Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32342d3234203d3e20323731343138.roa
File:                     3138312e3232342e34322e302f32342d3234203d3e20323731343138.roa (raw, json)
Hash identifier:          XoUnp6LuUUvz6YDpu05eDhPrdXWGcmEnvOZUiXbFD2M=
Subject key identifier:   8E:1A:ED:58:CF:8A:0D:CE:E3:9B:FF:CE:DE:F5:2C:5D:CA:FD:F9:09
Certificate issuer:       /CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
Certificate serial:       670805DACB1A2A465C6A695FFDE3A6D8D219B3FF
Authority key identifier: 46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32342d3234203d3e20323731343138.roa
Signing time:             Tue 03 Jun 2025 13:22:56 +0000
ROA not before:           Tue 03 Jun 2025 13:17:56 +0000
ROA not after:            Tue 02 Jun 2026 13:22:56 +0000
asID:                     271418
IP address blocks:        181.224.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl
                          rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:08:05:da:cb:1a:2a:46:5c:6a:69:5f:fd:e3:a6:d8:d2:19:b3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
        Validity
            Not Before: Jun  3 13:17:56 2025 GMT
            Not After : Jun  2 13:22:56 2026 GMT
        Subject: CN=8E1AED58CF8A0DCEE39BFFCEDEF52C5DCAFDF909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:af:22:5d:87:05:9d:96:c5:c9:91:78:82:1d:
                    d3:39:cc:00:e1:12:56:b1:aa:e1:a8:62:00:41:17:
                    63:19:8b:20:f3:5e:ef:f0:10:0a:8c:35:75:30:84:
                    6d:3d:27:ed:3c:2c:1c:07:ba:be:53:c4:07:66:42:
                    c7:8c:f9:b6:c7:f1:57:78:ae:7d:c0:cc:c4:d3:f6:
                    b4:d0:84:4d:e4:fa:bc:a8:aa:43:55:8b:0f:6d:11:
                    c5:0c:6e:08:c1:12:01:f7:25:94:bf:71:df:b2:aa:
                    c9:ce:3d:b4:2d:b0:70:9a:c5:1c:3f:79:b6:a4:41:
                    06:29:80:18:0d:49:d3:d1:64:59:66:cc:9d:8a:15:
                    d5:b6:f3:83:f6:91:d4:65:75:4c:07:82:33:8f:d3:
                    b5:56:cd:84:22:e4:23:30:e0:7a:72:a5:d8:fa:30:
                    84:ab:b8:e6:59:83:ba:12:2a:7f:a1:37:59:d1:2e:
                    5b:e6:2d:43:cc:5a:d0:32:90:65:0d:eb:7e:15:2c:
                    8c:10:04:d2:d0:44:cf:f3:d8:a8:22:8c:d9:e6:73:
                    2b:4f:9d:60:17:79:a8:9a:74:1d:63:a4:96:78:43:
                    3a:27:8a:91:3d:4a:8b:37:e7:1f:b3:35:2e:b0:a3:
                    47:02:3f:ab:c1:b0:2c:72:08:89:a6:4d:d5:9e:d4:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:ED:58:CF:8A:0D:CE:E3:9B:FF:CE:DE:F5:2C:5D:CA:FD:F9:09
            X509v3 Authority Key Identifier:
                keyid:46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34322e302f32342d3234203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:39:d8:58:05:1e:e4:90:1e:42:10:da:02:9f:49:bb:3b:1b:
         a0:63:51:e2:f4:fb:bf:93:3a:b6:f6:50:21:b9:15:23:43:36:
         c7:6c:85:34:8a:c1:13:76:cb:ea:bb:2e:36:c8:3f:46:e7:c9:
         73:ba:69:08:a8:cc:aa:7f:bf:a9:88:3a:a4:ba:76:71:37:f0:
         e0:00:15:4b:e6:12:e9:80:35:f9:02:06:6d:57:7a:f7:9e:33:
         d2:cc:a8:cf:ee:17:19:aa:a4:81:47:b1:e8:f5:4f:01:36:d8:
         9e:a1:d1:eb:b0:e1:42:65:53:61:47:30:c8:3b:25:04:a5:6c:
         70:67:4b:bf:35:e2:71:ae:b7:3c:14:75:1e:d1:b8:cb:d8:d5:
         d3:f8:0f:14:83:49:a2:7e:9b:2b:50:90:1e:64:09:5a:7d:4a:
         38:05:4a:87:a6:d5:e6:ab:aa:0f:f6:29:86:d6:30:45:e5:fc:
         c2:0d:c2:7b:2b:bf:ff:48:bb:56:80:05:68:ab:07:09:eb:89:
         56:9b:3c:21:f2:4e:9c:1c:34:96:07:dd:77:47:98:1b:7d:ac:
         44:70:78:a3:8b:f7:d2:55:7e:af:6e:e2:09:d8:a5:75:f0:26:
         d5:93:d6:7c:e7:be:3d:a3:5e:f5:d8:bb:4c:8e:b3:f1:48:df:
         04:16:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:02:14 2025 by rpki-client