Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          gOQJhSn4/olbrUqN16iE+1NzHwk96yzsnysELPeh1wM=
Subject key identifier:   8A:82:97:F0:C4:04:3A:64:0E:10:D9:B4:B1:78:D1:11:FA:75:9D:19
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       1920B08E1EFA603A083612856AAE03FC9F0ED4A0
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 12 Mar 2025 13:31:49 +0000
ROA not before:           Wed 12 Mar 2025 13:26:49 +0000
ROA not after:            Wed 11 Mar 2026 13:31:49 +0000
asID:                     271466
IP address blocks:        201.49.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:20:b0:8e:1e:fa:60:3a:08:36:12:85:6a:ae:03:fc:9f:0e:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Mar 12 13:26:49 2025 GMT
            Not After : Mar 11 13:31:49 2026 GMT
        Subject: CN=8A8297F0C4043A640E10D9B4B178D111FA759D19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:5d:95:32:d3:b7:d1:22:27:52:e8:79:3d:
                    10:60:00:e2:10:2e:33:15:f9:3e:f7:37:63:4a:15:
                    a8:94:a1:ed:68:e2:4a:7e:5a:9c:b2:86:8e:c3:d9:
                    14:9c:ec:8c:ef:48:2f:e3:cc:78:d0:8f:59:b1:df:
                    8e:28:5d:30:a1:4c:c4:0d:20:6a:05:32:45:53:3e:
                    26:27:fa:98:ce:65:77:91:18:3e:1d:80:42:84:4c:
                    d3:e0:25:a1:c0:d4:2a:9b:e5:6f:2e:0e:f3:f2:54:
                    99:69:1c:99:5b:70:e8:9b:5f:00:72:ac:8e:c4:2c:
                    e6:e8:68:62:a7:47:c3:f9:9e:e8:48:01:ae:59:2a:
                    9e:80:06:1a:e9:cb:69:77:4c:ce:77:68:81:56:69:
                    8a:1b:ae:6b:01:ee:09:5c:e3:24:c0:2f:81:88:6b:
                    c7:dd:ec:80:70:36:11:4a:0f:c7:15:c8:38:52:19:
                    1a:d4:8c:b5:16:0e:42:af:3d:8f:f2:cf:38:71:2b:
                    07:48:5f:06:7e:d0:9d:ff:07:da:66:46:62:de:ff:
                    ae:74:26:c2:61:55:cd:06:d6:0d:89:5e:e8:fa:15:
                    16:a0:bf:ad:32:4e:dc:57:aa:9c:42:92:74:97:2a:
                    ca:e5:56:be:78:67:75:aa:86:4e:83:65:30:95:74:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:97:F0:C4:04:3A:64:0E:10:D9:B4:B1:78:D1:11:FA:75:9D:19
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:9e:fd:64:0a:52:20:d8:ee:ac:68:a1:25:32:f6:08:45:ca:
         29:b2:bc:1c:2b:4a:95:53:4d:dd:56:5d:a2:c9:e0:ec:b3:c9:
         98:69:b5:72:76:d4:80:e0:c1:d5:75:53:bb:62:bc:41:97:1b:
         05:49:a0:c0:35:e4:96:3c:1e:4d:0d:3b:2b:79:ec:a4:72:e8:
         c0:6e:8d:b0:f9:00:a5:30:88:5b:92:9a:14:8d:21:b2:c1:d5:
         e8:d9:19:58:ff:40:6d:0a:57:3f:70:9a:57:fb:6c:4c:e1:b5:
         3b:79:0b:fe:72:9d:5a:10:bf:b7:d1:15:a7:c4:19:1b:26:51:
         a7:60:14:e2:5e:62:50:72:06:4b:53:44:c8:2c:58:fc:d4:4a:
         32:06:1a:15:3c:82:9d:f9:52:4a:1a:2c:d7:7d:fe:e2:fe:c1:
         4a:93:0f:a4:1c:e1:62:2a:22:13:c3:a9:68:b3:a1:ad:5f:83:
         7d:a6:17:7e:46:05:91:b5:3a:3c:c5:06:25:9d:5a:cb:97:c6:
         a5:98:41:08:d1:a5:81:df:4e:37:54:f0:d3:d7:98:09:4e:4a:
         30:61:eb:4b:b1:4c:5c:f3:b7:ab:82:0b:05:f5:20:eb:c2:dc:
         4f:09:b6:7e:28:ed:49:ea:94:42:60:6b:88:25:af:b0:02:16:
         79:5d:31:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:50:51 2025 by rpki-client