Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
File:                     3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa (raw, json)
Hash identifier:          bqvZ1PV8LUhBf5JFS4uCb4PW7l97mORSa3iC75GRr/8=
Subject key identifier:   E2:1B:78:8F:B3:4E:CD:F7:CC:E5:6C:86:D6:C5:87:3B:68:C1:75:AA
Certificate issuer:       /CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
Certificate serial:       01A65402259633E135AFD0D739F3BC1FD5060FBB
Authority key identifier: 41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa
Signing time:             Mon 07 Apr 2025 14:23:34 +0000
ROA not before:           Mon 07 Apr 2025 14:18:34 +0000
ROA not after:            Mon 06 Apr 2026 14:23:34 +0000
asID:                     267492
IP address blocks:        201.182.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a6:54:02:25:96:33:e1:35:af:d0:d7:39:f3:bc:1f:d5:06:0f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411F4F8C4C5A70807A28FC3C85F6C6BAF011245B
        Validity
            Not Before: Apr  7 14:18:34 2025 GMT
            Not After : Apr  6 14:23:34 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:30:a4:f8:ae:a0:fe:d7:96:0b:3a:ce:0e:
                    29:ba:ad:3b:a8:06:7b:03:7a:06:b7:55:9a:59:32:
                    a8:16:a1:1f:8d:07:d7:da:f4:c0:2b:b4:59:9f:e5:
                    9b:fa:7e:c1:a0:7a:34:ab:cb:50:32:a1:a2:c3:d5:
                    c0:26:a6:d4:ce:82:43:71:e7:b6:2c:4f:13:93:53:
                    f0:a9:ab:a0:79:d1:01:b1:d2:88:2f:a3:e6:99:03:
                    c8:d2:39:9e:cd:2b:b1:90:f7:3f:16:a5:33:c8:d3:
                    a4:dd:17:f0:9d:b4:d4:79:bf:cb:9c:55:9e:13:4b:
                    7b:ee:b6:32:c2:2c:61:fa:5f:16:07:80:b9:c5:fe:
                    dc:59:34:96:5c:14:c0:a0:ac:a7:1e:ff:a1:7b:48:
                    69:1a:c5:62:ab:16:31:5a:9a:f6:6f:2c:d1:c6:f7:
                    61:6c:92:d9:ea:4e:f7:24:a7:b9:68:2c:0d:ea:14:
                    40:c1:19:48:4f:a0:6d:e5:a0:69:f6:0d:ef:a7:23:
                    9b:55:ad:05:7d:8b:11:49:5b:72:dc:f9:fa:7f:e9:
                    85:a4:69:bd:fd:5e:9c:f8:59:92:a2:65:7a:8a:0c:
                    d4:59:02:9c:52:fe:77:7e:5b:39:c4:ac:19:02:8b:
                    f8:f7:c2:dc:ae:57:e4:bf:55:be:d7:5e:a4:56:5a:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:78:8F:B3:4E:CD:F7:CC:E5:6C:86:D6:C5:87:3B:68:C1:75:AA
            X509v3 Authority Key Identifier:
                keyid:41:1F:4F:8C:4C:5A:70:80:7A:28:FC:3C:85:F6:C6:BA:F0:11:24:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/411F4F8C4C5A70807A28FC3C85F6C6BAF011245B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/0/3230312e3138322e31322e302f32322d3234203d3e20323637343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:94:43:cd:eb:ee:70:26:06:43:8d:d0:00:da:c0:3e:06:
         93:68:56:3e:e6:50:36:fa:e6:8c:0a:2a:8a:a0:89:75:54:ec:
         f5:e0:e1:79:99:04:52:5a:27:a6:c4:01:dd:02:a5:75:2f:7d:
         a7:b6:b0:d7:e6:82:4a:7f:8d:98:b9:e7:e9:4d:bd:23:e1:d1:
         61:8f:1d:99:45:dc:ab:ce:42:70:57:aa:ac:85:68:8e:70:8b:
         07:c9:59:2b:83:2e:b2:bc:69:6a:1b:55:33:2a:a3:75:61:16:
         b9:89:1e:f9:6e:c8:34:6a:db:4e:12:94:2b:21:62:ae:dd:fe:
         c4:1f:5d:da:0a:b3:aa:f2:9d:8a:5c:67:75:97:db:04:34:35:
         24:86:b6:9f:3f:ee:f0:67:b5:dc:e3:d2:cd:54:74:44:88:d8:
         aa:62:b8:92:99:fc:45:fd:2c:04:4f:cd:b8:49:15:85:5a:48:
         36:ac:04:88:1b:a8:f1:e3:c7:b3:a8:1a:fb:bb:33:86:58:39:
         21:1a:f0:77:bb:a9:bd:22:bb:f9:61:7c:28:4b:d0:e0:b8:df:
         2a:b0:1d:00:0d:79:10:a2:12:12:fa:cb:10:06:a6:54:7d:6a:
         34:d9:83:3b:46:8a:af:f2:f7:ab:e0:a0:12:ec:5b:ee:25:fc:
         18:01:12:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:33 2025 by rpki-client