Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
File:                     3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa (raw, json)
Hash identifier:          u6Wf+yRBt4dhcuDRGpFdmnIFzHm7Zm+0pgUc+rqDoXU=
Subject key identifier:   5A:5A:34:74:15:06:86:AD:78:A3:F8:38:D9:2D:F0:A4:82:7B:CC:B8
Certificate issuer:       /CN=9525905700962482C0F4F6E9E0D71074880AC7C5
Certificate serial:       472460F1B44FB85FE5588A4BDA54ED59EC09474C
Authority key identifier: 95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa
Signing time:             Mon 30 Jun 2025 11:49:40 +0000
ROA not before:           Mon 30 Jun 2025 11:44:40 +0000
ROA not after:            Mon 29 Jun 2026 11:49:40 +0000
asID:                     52741
IP address blocks:        143.255.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 08:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:24:60:f1:b4:4f:b8:5f:e5:58:8a:4b:da:54:ed:59:ec:09:47:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9525905700962482C0F4F6E9E0D71074880AC7C5
        Validity
            Not Before: Jun 30 11:44:40 2025 GMT
            Not After : Jun 29 11:49:40 2026 GMT
        Subject: CN=5A5A3474150686AD78A3F838D92DF0A4827BCCB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:8a:bb:83:6b:a1:e5:c0:89:61:36:3c:4b:
                    22:0d:90:67:2e:38:e8:a7:fd:8e:06:82:58:9f:50:
                    3f:39:47:01:a4:06:87:65:87:fc:70:bb:fe:7a:1b:
                    df:73:4d:2c:71:b2:fc:8a:f8:a0:c0:7d:3b:47:c8:
                    e7:95:3a:ec:72:06:0f:bb:e7:73:c0:b6:ae:af:44:
                    7c:f6:4b:41:7b:d9:c0:de:cc:ef:cf:3a:2f:f8:64:
                    89:9b:91:a0:d7:27:27:9f:8e:61:32:a6:3a:26:cd:
                    dc:7e:66:a4:1f:d8:ac:91:56:3d:b4:08:f8:1a:bf:
                    37:74:d4:17:18:14:5d:92:48:ef:a5:f8:bc:3c:76:
                    26:85:03:52:41:1e:32:42:72:dc:eb:64:87:b7:cb:
                    84:b8:67:b6:a8:fe:0a:50:b3:d9:7b:16:ad:c1:90:
                    4c:5b:ed:6b:7f:64:fe:92:a2:e3:42:6b:0e:c5:f4:
                    7f:0b:d3:b3:d5:40:8f:e4:9d:b4:77:7f:b5:7f:b1:
                    a7:47:a9:1f:6a:67:ba:62:e5:fb:01:ba:55:a0:85:
                    6a:6b:e3:03:5d:eb:9d:7c:32:17:38:b4:fb:2d:7d:
                    ad:6a:a0:50:72:5f:15:f5:37:f4:f7:1f:a8:35:3b:
                    84:17:ea:25:69:94:e6:b2:c1:dc:78:64:fc:ab:a0:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:34:74:15:06:86:AD:78:A3:F8:38:D9:2D:F0:A4:82:7B:CC:B8
            X509v3 Authority Key Identifier:
                keyid:95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3134332e3235352e3230382e302f32322d3332203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:63:69:09:77:df:52:21:66:4e:76:9e:59:81:bb:28:92:
         8b:82:c5:6b:36:96:a2:c0:e6:1d:27:39:b5:86:c9:69:11:82:
         6c:5e:13:cf:23:8b:b8:5a:d8:09:25:7c:e1:1c:1d:6c:e7:0f:
         46:27:05:dc:e7:b7:d0:98:67:e6:ae:a4:a1:4c:e6:f0:13:20:
         a2:b7:2b:c5:f2:83:5c:27:be:4a:34:25:67:f5:73:c8:b8:8a:
         de:e6:52:e8:f2:69:1f:21:8a:e7:bf:f7:87:6a:68:89:29:08:
         1f:62:99:5a:8c:db:59:d5:40:d4:48:c3:e3:ed:c6:7c:2e:a1:
         70:2c:6d:0b:e6:91:58:69:8f:2e:82:3d:f0:ab:a3:d5:71:03:
         eb:4a:2e:bd:a1:54:64:fd:48:47:62:f5:27:70:2b:61:46:6e:
         39:14:1e:4e:34:c4:e9:e8:d0:7b:b8:cb:0b:8e:a1:d2:47:6e:
         af:be:89:c5:a9:39:c6:95:e3:94:ef:2d:1d:9a:bd:b9:92:1d:
         4e:18:41:51:3c:8b:43:1d:03:d5:4f:3a:e9:af:56:ae:d0:28:
         8b:e9:99:c0:fe:c8:48:b9:4a:dd:1f:a2:40:01:2c:e6:db:e3:
         51:93:03:2c:3a:65:03:a4:ca:b0:d4:c9:e3:ae:89:52:88:ad:
         cb:ab:93:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURyRg8bRPuF/lWIpL2lTtWewJR0wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyNTkwNTcwMDk2MjQ4MkMwRjRGNkU5RTBENzEwNzQ4
ODBBQzdDNTAeFw0yNTA2MzAxMTQ0NDBaFw0yNjA2MjkxMTQ5NDBaMDMxMTAvBgNV
BAMTKDVBNUEzNDc0MTUwNjg2QUQ3OEEzRjgzOEQ5MkRGMEE0ODI3QkNDQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT94q7g2uh5cCJYTY8SyINkGcu
OOin/Y4GglifUD85RwGkBodlh/xwu/56G99zTSxxsvyK+KDAfTtHyOeVOuxyBg+7
53PAtq6vRHz2S0F72cDezO/POi/4ZImbkaDXJyefjmEypjomzdx+ZqQf2KyRVj20
CPgavzd01BcYFF2SSO+l+Lw8diaFA1JBHjJCctzrZIe3y4S4Z7ao/gpQs9l7Fq3B
kExb7Wt/ZP6SouNCaw7F9H8L07PVQI/knbR3f7V/sadHqR9qZ7pi5fsBulWghWpr
4wNd6518Mhc4tPstfa1qoFByXxX1N/T3H6g1O4QX6iVplOaywdx4ZPyroJQpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWlo0dBUGhq14o/g42S3wpIJ7zLgwHwYDVR0j
BBgwFoAUlSWQVwCWJILA9Pbp4NcQdIgKx8UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHl5anRyQ2tRYVBteXBGeWpkeEhBd0NCczFaRlVNOTdZZU5DYzVwZTU0
VW4vMC85NTI1OTA1NzAwOTYyNDgyQzBGNEY2RTlFMEQ3MTA3NDg4MEFDN0M1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1MjU5MDU3MDA5NjI0ODJD
MEY0RjZFOUUwRDcxMDc0ODgwQUM3QzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5eWp0ckNrUWFQbXlwRnlqZHhIQXdDQnMxWkZVTTk3WWVOQ2M1cGU1NFVuLzAv
MzEzNDMzMmUzMjM1MzUyZTMyMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP/9AwDQYJKoZIhvcNAQELBQADggEBAJiyY2kJ
d99SIWZOdp5ZgbsokouCxWs2lqLA5h0nObWGyWkRgmxeE88ji7ha2AklfOEcHWzn
D0YnBdznt9CYZ+aupKFM5vATIKK3K8Xyg1wnvko0JWf1c8i4it7mUujyaR8hiue/
94dqaIkpCB9imVqM21nVQNRIw+PtxnwuoXAsbQvmkVhpjy6CPfCro9VxA+tKLr2h
VGT9SEdi9SdwK2FGbjkUHk40xOno0Hu4ywuOodJHbq++icWpOcaV45TvLR2avbmS
HU4YQVE8i0MdA9VPOumvVq7QKIvpmcD+yEi5St0fokABLObb41GTAyw6ZQOkyrDU
yeOuiVKIrcurk5o=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:30:58 2025 by rpki-client