Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31372e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          JrsdOgey7CdQ8qyiHPbVG/HQCyFewsgurDQuIu9tFvg=
Subject key identifier:   39:6D:34:00:45:41:E2:DD:6A:32:13:75:A8:CA:2C:3F:D2:18:5F:6F
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       6F13A23484F88E0E8EBFBF90B461A0E46CAA289C
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:30 +0000
ROA not before:           Thu 01 May 2025 20:39:30 +0000
ROA not after:            Thu 30 Apr 2026 20:44:30 +0000
asID:                     52916
IP address blocks:        143.255.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:13:a2:34:84:f8:8e:0e:8e:bf:bf:90:b4:61:a0:e4:6c:aa:28:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:30 2025 GMT
            Not After : Apr 30 20:44:30 2026 GMT
        Subject: CN=396D34004541E2DD6A321375A8CA2C3FD2185F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:19:5e:f5:14:79:51:be:d2:db:e8:1b:36:
                    d5:6d:89:ea:4c:ed:84:8a:84:be:e7:df:c9:43:ba:
                    3a:30:eb:f4:b3:21:0a:d9:2c:51:60:2a:02:54:0c:
                    77:26:26:54:a9:b7:9c:02:fa:ba:f1:b6:f5:5f:fa:
                    f1:de:d3:3a:89:1f:0b:14:4e:cd:09:17:3b:de:02:
                    60:ff:fb:23:6e:ff:c6:f2:5a:fd:ec:3c:1a:82:3e:
                    bd:ed:3a:1f:e5:cc:41:76:ed:ce:57:13:30:7c:4c:
                    bf:26:5f:fd:5b:5f:d1:c4:58:5e:a6:ab:cf:6a:e6:
                    58:8c:7a:85:2a:24:63:34:60:8e:bd:38:9b:38:bf:
                    66:b1:0a:fb:7a:3a:8a:fe:b8:05:06:ae:a6:09:a2:
                    9a:96:76:15:13:a1:84:e5:6b:67:04:82:08:ec:3e:
                    5e:b4:5d:ae:b2:70:c8:e8:63:8c:55:af:36:5b:84:
                    f1:36:2a:ce:31:74:8d:49:db:4e:c9:b2:ed:eb:f0:
                    a0:d3:cb:c8:b3:83:34:14:15:d6:28:42:e0:94:7c:
                    b8:55:46:5b:f9:88:ec:30:2b:31:a0:c3:8e:0a:3d:
                    6f:db:e5:5c:44:1d:63:d4:cc:2e:15:4a:b8:a1:11:
                    d7:be:1d:79:3a:f7:ba:39:a3:27:18:5f:79:40:cb:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6D:34:00:45:41:E2:DD:6A:32:13:75:A8:CA:2C:3F:D2:18:5F:6F
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:30:bb:c6:ac:d1:26:fa:73:f4:58:3c:04:dc:32:39:e6:
         43:31:18:03:d7:b9:91:1c:f1:3b:d3:e8:93:c9:c5:63:61:55:
         27:4d:c6:45:0a:e4:06:59:6d:04:61:a8:52:ad:7c:36:45:08:
         25:e9:f9:7c:9b:70:e4:36:72:97:60:51:25:7e:f5:da:fd:88:
         2f:b1:92:d3:c1:ea:ac:de:ba:1e:f6:ea:91:29:37:28:7b:ce:
         c9:30:3e:21:b9:27:31:50:fe:a7:36:aa:73:1a:8a:8f:a5:56:
         5c:46:cb:4c:99:01:b4:6e:c4:97:d4:8c:0d:d3:6e:a9:98:58:
         03:0b:b7:ed:ef:cd:78:c3:eb:c0:c1:03:bf:0c:98:b4:9c:25:
         64:21:4f:36:e5:c1:01:7e:49:59:f4:e1:91:97:14:2c:69:76:
         6c:bf:50:b4:01:aa:46:41:45:e9:b0:5c:80:6c:d5:e5:9d:fe:
         3e:6d:cd:9b:3f:62:7c:a0:75:e4:0f:4e:d7:60:35:1d:2e:24:
         cf:ca:8f:d0:04:f3:65:42:cd:60:5e:83:4c:95:7d:9d:70:70:
         9b:44:ff:a4:31:22:c2:e7:5e:5e:10:1e:a4:be:8e:60:5a:55:
         1b:20:dc:06:b1:1e:9a:26:8e:d8:35:fd:e7:63:09:b2:e0:e6:
         ac:e3:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:02:52 2025 by rpki-client