Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa
File:                     3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          Fs7129irjX3RkgZZeGhuk2whosafMDTsVogG42Zthvs=
Subject key identifier:   E2:A1:68:2F:1B:6F:87:56:43:57:83:CE:73:6B:B6:26:7F:25:F4:6C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       53B8343968D851413B9E70CB2C71511BC9099C56
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:58 +0000
ROA not before:           Mon 11 Aug 2025 15:41:58 +0000
ROA not after:            Mon 10 Aug 2026 15:46:58 +0000
asID:                     262773
IP address blocks:        143.202.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b8:34:39:68:d8:51:41:3b:9e:70:cb:2c:71:51:1b:c9:09:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:58 2025 GMT
            Not After : Aug 10 15:46:58 2026 GMT
        Subject: CN=E2A1682F1B6F8756435783CE736BB6267F25F46C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:b8:20:b6:ba:a2:c6:a8:be:bd:39:43:bb:
                    29:06:9a:f4:62:87:42:55:c9:af:0f:32:af:4c:47:
                    63:7f:f3:6e:d6:18:60:99:9e:75:ad:81:76:65:88:
                    23:3c:6e:2b:c1:61:1d:e2:22:44:da:e3:b7:6a:4b:
                    d5:7f:6c:c5:9f:75:32:95:d3:c8:d8:2c:06:d7:d0:
                    98:34:c3:71:97:c4:20:b5:4d:a6:fb:87:9c:dc:12:
                    98:51:1e:12:b8:b7:fc:a5:68:30:cf:02:94:26:7b:
                    33:55:71:cd:63:0a:33:8e:c5:f4:3b:1f:b6:65:77:
                    05:4b:5e:62:48:28:5d:5c:78:1a:00:43:01:33:23:
                    aa:42:b9:da:4e:61:db:c5:c9:e0:f9:5c:dd:0c:ce:
                    e8:2d:5e:7b:cc:15:0d:5e:bd:30:7b:de:1d:9c:50:
                    85:86:8b:f7:9d:cd:07:6e:58:ec:b9:45:73:a2:1b:
                    01:3c:53:55:b1:8c:ac:73:3b:77:ba:d8:b9:7e:12:
                    68:85:6d:ec:4c:d4:46:a4:6c:4b:42:e3:23:3c:c2:
                    e8:49:89:11:51:18:e9:2c:3a:60:31:eb:a3:c2:69:
                    ff:25:92:0e:eb:d4:71:b2:57:a1:b9:ce:f9:30:38:
                    48:b5:55:e4:7e:f6:ad:59:6e:ad:eb:82:e9:94:b5:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:68:2F:1B:6F:87:56:43:57:83:CE:73:6B:B6:26:7F:25:F4:6C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3230322e3132342e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:84:df:18:d2:e9:71:ae:60:6b:d6:e1:55:4e:12:cb:d6:e0:
         1d:19:67:19:fe:47:43:eb:aa:87:48:33:0c:c6:f2:30:34:95:
         6c:ee:96:7e:1d:6e:07:b3:b0:23:15:cc:e0:ff:94:ce:78:1b:
         16:59:b3:07:15:37:2c:11:e1:93:b2:1a:3b:6d:84:e5:be:b2:
         bc:d1:9a:93:ff:5d:02:d1:8f:b6:35:c3:f8:b1:49:f0:55:0f:
         83:c4:21:45:4e:47:4f:81:e5:61:44:4a:77:d6:4b:32:bf:50:
         34:69:4d:ee:23:6e:d8:df:0d:b6:1c:69:b6:45:17:63:c1:4f:
         09:64:f6:a9:ed:dd:5c:25:6b:dc:08:3d:e5:ce:ad:c8:2f:48:
         5a:9d:12:44:4d:76:4a:5b:78:78:0b:b8:18:02:2f:08:32:fa:
         59:e9:1d:ae:48:17:c9:00:5c:c4:af:6f:66:0f:5a:6d:49:22:
         11:bc:6a:f1:44:57:77:f2:81:f9:8b:f4:78:06:cd:d3:08:a9:
         07:93:4f:c9:d9:6a:5d:f9:a7:2e:6f:ee:dd:1a:c9:b9:61:c7:
         98:52:48:35:4b:4a:80:e4:db:ff:7f:b1:bf:94:26:31:f5:9b:
         fe:6e:de:02:65:ba:83:a1:60:e8:5d:7d:8c:3e:3b:ba:4a:73:
         15:5a:87:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU7g0OWjYUUE7nnDLLHFRG8kJnFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQxNThaFw0yNjA4MTAxNTQ2NThaMDMxMTAvBgNV
BAMTKEUyQTE2ODJGMUI2Rjg3NTY0MzU3ODNDRTczNkJCNjI2N0YyNUY0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ybggtrqixqi+vTlDuykGmvRi
h0JVya8PMq9MR2N/827WGGCZnnWtgXZliCM8bivBYR3iIkTa47dqS9V/bMWfdTKV
08jYLAbX0Jg0w3GXxCC1Tab7h5zcEphRHhK4t/ylaDDPApQmezNVcc1jCjOOxfQ7
H7ZldwVLXmJIKF1ceBoAQwEzI6pCudpOYdvFyeD5XN0MzugtXnvMFQ1evTB73h2c
UIWGi/edzQduWOy5RXOiGwE8U1WxjKxzO3e62Ll+EmiFbexM1EakbEtC4yM8wuhJ
iRFRGOksOmAx66PCaf8lkg7r1HGyV6G5zvkwOEi1VeR+9q1Zbq3rgumUtU3RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4qFoLxtvh1ZDV4POc2u2Jn8l9GwwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNDMzMmUzMjMwMzIyZTMxMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KfDANBgkqhkiG9w0BAQsFAAOCAQEAaITf
GNLpca5ga9bhVU4Sy9bgHRlnGf5HQ+uqh0gzDMbyMDSVbO6Wfh1uB7OwIxXM4P+U
zngbFlmzBxU3LBHhk7IaO22E5b6yvNGak/9dAtGPtjXD+LFJ8FUPg8QhRU5HT4Hl
YURKd9ZLMr9QNGlN7iNu2N8NthxptkUXY8FPCWT2qe3dXCVr3Ag95c6tyC9IWp0S
RE12Slt4eAu4GAIvCDL6WekdrkgXyQBcxK9vZg9abUkiEbxq8URXd/KB+Yv0eAbN
0wipB5NPydlqXfmnLm/u3RrJuWHHmFJINUtKgOTb/3+xv5QmMfWb/m7eAmW6g6Fg
6F19jD47ukpzFVqHzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:34 2025 by rpki-client