Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
File:                     3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa (raw, json)
Hash identifier:          nw7+NUCzUrXu7MgaCPku/SqyzOvNpJjFnNSpYab5tSM=
Subject key identifier:   12:1B:F6:05:06:C4:55:96:02:B0:D0:23:71:5C:97:D5:A5:53:2F:18
Certificate issuer:       /CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
Certificate serial:       39F8F29E570CA486DAB8A5A9952ADFC28D558C10
Authority key identifier: 5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     271550
IP address blocks:        181.232.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl
                          rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:f2:9e:57:0c:a4:86:da:b8:a5:a9:95:2a:df:c2:8d:55:8c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D88506E9E4CEFFA0495A2DC722396EE08FC529D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:59:c0:e8:a8:23:09:d4:07:96:ab:1e:e8:
                    b9:10:ec:82:d6:4c:a2:6a:db:0b:e5:5c:b5:b2:a7:
                    fd:aa:20:7f:b3:8c:b1:f6:9d:16:4c:e0:51:f0:0a:
                    6c:51:11:8b:94:b8:ad:29:06:66:80:0c:09:d2:da:
                    81:4c:8c:0c:2f:af:34:50:3d:45:c1:61:b3:1c:8a:
                    c9:8e:2e:86:8f:72:34:84:07:01:91:ac:1e:a4:c4:
                    ea:1d:a2:de:a6:29:68:9b:fe:29:36:a1:8c:fb:ac:
                    c6:94:6c:ea:7e:a2:2a:2a:e8:09:12:c3:4d:12:3a:
                    b7:b7:72:4a:81:19:46:3f:2f:51:a9:70:c5:cb:26:
                    60:80:4f:1a:b7:98:8d:84:29:ca:c5:2f:21:e5:db:
                    97:dc:be:c3:06:e2:fd:64:e5:0c:82:4e:58:9c:bd:
                    64:19:2a:bf:3e:b5:57:d3:7b:d0:1d:f6:f7:ab:8a:
                    25:fe:82:ff:1e:a4:6e:98:23:c7:0e:42:fb:4d:12:
                    7c:fc:95:91:7e:39:16:e5:96:fe:1d:ef:c5:bd:4c:
                    35:6b:9f:1b:66:48:be:95:46:f5:a0:60:4b:11:53:
                    da:0a:bf:78:bf:be:4f:6d:e6:f2:b0:28:b3:9e:71:
                    5e:c5:ff:ec:88:53:43:2f:d3:ee:82:3e:55:73:84:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:F6:05:06:C4:55:96:02:B0:D0:23:71:5C:97:D5:A5:53:2F:18
            X509v3 Authority Key Identifier:
                keyid:5D:88:50:6E:9E:4C:EF:FA:04:95:A2:DC:72:23:96:EE:08:FC:52:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D88506E9E4CEFFA0495A2DC722396EE08FC529D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zcXxm688UdzTnHCKPk49fSCV6Tc58TTHKuA5kkedkXR/1/3138312e3233322e3234302e302f32322d3232203d3e20323731353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:35:39:9a:e2:e4:07:42:25:31:d1:c7:56:c2:33:de:c8:a4:
         3c:b4:bb:1c:10:d1:8d:06:16:2a:45:04:73:eb:30:e9:ff:85:
         ec:46:a6:c5:0e:5a:09:6e:59:db:57:b4:6d:ab:f9:52:ee:f3:
         75:7c:4a:90:e9:2c:6d:23:05:cf:f1:87:c8:e8:4f:84:c6:10:
         c4:c5:ea:5e:df:d0:59:4d:ad:83:77:26:62:fe:4f:0c:e9:7e:
         ff:e1:b9:f6:fe:7d:3c:3e:67:a7:fc:ee:64:2d:49:c0:c0:de:
         9c:19:71:e7:e1:0c:fa:8d:2e:58:e0:c2:20:8e:aa:38:b3:f6:
         a5:7c:85:74:cc:5d:7e:16:17:b3:68:94:3f:91:d2:0f:79:5c:
         d0:25:c7:e5:93:0a:12:70:0a:5a:55:2c:c0:71:8b:23:07:f3:
         83:84:7c:50:da:dd:3c:bd:fc:ef:b4:02:f6:71:fc:0c:b0:ed:
         da:98:07:36:b4:9e:0c:15:95:83:8e:8a:f3:00:6b:ae:c9:dd:
         6a:f2:5b:54:60:f0:36:b5:4d:bd:97:c9:3b:44:2c:0f:b7:41:
         36:24:3f:d8:b2:33:ad:be:bf:f8:24:de:eb:21:57:d7:36:8f:
         a5:2e:3b:80:de:e8:18:fd:7d:26:16:79:cc:9c:de:39:10:57:
         55:c6:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:50 2025 by rpki-client