Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
File:                     3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa (raw, json)
Hash identifier:          neA2ItXsBm2vpOewGhp/bOfu7UaRyVInepYxhdK8Ew8=
Subject key identifier:   43:84:90:92:DC:2B:15:61:A1:BB:A6:F8:5D:DE:AD:7D:6B:4A:2B:EA
Certificate issuer:       /CN=80F95120380D97B8617C6C767FCF3931BDE7880D
Certificate serial:       7A22FF212774E5D8646CB930D1B86A65233FDB17
Authority key identifier: 80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa
Signing time:             Wed 25 Jun 2025 13:51:43 +0000
ROA not before:           Wed 25 Jun 2025 13:46:43 +0000
ROA not after:            Wed 24 Jun 2026 13:51:43 +0000
asID:                     262342
IP address blocks:        143.208.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl
                          rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 06:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:ff:21:27:74:e5:d8:64:6c:b9:30:d1:b8:6a:65:23:3f:db:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F95120380D97B8617C6C767FCF3931BDE7880D
        Validity
            Not Before: Jun 25 13:46:43 2025 GMT
            Not After : Jun 24 13:51:43 2026 GMT
        Subject: CN=43849092DC2B1561A1BBA6F85DDEAD7D6B4A2BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:16:c8:33:86:37:86:d1:e2:50:ab:b8:ed:
                    5a:a3:9e:62:5b:97:52:df:4d:2c:7e:db:34:2b:8e:
                    b2:9f:1a:57:ea:40:69:25:3c:db:4b:b1:51:d6:fa:
                    96:aa:8e:ec:24:2d:e2:ba:e3:5a:b7:5f:21:e8:7e:
                    16:b9:23:54:be:7c:81:d4:ec:a7:ba:d5:f1:20:3f:
                    22:e3:00:12:82:9b:f8:e0:75:89:84:54:bf:b8:ae:
                    24:2b:f9:50:bc:4a:b7:d0:a7:de:f5:fd:d4:50:6c:
                    2e:69:33:5f:e5:a6:e5:a4:be:63:10:5f:76:b8:ad:
                    f6:c2:6d:30:83:6b:7d:4f:16:fe:4b:c8:6b:9e:c7:
                    a1:ef:0d:38:ca:a9:ad:39:10:53:78:29:90:36:ad:
                    c7:f0:a4:a3:82:1f:ff:3b:64:b6:61:56:d8:00:b3:
                    8c:fe:e6:8c:b5:97:ef:1e:63:e0:c5:df:84:a1:f9:
                    3a:6d:be:91:6b:8e:77:d6:7f:39:f4:f5:28:9c:e1:
                    3c:ae:ad:44:31:45:7c:35:70:47:20:d5:e2:a8:1c:
                    bc:04:3a:4d:21:32:1b:cd:71:3a:38:9c:8b:61:31:
                    34:a9:c5:1b:22:4c:ee:2b:d4:ff:7a:ac:73:cc:66:
                    66:cd:ed:29:59:fe:f0:9f:9a:2c:be:44:85:87:b9:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:90:92:DC:2B:15:61:A1:BB:A6:F8:5D:DE:AD:7D:6B:4A:2B:EA
            X509v3 Authority Key Identifier:
                keyid:80:F9:51:20:38:0D:97:B8:61:7C:6C:76:7F:CF:39:31:BD:E7:88:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/80F95120380D97B8617C6C767FCF3931BDE7880D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80F95120380D97B8617C6C767FCF3931BDE7880D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjS4ggRdfLCMXuhMQgB5Uua24pwDHxhQTC9VChJGGv31/1/3134332e3230382e3230382e302f32322d3234203d3e20323632333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ed:ae:35:65:af:84:38:45:4d:4a:c0:94:17:c6:cd:b5:3c:e3:
         17:77:4a:66:8b:c6:a0:87:df:d6:72:3f:27:0e:ab:9c:35:53:
         fd:89:a2:65:34:16:71:80:48:02:df:0e:12:70:de:69:5f:91:
         78:5c:c2:24:97:20:6d:c4:c3:2f:56:2e:f0:17:6b:f6:88:72:
         73:0a:04:3d:b0:9c:e5:55:88:72:b6:4a:c7:9c:e1:93:be:2e:
         a7:84:e3:31:6b:8b:29:59:85:22:c0:b6:c5:2d:2c:0b:e7:c3:
         27:ed:a9:6a:02:2e:0a:80:bf:75:da:4d:d6:be:8c:58:07:30:
         8c:08:0a:87:2f:e7:e1:d5:bc:c1:2d:75:ea:bd:05:31:5c:4a:
         7b:55:8f:f8:23:12:15:8c:3a:b8:48:09:bb:1a:ed:b3:2b:a1:
         3c:37:d3:49:8f:c2:6a:19:a5:b0:fb:ed:9c:c3:15:f8:8f:af:
         c1:ce:8a:7a:65:b1:92:54:4b:86:a1:74:ec:b8:bc:7d:2f:bb:
         bb:88:7c:c6:4b:9d:1a:aa:a3:1c:bb:b5:e0:48:08:06:f3:58:
         7c:3b:b7:c0:9d:83:70:42:9d:89:7e:89:3e:e5:12:6e:b3:c2:
         ef:6a:ee:5e:20:30:b4:48:30:ec:6b:ef:7c:33:66:55:86:b9:
         52:d9:a6:ac
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeiL/ISd05dhkbLkw0bhqZSM/2xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBGOTUxMjAzODBEOTdCODYxN0M2Qzc2N0ZDRjM5MzFC
REU3ODgwRDAeFw0yNTA2MjUxMzQ2NDNaFw0yNjA2MjQxMzUxNDNaMDMxMTAvBgNV
BAMTKDQzODQ5MDkyREMyQjE1NjFBMUJCQTZGODVEREVBRDdENkI0QTJCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzhbIM4Y3htHiUKu47VqjnmJb
l1LfTSx+2zQrjrKfGlfqQGklPNtLsVHW+paqjuwkLeK641q3XyHofha5I1S+fIHU
7Ke61fEgPyLjABKCm/jgdYmEVL+4riQr+VC8SrfQp971/dRQbC5pM1/lpuWkvmMQ
X3a4rfbCbTCDa31PFv5LyGuex6HvDTjKqa05EFN4KZA2rcfwpKOCH/87ZLZhVtgA
s4z+5oy1l+8eY+DF34Sh+TptvpFrjnfWfzn09Sic4TyurUQxRXw1cEcg1eKoHLwE
Ok0hMhvNcTo4nIthMTSpxRsiTO4r1P96rHPMZmbN7SlZ/vCfmiy+RIWHuSydAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQ4SQktwrFWGhu6b4Xd6tfWtKK+owHwYDVR0j
BBgwFoAUgPlRIDgNl7hhfGx2f885Mb3niA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpTNGdnUmRmTENNWHVoTVFnQjVVdWEyNHB3REh4aFFUQzlWQ2hKR0d2
MzEvMS84MEY5NTEyMDM4MEQ5N0I4NjE3QzZDNzY3RkNGMzkzMUJERTc4ODBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwRjk1MTIwMzgwRDk3Qjg2
MTdDNkM3NjdGQ0YzOTMxQkRFNzg4MEQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqUzRnZ1JkZkxDTVh1aE1RZ0I1VXVhMjRwd0RIeGhRVEM5VkNoSkdHdjMxLzEv
MzEzNDMzMmUzMjMwMzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/Q0DANBgkqhkiG9w0BAQsFAAOCAQEA7a41
Za+EOEVNSsCUF8bNtTzjF3dKZovGoIff1nI/Jw6rnDVT/YmiZTQWcYBIAt8OEnDe
aV+ReFzCJJcgbcTDL1Yu8Bdr9ohycwoEPbCc5VWIcrZKx5zhk74up4TjMWuLKVmF
IsC2xS0sC+fDJ+2pagIuCoC/ddpN1r6MWAcwjAgKhy/n4dW8wS116r0FMVxKe1WP
+CMSFYw6uEgJuxrtsyuhPDfTSY/CahmlsPvtnMMV+I+vwc6KemWxklRLhqF07Li8
fS+7u4h8xkudGqqjHLu14EgIBvNYfDu3wJ2DcEKdiX6JPuUSbrPC72ruXiAwtEgw
7GvvfDNmVYa5UtmmrA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 11:28:01 2025 by rpki-client