Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
File:                     3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa (raw, json)
Hash identifier:          UMV/2jYtD3NUU864tA3H22D/kQuoSYe57QafsV+kxDQ=
Subject key identifier:   E2:F0:2D:67:EB:C9:F4:D6:B5:99:D7:51:D2:58:60:59:8B:A8:53:C5
Certificate issuer:       /CN=D76580431FA15F4C3D598181DBE97B6443141E8C
Certificate serial:       6E07C56A2882FD3A7BB6B7E2E0E52342C6B0C989
Authority key identifier: D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
Signing time:             Thu 28 Nov 2024 19:31:18 +0000
ROA not before:           Thu 28 Nov 2024 19:26:18 +0000
ROA not after:            Thu 27 Nov 2025 19:31:18 +0000
asID:                     267531
IP address blocks:        201.182.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl
                          rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:07:c5:6a:28:82:fd:3a:7b:b6:b7:e2:e0:e5:23:42:c6:b0:c9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76580431FA15F4C3D598181DBE97B6443141E8C
        Validity
            Not Before: Nov 28 19:26:18 2024 GMT
            Not After : Nov 27 19:31:18 2025 GMT
        Subject: CN=E2F02D67EBC9F4D6B599D751D25860598BA853C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:ef:8a:df:b0:5e:a7:ca:56:ab:6a:5a:0a:
                    5a:fd:b6:3d:29:97:95:71:b7:98:7b:29:63:ff:77:
                    d8:f8:57:a6:4a:83:3f:0c:53:dd:f9:bb:57:ac:eb:
                    a9:24:d5:d0:5f:1c:25:18:ff:99:24:3b:2a:74:a8:
                    d6:92:a0:57:d4:3a:e9:f9:e8:7f:7a:9c:c7:29:88:
                    7b:72:cb:f8:65:ed:71:8a:3a:22:1e:b8:cf:b6:c5:
                    d5:b6:1f:ac:3a:94:ef:f5:e2:ae:17:94:4c:fb:d7:
                    94:5d:e9:1c:f3:f2:06:4f:8c:ae:59:72:f7:cf:df:
                    b5:83:f5:b4:ee:85:24:ca:15:9c:4c:c9:7c:9c:34:
                    75:92:75:bf:8a:dd:13:dc:31:df:ab:d3:40:c9:02:
                    6b:5b:ac:a6:20:06:2a:b8:b0:a0:89:4f:50:9b:17:
                    a3:41:6a:e9:ec:5b:f2:3a:67:61:5c:7d:56:03:3f:
                    8b:82:c4:8c:67:a0:96:cf:37:0c:07:c0:1f:fc:db:
                    6c:3d:eb:75:51:66:c7:97:7c:91:c2:f4:21:d3:8e:
                    99:e0:3a:16:5f:98:09:cc:f5:f0:d6:e8:c0:69:4a:
                    9a:5c:64:9c:37:e8:dc:1f:9f:66:5c:03:35:8e:43:
                    5b:b6:27:6d:3c:8a:82:75:38:30:ec:8c:92:f1:03:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:2D:67:EB:C9:F4:D6:B5:99:D7:51:D2:58:60:59:8B:A8:53:C5
            X509v3 Authority Key Identifier:
                keyid:D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:82:2d:35:55:74:0e:e3:53:68:69:4e:cc:5e:a6:52:eb:
         aa:86:29:ed:16:ad:a7:e3:10:03:ac:d4:9f:39:6b:46:f8:92:
         d4:ea:46:45:05:f3:66:a6:e4:04:05:87:a7:c3:46:2a:e7:f2:
         e4:4a:68:3c:73:cb:78:e9:d4:08:7b:7c:cf:62:0e:80:7c:b2:
         73:ee:71:73:df:cb:f2:4a:0a:69:4b:55:c5:23:4c:82:15:ff:
         94:43:d4:45:42:89:6f:d4:1b:84:41:c2:f3:d6:ce:95:5c:fe:
         0e:23:e0:c5:37:0b:9b:8e:ac:7e:f6:ce:41:60:13:34:62:fd:
         c1:73:83:30:14:60:6b:94:d8:46:4d:e4:6e:8c:92:db:ce:80:
         2b:34:eb:6b:e6:7f:1f:b9:96:9c:ee:c4:6d:22:b4:8f:50:b0:
         88:bf:18:5a:bc:22:e2:34:12:17:b7:6c:e6:fa:19:10:5e:33:
         bd:a1:d7:7f:ff:9c:96:a3:d4:07:ad:a2:7b:44:e2:60:dd:6c:
         bd:80:cf:09:63:82:44:3f:e4:c8:a7:a0:47:7d:ce:ea:85:50:
         e6:54:a4:5e:8b:c7:4d:43:81:d2:b3:22:98:6b:83:36:3e:62:
         61:cb:af:60:d7:b7:2a:53:a8:14:6a:3d:68:93:6d:83:44:b2:
         19:80:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:40:40 2025 by rpki-client