Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32342d3234203d3e20323731343138.roa
File:                     3138312e3232342e34302e302f32342d3234203d3e20323731343138.roa (raw, json)
Hash identifier:          kflxN2NjL98v5MUB2Ua9qP69gBUdziQNu/G4xnaNbFY=
Subject key identifier:   21:22:FC:10:97:6C:E3:04:D4:EC:2F:D5:1C:4F:88:8F:42:FD:54:B5
Certificate issuer:       /CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
Certificate serial:       14308E19D088683943201793CFB02E000DC8B544
Authority key identifier: 46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32342d3234203d3e20323731343138.roa
Signing time:             Tue 03 Jun 2025 13:23:21 +0000
ROA not before:           Tue 03 Jun 2025 13:18:21 +0000
ROA not after:            Tue 02 Jun 2026 13:23:21 +0000
asID:                     271418
IP address blocks:        181.224.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl
                          rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:30:8e:19:d0:88:68:39:43:20:17:93:cf:b0:2e:00:0d:c8:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
        Validity
            Not Before: Jun  3 13:18:21 2025 GMT
            Not After : Jun  2 13:23:21 2026 GMT
        Subject: CN=2122FC10976CE304D4EC2FD51C4F888F42FD54B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:d6:01:f3:00:53:f8:ee:53:23:3e:09:4e:
                    bd:51:69:54:81:0f:62:e1:07:78:c3:bd:36:65:01:
                    99:2d:f5:8e:e6:a6:a7:74:76:df:2c:1e:71:76:83:
                    ef:9a:85:3b:98:3d:50:14:b0:1e:1e:3a:97:d7:a6:
                    a8:3a:95:2c:fa:d7:a8:69:ab:ad:aa:36:6a:cb:00:
                    ad:76:cf:98:e0:80:7b:d9:53:a0:18:cc:7a:36:51:
                    4b:85:aa:25:f9:7d:f3:d0:20:9f:05:fd:df:2f:8b:
                    3d:95:01:92:8d:7b:35:30:1c:ef:79:1e:3e:45:59:
                    16:88:62:09:6a:0d:63:4d:4b:fe:44:2c:5b:3e:73:
                    c9:37:a1:60:91:f7:e8:22:59:7a:47:e1:b0:c2:b4:
                    8e:24:d9:d9:ab:51:ec:b4:14:33:b5:74:aa:09:63:
                    6c:10:03:10:09:a5:d9:f3:a9:7c:1d:64:38:e4:9c:
                    28:b1:8b:f3:c8:7e:0c:a8:93:19:6a:b2:8d:27:bb:
                    be:62:1f:5b:ac:40:59:1a:97:a2:d1:82:22:e0:cf:
                    32:99:17:a2:51:33:b8:ad:76:2f:2d:49:d5:c2:70:
                    e0:7c:2a:67:8f:84:40:63:db:5d:e6:6a:89:5c:3a:
                    96:ac:10:f1:9b:d5:bd:aa:90:8f:01:86:cd:49:e1:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:FC:10:97:6C:E3:04:D4:EC:2F:D5:1C:4F:88:8F:42:FD:54:B5
            X509v3 Authority Key Identifier:
                keyid:46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34302e302f32342d3234203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:42:57:24:86:8f:71:92:76:4f:c5:6d:b2:8c:47:44:29:c7:
         91:f6:45:d0:a7:25:0b:9b:d5:c6:a6:3c:f8:15:35:6f:58:a3:
         70:fb:83:c3:8f:f2:de:66:0e:63:17:d9:bc:c5:9a:3e:c5:32:
         ba:e9:37:db:0e:26:d7:a4:3f:aa:22:db:d1:76:71:2e:9d:b1:
         78:19:e2:b4:e6:86:64:d6:b8:29:0e:d5:af:f2:da:69:a1:d9:
         b1:7b:9e:b8:75:29:de:12:f4:22:be:44:55:91:e8:3f:eb:45:
         e7:ef:29:6b:16:d0:bf:6e:b2:bb:67:a2:64:b6:e1:8c:47:98:
         91:4f:b8:c4:b7:9f:d9:75:d1:59:5f:76:29:ad:c2:16:1c:85:
         c5:fa:b4:81:aa:ee:67:37:87:b3:67:c1:cf:b8:3c:f5:42:b2:
         7a:63:8e:09:61:30:44:d1:a2:1b:39:f3:5b:32:d8:f9:9a:f6:
         c0:ee:16:da:10:76:60:e2:5d:41:47:9c:8a:fa:2a:df:47:c0:
         cb:69:a0:7f:ba:e3:0a:d8:71:ab:27:84:b5:42:55:46:94:88:
         3b:ea:d1:fd:fa:96:48:14:43:f8:1a:22:50:80:3a:55:66:2c:
         30:0e:dc:69:10:08:ec:a5:c0:17:9e:37:84:ac:12:5a:4c:6c:
         ea:cf:5c:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFDCOGdCIaDlDIBeTz7AuAA3ItUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZEQTJFQ0ZFQkU4RDQ4MjNCQjhGMTZDNjUxQjBDNkUy
QTNGNUYzMTAeFw0yNTA2MDMxMzE4MjFaFw0yNjA2MDIxMzIzMjFaMDMxMTAvBgNV
BAMTKDIxMjJGQzEwOTc2Q0UzMDRENEVDMkZENTFDNEY4ODhGNDJGRDU0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dtYB8wBT+O5TIz4JTr1RaVSB
D2LhB3jDvTZlAZkt9Y7mpqd0dt8sHnF2g++ahTuYPVAUsB4eOpfXpqg6lSz616hp
q62qNmrLAK12z5jggHvZU6AYzHo2UUuFqiX5ffPQIJ8F/d8viz2VAZKNezUwHO95
Hj5FWRaIYglqDWNNS/5ELFs+c8k3oWCR9+giWXpH4bDCtI4k2dmrUey0FDO1dKoJ
Y2wQAxAJpdnzqXwdZDjknCixi/PIfgyokxlqso0nu75iH1usQFkal6LRgiLgzzKZ
F6JRM7itdi8tSdXCcOB8KmePhEBj213maolcOpasEPGb1b2qkI8Bhs1J4XPHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUISL8EJds4wTU7C/VHE+Ij0L9VLUwHwYDVR0j
BBgwFoAURtouz+vo1II7uPFsZRsMbio/XzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGc0QkI5Q2paZ1lEeVJ6WkZWc1hqWXhjOENpbnpVQTZRamd0UHk0TDdm
ckEvMC80NkRBMkVDRkVCRThENDgyM0JCOEYxNkM2NTFCMEM2RTJBM0Y1RjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2REEyRUNGRUJFOEQ0ODIz
QkI4RjE2QzY1MUIwQzZFMkEzRjVGMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RnNEJCOUNqWmdZRHlSelpGVnNYall4YzhDaW56VUE2UWpndFB5NEw3ZnJBLzAv
MzEzODMxMmUzMjMyMzQyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC14CgwDQYJKoZIhvcNAQELBQADggEBAEhCVySG
j3GSdk/FbbKMR0Qpx5H2RdCnJQub1camPPgVNW9Yo3D7g8OP8t5mDmMX2bzFmj7F
MrrpN9sOJtekP6oi29F2cS6dsXgZ4rTmhmTWuCkO1a/y2mmh2bF7nrh1Kd4S9CK+
RFWR6D/rRefvKWsW0L9usrtnomS24YxHmJFPuMS3n9l10VlfdimtwhYchcX6tIGq
7mc3h7Nnwc+4PPVCsnpjjglhMETRohs581sy2Pma9sDuFtoQdmDiXUFHnIr6Kt9H
wMtpoH+64wrYcasnhLVCVUaUiDvq0f36lkgUQ/gaIlCAOlVmLDAO3GkQCOylwBee
N4SsElpMbOrPXEs=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:31 2025 by rpki-client