352e302f32342d3234203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:19:9c:e8:0c:b9:c4:a3:b4:09:03:43:8d:2f:c3:2f:99:
         9e:bd:5c:c1:08:1e:30:cd:c9:a7:b6:b9:7d:32:cd:73:af:4b:
         79:d4:73:9d:40:79:b2:47:10:fd:9a:f5:bc:53:64:4e:0a:4c:
         a5:e5:a3:58:53:d2:32:f8:8e:d8:23:40:7f:07:4e:8a:00:4f:
         98:91:3e:87:9a:c5:35:22:86:d4:66:4a:07:23:0f:fa:d0:28:
         ac:0e:13:99:6e:6b:d8:1e:48:e9:a6:e7:b8:bd:76:32:c1:7a:
         15:14:7b:c8:d7:6d:c3:9f:03:b2:73:c8:93:2d:12:3a:cf:f4:
         bd:4d:95:c8:bb:8b:bd:62:4c:9a:be:97:02:63:6f:30:21:39:
         78:04:07:38:6d:93:84:10:70:1a:f2:2a:48:53:09:13:f8:e0:
         2a:17:7d:91:14:30:77:6d:c5:e6:f0:0a:e6:04:1e:8b:3a:6e:
         65:8c:03:c4:d5:a1:05:ed:bb:00:3b:50:bc:b0:3b:ae:46:bb:
         98:e6:e7:49:e0:8d:57:e8:3d:23:98:4a:26:4b:89:35:c3:7b:
         52:96:93:53:59:53:db:84:0a:7f:23:10:96:46:e2:66:8d:81:
         14:45:17:63:10:4b:39:cc:18:f1:1d:a5:41:4b:51:c5:f8:a2:
         d7:43:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:05:40 2025 by rpki-client