Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa
File:                     3134332e302e37342e302f32332d3233203d3e20323634303034.roa (raw, json)
Hash identifier:          zNm/B3Y1CzpNzTlwRuiNzCX7NFzOLD4Zy0PGAms41C8=
Subject key identifier:   89:82:5C:07:D5:CA:8E:DE:26:F4:78:CF:29:8E:62:63:8E:AB:55:55
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       60E0780ECCDE4F7193F7D65F27C6D1B982F1298A
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa
Signing time:             Thu 26 Jun 2025 17:41:20 +0000
ROA not before:           Thu 26 Jun 2025 17:36:20 +0000
ROA not after:            Thu 25 Jun 2026 17:41:20 +0000
asID:                     264004
IP address blocks:        143.0.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:78:0e:cc:de:4f:71:93:f7:d6:5f:27:c6:d1:b9:82:f1:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: Jun 26 17:36:20 2025 GMT
            Not After : Jun 25 17:41:20 2026 GMT
        Subject: CN=89825C07D5CA8EDE26F478CF298E62638EAB5555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:f3:2b:65:63:e2:ba:fa:aa:5c:35:87:c6:
                    83:da:b6:1e:0c:d1:c1:e2:08:27:5f:e5:79:52:eb:
                    e4:98:5d:02:a9:ca:a5:14:1e:98:23:6d:78:eb:ea:
                    5e:1a:1a:6f:20:77:a3:fd:a0:b8:17:2e:2d:53:9d:
                    a9:0c:45:43:40:49:22:81:7b:ea:a6:f8:cd:6c:68:
                    2c:92:b6:65:86:69:3f:e2:85:ea:45:9c:75:d0:c1:
                    1c:ab:16:ca:58:d5:2f:d7:cb:0e:c6:ad:45:9f:21:
                    32:f5:ae:7f:aa:3c:7a:e5:20:fe:56:c9:07:61:e7:
                    f1:5b:d5:9e:3c:2e:0c:8f:ca:cb:cb:e7:00:cf:ef:
                    77:7c:a6:59:2f:f1:0b:c2:34:f4:1a:ac:62:a6:c5:
                    16:7c:54:44:40:8d:5b:43:18:fb:5f:ec:23:86:3c:
                    1c:f5:39:8b:18:21:d0:30:fb:be:78:d2:e5:0a:dd:
                    4f:c5:45:68:4c:8a:ac:04:d0:e8:c3:65:aa:cd:86:
                    6b:02:0f:70:06:2c:63:22:3f:68:dd:0e:63:f0:b8:
                    63:bb:6b:71:62:c3:da:5e:a4:ee:57:3d:aa:94:33:
                    78:c1:82:b1:00:74:05:5b:c5:23:9f:cd:1e:cd:e8:
                    93:61:9d:e9:86:0d:ea:06:d9:24:08:23:fb:ac:ed:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:5C:07:D5:CA:8E:DE:26:F4:78:CF:29:8E:62:63:8E:AB:55:55
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:09:d5:02:e8:c2:54:f1:10:83:b7:d9:d3:c7:a8:7d:0e:e7:
         6b:d9:d2:92:57:c2:99:04:a7:5e:22:67:b0:3b:62:6a:22:cf:
         60:9b:05:55:08:01:e6:23:6d:56:ab:4f:20:4f:bb:20:57:c4:
         cb:23:09:64:64:44:ce:39:f7:58:8f:8a:a7:9e:4a:07:28:60:
         b1:d5:ba:a6:a1:18:f8:ca:b9:35:39:46:fd:07:2f:7c:fc:2d:
         27:fa:91:a6:8d:c3:1b:c3:b1:53:80:37:92:7f:e7:f6:c2:da:
         4c:22:28:6a:41:3b:70:f2:93:9a:49:bc:3f:6d:8e:a1:3d:71:
         41:11:aa:97:aa:85:5f:4a:12:1c:08:ec:8e:4a:c8:a1:19:38:
         07:ed:17:1a:0f:4f:f4:f5:50:48:c2:88:be:4d:b7:f4:9a:7e:
         ac:70:25:5d:3f:33:ee:d8:c2:18:84:4f:4d:ae:35:70:e7:0f:
         fb:6b:4d:eb:a9:30:d9:ce:a4:17:5a:61:91:cd:9d:64:96:c0:
         1a:81:9c:6b:9e:fe:3a:dc:63:01:46:b1:a1:2c:f3:20:66:1c:
         84:5b:3f:50:66:f3:a0:bd:8f:6f:40:16:6c:ea:8a:25:bf:74:
         16:32:4b:7a:84:c4:ed:89:c9:a2:fc:2a:97:72:4e:7a:b2:62:
         21:c5:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:15:44 2025 by rpki-client