Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          4yninJhwr9sMXFrGf/rxLm9HTbnwceQgR1AEPeMnuN8=
Subject key identifier:   39:1D:3D:1C:94:81:1D:62:D0:2B:75:E7:D4:0A:6A:89:B8:18:AC:1E
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       567E79A67A34DAC8FF15F93AF6BDCAD1E7DEFDCB
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:31 +0000
ROA not before:           Thu 01 May 2025 20:39:31 +0000
ROA not after:            Thu 30 Apr 2026 20:44:31 +0000
asID:                     52916
IP address blocks:        143.255.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:7e:79:a6:7a:34:da:c8:ff:15:f9:3a:f6:bd:ca:d1:e7:de:fd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:31 2025 GMT
            Not After : Apr 30 20:44:31 2026 GMT
        Subject: CN=391D3D1C94811D62D02B75E7D40A6A89B818AC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:d6:31:57:e8:af:87:92:c9:8e:3b:aa:54:
                    3c:67:be:12:c3:49:99:94:1b:42:5b:44:e2:41:8d:
                    3d:77:b0:32:6a:4d:4c:47:12:15:0d:c0:fd:ad:de:
                    b6:4c:b3:98:b1:73:34:a5:0b:8a:8a:ec:b8:c9:91:
                    65:7f:a5:6c:53:fa:8f:5a:0a:b3:8b:f3:9a:8c:7f:
                    56:a4:32:45:1c:6a:c6:2a:55:96:79:04:e2:36:d5:
                    9d:32:1f:c9:86:60:64:8a:e9:26:af:b3:85:dd:30:
                    b6:ab:e7:5a:47:57:e9:f6:42:6c:ac:af:e6:d2:34:
                    f9:46:b1:7a:f1:46:31:df:5a:03:a7:c7:82:25:31:
                    57:ff:6e:25:53:9e:7c:1e:db:c8:83:95:47:92:6a:
                    d5:9c:9b:a7:dd:7b:fd:bc:74:7e:e3:d0:da:45:a9:
                    0e:6c:f8:df:64:e1:fd:83:00:f1:3b:cc:1d:8f:f4:
                    0f:ae:e5:86:9e:24:4c:1c:04:27:cf:c7:92:3a:4c:
                    d0:6d:c1:28:e9:b6:f5:b5:f5:15:ef:cf:5b:20:72:
                    7d:f8:d9:32:be:78:c8:a2:10:24:ca:7b:e8:47:cd:
                    15:4f:4c:84:e6:58:99:e9:72:92:39:d6:e3:3d:41:
                    e7:95:72:06:a4:0d:f0:26:60:67:71:bc:3e:2d:71:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:3D:1C:94:81:1D:62:D0:2B:75:E7:D4:0A:6A:89:B8:18:AC:1E
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:83:cc:80:57:21:f6:47:b7:dc:5d:96:38:8b:89:af:9b:82:
         14:ed:8c:6b:47:7b:84:a6:5e:0b:9b:01:9f:35:e1:90:25:d3:
         c8:9c:11:66:a3:47:ff:8c:e3:7b:3d:d3:5b:1f:c9:64:4e:5e:
         9e:55:f1:4e:62:aa:4e:62:6f:e3:a0:0c:ac:83:7b:68:e1:00:
         b1:e9:f6:98:63:27:8c:cb:03:aa:f4:fc:35:78:7b:e0:e9:56:
         32:10:1e:44:e0:db:b5:fd:4e:de:53:0c:85:39:34:e1:b9:53:
         17:a6:bf:03:1d:b7:67:2b:b4:d7:5a:6e:f3:e1:e7:23:c8:12:
         f8:92:18:dd:4e:2c:4b:8b:e3:c1:3c:22:67:c0:a4:b6:2c:95:
         28:07:52:50:84:fe:38:ba:ac:d5:fc:ca:5e:c4:65:97:d3:48:
         e2:c8:fb:e2:a3:40:fa:bb:2e:39:bb:b4:a8:79:26:d5:ba:e5:
         ad:7d:eb:da:81:44:e2:1b:d2:27:41:83:77:cb:92:95:e0:b3:
         75:bb:8b:ca:5a:df:7b:49:98:a9:b0:e5:2a:a8:04:24:b1:56:
         1e:f8:75:1b:dd:ba:96:74:86:99:88:6c:a2:f0:e7:82:bb:81:
         1d:7a:3f:15:1d:ed:64:d8:49:4e:76:94:19:4b:31:55:c5:7d:
         92:be:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:05:35 2025 by rpki-client