Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          Y6XBSOMMP/yx67hmBHKyeL1a8wdjtXjNc8P8n93d56s=
Subject key identifier:   A6:A0:77:D6:7F:5C:FB:24:AD:06:B0:2D:EC:2C:03:C7:C8:C1:93:E6
Certificate issuer:       /CN=249982A414DC7818B3DD0BE08F54211F76DC2061
Certificate serial:       40EDBC611FA9F57760430A5AFCA6567B5652422B
Authority key identifier: 24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa
Signing time:             Mon 14 Jul 2025 07:17:41 +0000
ROA not before:           Mon 14 Jul 2025 07:12:41 +0000
ROA not after:            Mon 13 Jul 2026 07:17:41 +0000
asID:                     271500
IP address blocks:        181.233.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Jul 2025 04:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:bc:61:1f:a9:f5:77:60:43:0a:5a:fc:a6:56:7b:56:52:42:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249982A414DC7818B3DD0BE08F54211F76DC2061
        Validity
            Not Before: Jul 14 07:12:41 2025 GMT
            Not After : Jul 13 07:17:41 2026 GMT
        Subject: CN=A6A077D67F5CFB24AD06B02DEC2C03C7C8C193E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:ff:cd:94:db:ee:9a:fd:e0:b7:22:01:a0:
                    fd:11:a2:93:8a:22:19:ca:89:69:a9:38:3f:93:df:
                    c0:0f:fe:8e:03:f2:d4:70:28:0c:02:40:aa:08:fd:
                    f4:74:b9:99:61:24:87:3b:29:ab:dc:b7:bd:fd:c0:
                    8f:ca:71:7f:1d:a1:79:26:37:e4:96:82:2c:d8:dd:
                    6d:90:65:54:33:06:33:f8:db:b5:8f:85:73:f9:78:
                    c5:74:4d:34:4f:91:de:b8:cf:5d:a2:5a:b2:7d:ec:
                    0c:b5:88:f1:39:32:44:32:cd:2d:90:91:70:a2:36:
                    9b:62:34:e0:79:5f:df:1b:aa:ac:80:dc:04:5a:8b:
                    c5:61:e1:16:13:8a:a0:f0:cf:61:7f:f9:a3:cd:34:
                    5c:b8:f5:e2:63:25:99:61:e2:6a:83:69:82:21:9a:
                    5a:5b:bc:16:51:f8:56:04:f5:0f:e3:9f:d7:ff:5d:
                    33:5c:99:4c:87:44:36:79:5e:ed:97:59:ce:da:0a:
                    22:c7:72:0e:a3:3b:04:e2:87:db:f8:1b:ca:5b:c8:
                    9d:31:2f:b5:d3:95:9f:81:ed:08:df:0b:dc:3f:1c:
                    0b:33:d4:86:01:88:92:b7:ca:40:c9:42:30:bf:cd:
                    1c:1c:21:e9:38:92:d8:e9:2b:3e:41:69:28:8c:f4:
                    96:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:77:D6:7F:5C:FB:24:AD:06:B0:2D:EC:2C:03:C7:C8:C1:93:E6
            X509v3 Authority Key Identifier:
                keyid:24:99:82:A4:14:DC:78:18:B3:DD:0B:E0:8F:54:21:1F:76:DC:20:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/249982A414DC7818B3DD0BE08F54211F76DC2061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/249982A414DC7818B3DD0BE08F54211F76DC2061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32332d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:78:ad:0e:80:34:bb:cd:cd:38:8b:f3:2f:ee:3d:33:a1:64:
         ff:dc:54:fe:8a:5a:2e:b9:8e:ad:ca:c5:06:17:a3:8d:3e:39:
         13:60:aa:99:76:c1:a3:57:ff:26:0e:57:92:38:34:bf:83:a8:
         71:36:e1:b4:54:e8:a7:80:54:7f:ca:5e:7c:9f:08:d0:7e:00:
         a1:c3:aa:67:d3:48:90:03:a0:46:c3:7e:a2:1a:0a:42:71:65:
         4c:fc:64:7c:92:ad:9f:dc:8a:81:59:19:4d:6f:04:e8:18:47:
         d3:ef:c1:09:df:eb:3c:c5:2c:60:0a:b1:41:54:e7:8c:d6:9b:
         10:55:49:a3:6e:b0:b6:d8:65:94:81:04:ca:49:d0:f3:8a:da:
         91:a4:3d:bd:de:b2:fd:04:d2:ac:9b:41:30:f0:96:cb:34:5a:
         f5:dd:ce:25:00:92:7a:24:e4:57:17:0d:c9:92:9d:83:df:1e:
         a4:70:8d:89:e7:d8:76:04:e5:09:21:2c:c8:53:ec:7a:a2:cc:
         5a:e5:bd:23:4a:0d:d3:f1:a3:78:5f:8b:68:5f:a0:28:d7:7b:
         27:1f:40:3d:34:a9:df:f8:93:6f:eb:6c:f8:69:cb:5b:f7:35:
         82:ac:94:7e:8d:54:90:b0:82:2c:66:d3:27:13:64:f0:ee:a8:
         3e:6b:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:09:54 2025 by rpki-client