Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          J2nvDCfBgZ+UzG/w9KvFn3Tot97hXKzELaft0gF4KMU=
Subject key identifier:   8C:17:BF:2D:F5:1D:40:05:BC:2A:06:4B:5E:DF:E0:7B:4B:40:9D:40
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       172285F0B84075090032F0114ACD973815629C16
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 28 May 2025 15:31:02 +0000
ROA not before:           Wed 28 May 2025 15:26:02 +0000
ROA not after:            Wed 27 May 2026 15:31:02 +0000
asID:                     266312
IP address blocks:        181.224.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:85:f0:b8:40:75:09:00:32:f0:11:4a:cd:97:38:15:62:9c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: May 28 15:26:02 2025 GMT
            Not After : May 27 15:31:02 2026 GMT
        Subject: CN=8C17BF2DF51D4005BC2A064B5EDFE07B4B409D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:cd:2d:7e:68:c7:17:7a:3c:d1:b6:22:7d:
                    2b:74:0c:a7:45:ff:7c:3d:ff:8c:69:a5:ac:5c:ee:
                    11:46:d4:ca:48:7a:48:45:1b:97:00:9a:c2:0c:6d:
                    2c:7f:78:08:69:9b:77:af:45:5f:b6:b0:45:92:48:
                    b6:eb:2b:ac:1f:df:d3:10:bc:ab:a7:f7:be:9a:bc:
                    d2:7c:c2:6d:bd:af:02:78:6d:01:3b:20:3f:78:49:
                    d1:fc:ba:6b:26:4e:81:fb:72:c1:88:83:0c:05:73:
                    5a:3f:1d:92:f8:df:a8:0e:c6:e5:48:6d:5b:e2:11:
                    a9:c0:9d:e2:74:b5:8a:ee:48:20:50:b7:45:b8:66:
                    f5:c6:69:dd:06:19:28:a6:29:47:11:68:00:3a:df:
                    27:8c:e2:47:b6:8a:10:34:68:9e:b6:46:59:47:33:
                    49:76:49:dd:60:1b:d1:69:c0:c6:33:84:ef:5b:8b:
                    dd:4f:e5:1c:cc:d8:bd:70:5a:b7:52:73:1d:a8:a1:
                    16:22:31:8d:74:98:88:53:c4:a1:c3:f6:c3:40:76:
                    04:bd:fe:e3:fb:d4:b6:a9:3d:15:c8:ce:f8:e2:29:
                    1f:a6:cb:ad:0b:d0:2d:59:7b:78:2c:50:a5:34:13:
                    54:a6:a4:d1:97:0b:8c:9c:65:9e:54:e9:58:db:e5:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:BF:2D:F5:1D:40:05:BC:2A:06:4B:5E:DF:E0:7B:4B:40:9D:40
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:91:fd:c3:c8:d8:7f:d7:0c:bf:61:81:53:53:96:92:d2:db:
         ed:db:8f:54:16:f0:e0:e3:d3:fb:c5:20:37:64:e7:be:0e:6c:
         9e:68:b4:de:2c:aa:ab:d6:44:32:14:da:82:83:12:25:43:9b:
         b0:dd:12:d7:c1:03:f8:eb:b3:c7:87:5f:37:06:30:b4:ee:4c:
         74:e6:c9:c3:09:2b:71:28:9f:5d:ca:6e:ac:9c:66:14:b0:de:
         e5:80:7f:59:02:7b:7c:c1:23:59:d9:14:34:ab:e0:8f:75:c6:
         c6:5b:43:83:95:0d:19:85:3c:af:43:dc:79:70:ea:45:dc:75:
         f7:b5:08:1c:6a:20:c6:9e:c7:b2:07:c0:9d:c0:2e:45:81:91:
         4d:ab:be:dd:2d:16:c3:89:de:41:8e:df:e5:f7:e7:1c:e1:09:
         a6:25:2c:3d:4a:61:64:d7:d6:7a:13:5d:9e:a2:f2:66:a9:8a:
         d8:03:17:d0:ff:9f:a3:3a:08:51:82:54:94:8b:7e:b6:67:61:
         66:34:6b:66:65:51:ee:76:1d:3b:4e:1c:16:7b:72:3f:d4:b4:
         1f:ca:68:9c:44:63:ff:22:ff:9b:97:47:14:dd:af:9a:91:6d:
         37:85:cb:2b:92:36:48:98:99:4f:68:5c:92:42:e5:6d:6f:4f:
         fd:2e:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:54:57 2025 by rpki-client