Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa
File:                     3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          mHPFOGNKvdgc/zI811HdfbTjLQWNbiDqxL/El5Lm3fA=
Subject key identifier:   9A:57:21:86:EA:A5:B5:5E:49:44:66:7D:F1:8E:0D:2E:4D:01:7B:D9
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       0657AB81CB7D77F9ECB4B8691F077EC307EA9859
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa
Signing time:             Fri 18 Jul 2025 13:35:07 +0000
ROA not before:           Fri 18 Jul 2025 13:30:07 +0000
ROA not after:            Fri 17 Jul 2026 13:35:07 +0000
asID:                     264886
IP address blocks:        201.49.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 21:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:57:ab:81:cb:7d:77:f9:ec:b4:b8:69:1f:07:7e:c3:07:ea:98:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jul 18 13:30:07 2025 GMT
            Not After : Jul 17 13:35:07 2026 GMT
        Subject: CN=9A572186EAA5B55E4944667DF18E0D2E4D017BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:92:db:77:67:df:3e:18:aa:f1:0d:b4:a9:ff:
                    fc:ad:4a:83:fb:92:33:34:c9:a5:c7:6b:ef:23:28:
                    e1:f5:11:9d:aa:97:6c:14:04:75:f1:16:20:50:e4:
                    12:38:26:dd:25:b3:8b:cf:f4:e1:24:68:a4:01:18:
                    de:67:bc:1a:55:78:c1:04:11:75:cf:12:9d:9c:c2:
                    b6:d6:c6:18:86:92:cf:ff:d3:dd:9d:1a:50:b1:bb:
                    e2:a8:db:24:6f:fe:c9:4b:68:ee:94:1d:1d:85:42:
                    ae:23:d9:72:3c:c1:1e:2a:ea:e7:a6:8b:42:e1:58:
                    23:54:88:78:91:07:2b:8a:e3:d6:f4:87:67:6a:74:
                    99:0d:ba:4a:24:27:aa:49:68:9b:f0:c3:ac:71:0e:
                    48:e1:a2:28:e5:fd:06:a6:df:27:eb:27:63:2c:65:
                    9c:6b:23:a8:4a:ec:0f:fd:24:82:fd:27:75:fd:e6:
                    53:57:8c:4f:ac:8b:c3:a7:f4:9a:9b:64:a9:01:f1:
                    69:a0:c7:b6:b3:9a:45:30:40:6f:4c:e7:90:c7:17:
                    d7:5c:f7:3a:69:b0:4b:62:9f:26:2f:ce:eb:64:71:
                    2d:08:4a:9e:dc:2d:ad:7d:cf:f4:88:ad:f0:23:62:
                    9f:5b:38:85:6c:79:c8:b4:14:2b:fb:c9:a4:a8:71:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:57:21:86:EA:A5:B5:5E:49:44:66:7D:F1:8E:0D:2E:4D:01:7B:D9
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:f2:90:ef:80:de:ac:32:ed:9c:24:b6:cf:27:1d:64:d4:
         80:36:5f:dd:b3:26:e0:d0:3a:d2:77:b4:a5:a7:da:87:5b:39:
         c1:a0:29:55:d4:d3:92:8a:50:f4:64:c5:88:fb:ac:bc:67:02:
         d0:3f:db:4b:6b:6e:83:55:0e:c1:a3:c4:29:76:45:12:fe:ef:
         16:1a:3e:05:73:83:61:19:a9:ad:7a:d6:61:4a:64:6e:9b:af:
         78:40:42:4e:d5:bd:87:75:b4:e1:47:f4:86:ca:1d:89:90:75:
         b5:57:eb:0f:53:16:95:c0:c5:8a:56:28:1c:e5:8a:7a:de:64:
         6b:90:8d:16:75:f3:b9:df:ef:39:3b:b3:ed:e8:17:d9:6a:a1:
         9c:97:95:19:8f:1c:37:17:3f:d1:1b:25:a3:9c:50:7c:f4:65:
         86:26:df:32:a1:c6:56:64:3a:43:03:69:d2:c8:a4:c4:62:cd:
         35:0c:2e:e4:14:25:d2:33:61:e1:a4:d6:91:9d:e9:b6:ae:55:
         f8:2e:56:27:b6:f8:47:6a:2b:d1:31:db:06:93:33:1d:ed:97:
         80:67:ca:22:46:82:bc:05:a4:9d:24:05:b5:70:2f:15:6c:47:
         76:77:5e:fb:89:01:97:94:d0:b5:11:c1:30:14:2e:fb:06:a6:
         1e:c0:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:02:55 2025 by rpki-client