Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34332e302f32342d3234203d3e20323731343138.roa
File:                     3138312e3232342e34332e302f32342d3234203d3e20323731343138.roa (raw, json)
Hash identifier:          alNHVNbBBveW4vXmcMG/rfTqY6YUWfyUwKmOgwZHxTk=
Subject key identifier:   6D:BD:22:38:0C:45:45:19:D5:26:EC:86:0C:C7:C0:75:08:9E:69:AA
Certificate issuer:       /CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
Certificate serial:       165A8907C1FB56480DEE927601EF0836C86199B0
Authority key identifier: 46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34332e302f32342d3234203d3e20323731343138.roa
Signing time:             Tue 03 Jun 2025 13:22:56 +0000
ROA not before:           Tue 03 Jun 2025 13:17:56 +0000
ROA not after:            Tue 02 Jun 2026 13:22:56 +0000
asID:                     271418
IP address blocks:        181.224.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl
                          rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 18:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5a:89:07:c1:fb:56:48:0d:ee:92:76:01:ef:08:36:c8:61:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
        Validity
            Not Before: Jun  3 13:17:56 2025 GMT
            Not After : Jun  2 13:22:56 2026 GMT
        Subject: CN=6DBD22380C454519D526EC860CC7C075089E69AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:50:17:0b:c0:d6:2b:b6:6d:73:88:33:df:
                    9b:7f:61:ab:69:14:bb:df:e7:79:36:54:c6:b7:63:
                    37:f3:b0:d9:74:5d:2a:45:2a:dd:75:97:47:3c:bc:
                    76:0d:57:ad:88:23:f2:e3:c3:b0:f4:d0:15:60:4c:
                    31:4e:16:ae:c3:4d:81:af:87:eb:f8:49:33:e4:86:
                    8f:0b:64:ca:cb:f0:71:9c:ab:53:ee:a0:01:5d:ab:
                    59:9b:a7:79:cf:45:4a:cb:d6:32:12:47:53:61:cb:
                    af:5a:ad:e0:d9:9e:86:ad:bd:54:4b:9f:a7:91:33:
                    fa:3f:e6:90:7e:22:58:54:65:83:87:31:4d:b8:0b:
                    ff:8d:31:83:9c:e2:35:13:14:af:ac:00:93:e5:72:
                    66:57:9c:f1:7c:bc:96:38:0c:a1:05:b0:dc:32:ef:
                    8b:09:af:91:cf:43:4a:80:72:f7:a5:f4:58:ef:ba:
                    1f:16:7a:c5:0d:5e:67:d8:0d:ec:ab:a7:bf:67:48:
                    3a:d5:5f:ac:9a:91:0d:f0:d4:a4:4d:eb:93:5b:d5:
                    6f:9f:ae:74:bf:c4:1c:52:0e:f7:74:b3:a7:57:e8:
                    85:7f:d1:72:2d:c6:6d:35:d8:b2:6f:ba:ab:e8:43:
                    cd:56:3b:db:6d:0b:5f:8f:ab:09:39:a4:41:6d:a4:
                    95:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BD:22:38:0C:45:45:19:D5:26:EC:86:0C:C7:C0:75:08:9E:69:AA
            X509v3 Authority Key Identifier:
                keyid:46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/3138312e3232342e34332e302f32342d3234203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:5d:8f:db:5b:00:fe:c4:ce:1d:43:7d:68:44:7c:cf:76:
         06:13:4d:17:0c:0c:87:6a:c1:de:d4:8d:aa:ec:e9:a5:85:f0:
         3a:58:77:3a:aa:74:15:29:1f:27:1b:8c:be:71:e6:eb:5b:ad:
         02:bb:cc:a2:8a:18:1b:23:19:58:c9:ec:22:67:af:7b:a8:01:
         99:46:47:b6:26:5b:c9:4f:ef:56:df:63:99:3c:62:e3:d4:44:
         5b:0c:2b:3f:f2:43:e1:20:9c:60:96:e7:89:b4:f0:15:0c:85:
         22:91:31:55:1a:f8:8b:12:b6:70:cf:04:ee:44:eb:cf:e1:cb:
         f3:5e:76:34:3d:bd:f5:77:a7:40:1c:ed:dd:e7:07:44:97:90:
         39:73:d4:82:3a:1c:eb:04:1f:a2:13:37:5a:85:8a:c6:20:84:
         bc:9b:df:04:d5:27:48:cc:a8:b9:ff:75:4f:40:e9:8d:98:98:
         9c:84:33:35:53:00:87:b7:c5:45:63:fe:d0:42:3f:5c:fe:ce:
         b5:24:b9:44:5e:d1:ce:98:d9:61:7c:d5:e0:33:5e:62:7c:42:
         80:4a:a2:89:12:21:a0:81:8c:28:11:23:05:49:89:76:93:32:
         2d:d8:76:16:0e:91:bb:1e:43:47:ab:a0:92:84:ce:f2:3e:44:
         39:0c:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:53 2025 by rpki-client