Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32332d3233203d3e203532393136.roa (raw, json)
Hash identifier:          REbEqYRQdUjvMhT8ooRLOAO5VsYeoKE7Qty1klotpFM=
Subject key identifier:   B4:91:75:1E:FB:44:F4:88:47:79:4B:48:AF:7F:E4:87:7F:74:0C:EE
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       77484E63C3030AA6BA21CE69864598A2FB1841E0
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:44 +0000
ROA not before:           Thu 01 May 2025 20:39:44 +0000
ROA not after:            Thu 30 Apr 2026 20:44:44 +0000
asID:                     52916
IP address blocks:        143.255.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:48:4e:63:c3:03:0a:a6:ba:21:ce:69:86:45:98:a2:fb:18:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:44 2025 GMT
            Not After : Apr 30 20:44:44 2026 GMT
        Subject: CN=B491751EFB44F48847794B48AF7FE4877F740CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:3e:67:f1:8a:fc:5c:b1:ed:3e:33:9b:a5:
                    46:38:ad:ff:25:13:ab:69:cc:60:89:4c:34:36:5a:
                    05:a8:68:c8:e8:f2:98:7a:32:f9:b8:a0:d0:39:fa:
                    80:40:48:fb:e0:85:bb:85:a5:c9:90:e1:6f:0c:a6:
                    4f:c7:98:93:29:58:ae:ea:36:61:d9:17:9d:35:80:
                    bf:1b:a1:ad:44:82:b9:4c:dd:51:36:cd:62:2a:13:
                    b0:62:a9:e2:28:e7:d4:35:9f:7d:d2:d8:62:15:06:
                    b8:4b:eb:47:e9:37:30:8e:29:9a:42:f6:7a:d6:47:
                    a0:e5:d9:36:80:58:de:54:6e:76:0e:95:46:c8:73:
                    26:2b:c7:9c:73:86:36:eb:1c:40:de:bb:31:35:4c:
                    3b:e2:03:8c:ab:3c:fd:ea:f8:16:bb:ea:8e:c4:8d:
                    56:e6:6d:d1:bf:d9:32:4d:4b:15:45:4d:74:6c:98:
                    29:97:d0:26:05:5d:e2:97:77:d5:63:1b:36:13:7f:
                    37:ca:ca:57:8a:14:08:cf:43:e2:bf:54:56:c7:c2:
                    2a:e7:d3:4d:62:b3:34:0a:5f:ee:da:b1:22:11:07:
                    d7:8a:7b:09:59:25:10:8a:1a:9d:0b:49:a7:a9:98:
                    48:cd:1f:16:c4:f1:95:be:12:97:88:56:dc:0b:5c:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:91:75:1E:FB:44:F4:88:47:79:4B:48:AF:7F:E4:87:7F:74:0C:EE
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32332d3233203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:8f:28:50:a3:05:13:e6:e7:16:9a:79:e7:4b:f8:df:a7:
         41:2a:07:d0:df:f9:ef:f4:6c:e9:f1:59:ff:6b:f9:ce:31:9d:
         c1:70:8a:8f:46:28:b7:4e:79:f4:a4:fb:f7:80:ea:c6:5b:69:
         1c:42:7f:22:26:56:84:7d:f3:21:09:8e:28:fa:68:dc:39:d5:
         90:78:77:e9:2b:85:bb:15:01:e0:dc:ea:e8:02:da:9f:3d:0f:
         49:52:36:29:97:66:30:ed:90:1f:f2:86:b0:90:28:87:02:ed:
         63:b8:77:50:44:ce:98:e4:ea:71:8c:6b:91:05:b1:82:19:bf:
         4f:5c:32:55:1f:9e:09:c4:4c:ef:67:44:b1:69:67:19:46:73:
         f7:51:e2:15:2c:1f:39:8e:23:92:27:87:6a:4c:7f:55:93:10:
         4b:56:2d:9b:7c:5d:f7:39:0b:6c:1d:b1:ed:55:0a:50:60:4f:
         7d:c2:96:33:a5:eb:8c:39:9e:06:dc:73:c6:67:e5:4f:ed:e2:
         db:03:4e:0a:0d:9f:57:0a:86:f4:73:a6:cb:64:24:f7:78:e0:
         60:bd:c2:17:cc:32:73:c2:f7:39:6d:05:a9:73:1a:34:71:8a:
         72:7b:bc:ff:fa:c6:60:d0:7c:a9:37:57:dd:0e:b4:4e:a0:22:
         70:e3:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:51:45 2025 by rpki-client