Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa
File:                     3134332e302e3138342e302f32322d3234203d3e20323634303133.roa (raw, json)
Hash identifier:          iqRP9+N612LMf/P4qfXtS/78l0PnkFrKqWePlS5S/8o=
Subject key identifier:   2A:0B:A5:2B:EF:07:9F:3D:AD:D8:03:6F:81:E2:DC:D4:29:EF:21:66
Certificate issuer:       /CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
Certificate serial:       7A46A089A64CF1AACDCF1EB952F6821C937B6545
Authority key identifier: 7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa
Signing time:             Tue 19 Aug 2025 14:32:21 +0000
ROA not before:           Tue 19 Aug 2025 14:27:21 +0000
ROA not after:            Tue 18 Aug 2026 14:32:21 +0000
asID:                     264013
IP address blocks:        143.0.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl
                          rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:a0:89:a6:4c:f1:aa:cd:cf:1e:b9:52:f6:82:1c:93:7b:65:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE47B22E1D00A16DC5F3525694FF71E9831FBEF
        Validity
            Not Before: Aug 19 14:27:21 2025 GMT
            Not After : Aug 18 14:32:21 2026 GMT
        Subject: CN=2A0BA52BEF079F3DADD8036F81E2DCD429EF2166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:e7:5c:1c:72:ed:48:c4:0b:1b:85:da:4f:
                    3d:c9:8e:58:1a:14:a8:34:e4:cd:a7:43:a5:65:67:
                    26:73:bf:dd:a7:d6:f1:2a:5a:b1:82:67:99:8e:7b:
                    b7:83:6f:b7:04:32:d4:c8:5e:4e:4d:7a:26:c3:17:
                    e5:3b:8e:29:ad:89:76:54:70:d8:2c:31:08:70:f4:
                    9a:fa:d7:0f:84:9d:99:c0:f2:f5:52:a0:10:9a:ec:
                    f4:5f:4c:89:af:fa:48:fe:38:c8:88:87:8e:e1:8d:
                    af:70:62:2e:f3:8b:1b:ad:61:45:b7:3d:34:4b:6d:
                    06:d6:2c:54:2b:7e:2e:f2:69:21:b8:fa:91:7f:b1:
                    ec:23:71:4f:c5:83:5f:ad:00:60:66:54:d0:5e:ce:
                    5e:83:6e:cc:cf:06:2e:11:e8:36:8c:26:dc:d7:fd:
                    c9:19:2d:7d:7e:a6:ab:43:c1:78:c1:21:ac:4b:14:
                    1f:52:91:77:da:4f:24:46:34:7e:ee:f3:64:f1:af:
                    14:17:65:87:ed:62:a2:97:0c:e0:cf:39:c7:70:0e:
                    ee:8a:b0:95:70:3c:26:16:07:97:42:58:b1:16:7a:
                    16:6a:51:d4:44:2c:69:fe:a4:35:13:16:81:87:d6:
                    e8:af:32:7f:0a:57:96:6a:0f:bb:b0:14:5a:d8:bc:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:A5:2B:EF:07:9F:3D:AD:D8:03:6F:81:E2:DC:D4:29:EF:21:66
            X509v3 Authority Key Identifier:
                keyid:7F:E4:7B:22:E1:D0:0A:16:DC:5F:35:25:69:4F:F7:1E:98:31:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FE47B22E1D00A16DC5F3525694FF71E9831FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGKGTwbDxurMrETjXyejjjPSqDV4C1dsCybJPWSdBFTd/0/3134332e302e3138342e302f32322d3234203d3e20323634303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:58:53:d3:de:c7:b3:92:e5:dc:bb:94:8b:69:4f:f6:3d:
         b5:8b:7a:31:bf:b3:29:13:94:0f:53:a5:6e:5e:d7:d8:25:27:
         5a:1a:5c:86:c7:18:48:1a:a3:d7:44:fe:89:ca:78:07:3a:65:
         49:59:a5:b4:8c:8e:d3:16:28:0a:16:ff:ca:93:43:b7:b4:5a:
         a6:19:da:e4:5e:f5:51:b2:d3:92:c1:6f:76:9d:3e:1b:41:f2:
         c6:a5:ac:70:e5:7d:e7:8e:55:b6:17:ca:14:de:71:8f:a6:25:
         ee:1d:87:45:4d:57:1e:cb:81:c1:76:e1:57:dc:1b:20:86:61:
         04:d5:58:85:68:35:53:28:88:3c:b7:55:23:b9:e7:d9:e6:01:
         6f:45:00:fd:cb:73:c0:2e:c1:f7:97:31:bf:c0:77:e8:1c:65:
         4c:2d:94:f8:ac:38:d4:4e:e8:a8:93:2b:4f:7b:7f:76:51:1f:
         19:1e:de:d2:e4:63:77:ca:3c:08:e1:5b:4e:ba:5a:eb:a1:d7:
         af:50:6d:ca:ce:24:9b:33:f5:9b:47:ec:c9:9c:cd:3f:bb:d0:
         4b:03:9d:6e:6b:ba:f9:33:12:53:54:c2:32:5f:9e:d2:49:b4:
         97:82:83:bb:91:a0:26:e2:65:cc:b5:1e:19:4e:34:48:24:20:
         3b:c9:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:51 2025 by rpki-client