Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa
File:                     3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa (raw, json)
Hash identifier:          LaC9ixPPxpnQxpOPKk4RV8A+FavHV2SB49mB9i3NWeY=
Subject key identifier:   C0:19:C3:1D:0D:CC:44:6E:96:FB:E1:FF:C4:EE:49:E2:A4:2B:34:A2
Certificate issuer:       /CN=46DAFD11EB3A6A21A97F2817CA809B6F844CA226
Certificate serial:       14832EDB4BF732AB794EFDCA71FE99D3FEFFC451
Authority key identifier: 46:DA:FD:11:EB:3A:6A:21:A9:7F:28:17:CA:80:9B:6F:84:4C:A2:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa
Signing time:             Mon 05 May 2025 13:24:42 +0000
ROA not before:           Mon 05 May 2025 13:19:42 +0000
ROA not after:            Mon 04 May 2026 13:24:42 +0000
asID:                     265118
IP address blocks:        143.208.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 17:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:83:2e:db:4b:f7:32:ab:79:4e:fd:ca:71:fe:99:d3:fe:ff:c4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DAFD11EB3A6A21A97F2817CA809B6F844CA226
        Validity
            Not Before: May  5 13:19:42 2025 GMT
            Not After : May  4 13:24:42 2026 GMT
        Subject: CN=C019C31D0DCC446E96FBE1FFC4EE49E2A42B34A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:c1:2b:fe:3b:e9:c5:a9:1e:ac:b1:c6:dd:
                    e5:47:d1:85:32:16:0c:29:6c:2c:87:fb:e9:67:c0:
                    2e:e7:97:10:61:1f:38:2d:38:27:cc:df:b3:cb:3d:
                    99:51:0d:4a:7d:33:a9:3c:6f:b8:ec:16:cd:11:6f:
                    75:b2:30:ec:59:fc:4e:6c:1f:3e:8e:cd:0c:ec:50:
                    89:02:c0:8e:83:d3:c4:47:5b:d2:1d:48:d8:f3:2a:
                    26:2f:20:00:71:97:a9:87:5a:04:b8:63:2c:fa:64:
                    7d:fb:05:8b:b8:e4:2f:51:54:d6:1e:7c:06:4a:29:
                    61:24:80:e9:74:6c:c2:3f:d0:f8:d5:4e:af:1e:cc:
                    bc:1d:8d:a5:2f:10:cf:2e:8a:f5:cd:3d:e3:c6:2c:
                    e6:88:13:b4:72:50:05:34:d9:3c:33:c0:6f:55:c6:
                    f6:7b:a0:46:e0:e6:ec:c7:d5:70:ce:79:87:09:2c:
                    d8:d6:58:1f:c1:10:16:e1:52:01:c6:84:87:1c:fb:
                    25:af:90:0a:ab:96:99:e7:ba:c1:5f:75:51:ca:d3:
                    bb:57:3b:7e:05:3a:63:8f:cb:b5:c1:c1:68:de:3f:
                    42:c1:e6:74:aa:01:7e:b8:d9:58:f8:8d:9d:a6:67:
                    75:6d:84:51:59:cd:e4:a5:15:cc:d2:88:31:3f:b4:
                    30:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:C3:1D:0D:CC:44:6E:96:FB:E1:FF:C4:EE:49:E2:A4:2B:34:A2
            X509v3 Authority Key Identifier:
                keyid:46:DA:FD:11:EB:3A:6A:21:A9:7F:28:17:CA:80:9B:6F:84:4C:A2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DAFD11EB3A6A21A97F2817CA809B6F844CA226.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:33:7d:23:df:4c:08:29:75:94:ed:46:d8:ba:1a:c2:11:87:
         12:98:09:c7:24:2c:af:03:05:3a:6e:69:5f:01:4b:ae:fa:11:
         84:f2:fd:ee:33:ac:02:00:47:90:b8:ab:5c:7e:b9:7e:43:62:
         8e:1d:ef:3f:dc:af:a2:8f:92:b8:f2:bf:2f:eb:0a:25:7c:00:
         16:d5:57:76:d7:9d:e8:cf:e2:dc:8c:1b:11:f5:1d:e1:02:4c:
         ec:71:c9:b9:c7:9e:7c:12:c2:0f:1a:7a:b8:67:0e:be:9f:f9:
         b6:95:a5:06:eb:74:89:a8:d5:e2:5a:2d:f1:85:47:87:d5:16:
         cb:44:ba:4d:dc:c9:b1:f4:10:35:7a:2b:07:dc:42:5c:e4:41:
         7c:c0:44:64:a2:de:ea:e9:47:6d:d8:e9:04:e1:5b:89:d9:1d:
         22:4b:c1:4b:ae:7d:87:85:a4:ff:b5:4c:ae:b5:bd:6d:f0:aa:
         7e:f4:2a:ce:9c:35:b5:a3:81:cd:b8:76:c6:85:8a:da:fe:73:
         fd:06:30:fc:4d:23:96:a3:64:f5:c2:8d:83:5b:85:e2:8d:62:
         50:36:8b:7d:16:c0:e8:9c:7d:41:5f:f8:4c:cb:25:f6:72:81:
         87:4d:ad:01:21:b4:c9:83:cc:9f:25:91:76:16:f3:67:15:e1:
         75:d5:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:27:38 2025 by rpki-client