Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35352e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35352e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          Iz/SThFOpTrpVbGWbwqStsQUUbKBwa2w4PfDsbpeTcU=
Subject key identifier:   35:22:56:A2:CB:2A:BE:AE:C5:4C:4E:94:EA:06:55:0C:F5:37:10:96
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       7F18FF780E2789B82EDF522E1B3F8E1773072E7C
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35352e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 28 May 2025 15:31:02 +0000
ROA not before:           Wed 28 May 2025 15:26:02 +0000
ROA not after:            Wed 27 May 2026 15:31:02 +0000
asID:                     266312
IP address blocks:        181.224.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:18:ff:78:0e:27:89:b8:2e:df:52:2e:1b:3f:8e:17:73:07:2e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: May 28 15:26:02 2025 GMT
            Not After : May 27 15:31:02 2026 GMT
        Subject: CN=352256A2CB2ABEAEC54C4E94EA06550CF5371096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:1c:3c:fe:8e:e3:21:36:14:fd:75:59:64:
                    16:89:ec:de:6c:17:43:38:a4:0f:68:19:a5:8d:56:
                    53:11:01:35:61:cb:61:0b:8c:e9:be:36:c3:93:fe:
                    ac:7e:70:68:70:35:09:2d:dd:5c:17:3f:6d:9e:c0:
                    a9:31:05:c0:0b:c0:78:0b:c0:91:23:d5:85:cc:a0:
                    d1:4b:89:9e:8d:b7:f3:5b:11:11:91:c2:4d:71:74:
                    e4:d3:38:9a:3d:30:62:08:3c:62:77:d3:81:ff:80:
                    e4:ea:d1:f7:8a:e4:a1:3a:9d:cf:fb:96:58:21:5e:
                    f8:e4:c5:e0:6d:78:3b:25:81:6d:b7:3b:ff:45:ad:
                    6e:1b:e7:95:84:03:b7:34:41:4b:58:aa:c3:58:35:
                    b2:70:c1:27:2e:de:4b:1b:e0:39:17:b9:06:66:d5:
                    c7:3b:aa:6c:98:5d:3e:fe:49:ec:3c:f8:e5:0f:cc:
                    71:84:b0:c4:ad:b3:30:17:10:59:1d:f6:ec:71:86:
                    49:8d:96:c9:f8:fb:c7:8f:5c:1a:fb:46:5b:64:1b:
                    c0:97:ff:da:c3:74:cb:54:ba:f3:91:f6:63:a0:37:
                    8c:dd:09:c3:54:6b:de:f7:b4:85:91:a7:4f:cf:06:
                    81:06:7b:03:69:97:09:29:81:8f:7b:9b:40:0f:9f:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:56:A2:CB:2A:BE:AE:C5:4C:4E:94:EA:06:55:0C:F5:37:10:96
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35352e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:57:7e:49:28:4e:da:bd:d2:08:d7:db:84:cd:5a:ce:4a:ac:
         8d:2e:5e:72:d1:2f:30:2c:0b:8a:23:54:f5:90:07:26:9c:62:
         c4:e3:c3:6c:e2:09:ab:14:a1:df:d0:8d:07:5d:2d:d1:be:e3:
         ea:98:17:d6:e6:2f:d7:99:b1:a1:5a:1f:80:a1:6d:80:1f:1d:
         6c:5d:49:c5:f5:51:6f:fd:7a:82:1b:b1:47:53:fc:a8:18:a1:
         24:db:79:dc:52:77:e2:a9:a3:43:46:cb:b8:87:4b:37:e8:aa:
         92:02:f0:d9:68:8f:a1:c6:90:e0:a9:66:1e:91:98:0a:c1:de:
         e7:fa:e0:3b:9f:66:75:42:bb:e5:8a:d5:2d:8a:1b:95:81:60:
         69:36:d9:0d:42:8a:3e:c2:59:62:87:45:0a:65:98:24:bd:02:
         22:2c:5d:e2:49:eb:9f:da:b2:a1:71:27:ab:1a:6a:fe:12:4c:
         6e:9e:7a:09:f9:85:ab:b4:de:2d:ac:79:9b:d4:2f:c9:6c:4b:
         a8:c6:86:1b:54:5a:c2:c0:b8:07:4c:f7:4c:cc:7c:55:a8:4e:
         d0:e9:35:05:4b:1a:28:2c:76:ca:54:1a:b0:ec:b7:23:2f:6a:
         9b:ea:8f:52:54:7a:6e:d5:55:12:49:21:25:05:32:a4:53:40:
         db:d5:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:16:21 2025 by rpki-client