Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138312e302f32342d3234203d3e20323731343636.roa
File:                     3230312e34392e3138312e302f32342d3234203d3e20323731343636.roa (raw, json)
Hash identifier:          isJS3KDZREZMnKoTmwv4mmGMB+lioJegXTEJaXZVy2s=
Subject key identifier:   59:01:C0:AC:67:47:8D:3B:D5:6A:99:68:46:5A:DE:BC:77:01:62:98
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       38EF35C51088660C951F9D37AAF65CDA58737C42
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138312e302f32342d3234203d3e20323731343636.roa
Signing time:             Thu 06 Mar 2025 14:31:48 +0000
ROA not before:           Thu 06 Mar 2025 14:26:48 +0000
ROA not after:            Thu 05 Mar 2026 14:31:48 +0000
asID:                     271466
IP address blocks:        201.49.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ef:35:c5:10:88:66:0c:95:1f:9d:37:aa:f6:5c:da:58:73:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Mar  6 14:26:48 2025 GMT
            Not After : Mar  5 14:31:48 2026 GMT
        Subject: CN=5901C0AC67478D3BD56A9968465ADEBC77016298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:d5:79:7a:20:d8:82:25:e9:ca:b3:53:e1:
                    e8:5e:b6:a4:48:9e:a5:cf:d9:13:d8:4d:6e:5a:41:
                    05:5e:ed:0c:a7:fc:2e:e3:fe:6c:f8:a8:55:a2:1a:
                    b9:42:64:4b:fb:8f:a7:8e:2c:95:27:8f:68:3a:9d:
                    61:82:d9:f5:e5:4c:38:f3:02:cc:9a:f6:85:57:f2:
                    0a:be:63:e1:f1:ae:ba:0b:10:80:89:b0:28:47:2f:
                    e3:bc:2d:4f:55:3d:78:0c:c3:12:98:a8:9f:bf:68:
                    b2:1c:1f:cf:db:56:7f:53:05:7e:46:8a:4f:a7:64:
                    8d:9c:17:85:0e:6d:7b:00:53:77:ee:50:96:36:fe:
                    60:e9:99:65:14:a6:60:c5:f3:76:05:04:93:2a:d7:
                    b6:bb:64:92:9e:78:a0:a8:12:5b:9d:3d:2b:a2:69:
                    14:23:32:79:83:a9:2f:a7:03:0d:e2:2d:20:f1:ac:
                    34:ba:90:21:60:98:4d:ea:b1:71:f4:c5:40:3d:87:
                    42:0a:36:94:bf:e9:98:e1:4a:f0:46:32:ed:4e:9b:
                    95:a9:ef:bb:e8:50:d4:26:f2:f2:a9:57:74:7f:46:
                    b0:01:13:34:74:65:8a:fb:83:76:ce:41:f2:19:cb:
                    e6:ab:c0:50:4d:9b:c6:57:0e:3e:6e:e5:ff:1a:d5:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:01:C0:AC:67:47:8D:3B:D5:6A:99:68:46:5A:DE:BC:77:01:62:98
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138312e302f32342d3234203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:3b:e8:a4:4a:03:63:df:26:14:12:1b:d5:84:bb:22:04:d5:
         85:6c:2c:d4:8e:c1:50:86:89:0b:f6:94:a0:15:a9:65:e8:9b:
         d4:98:8a:46:51:c4:e0:8b:4b:aa:5b:de:23:d1:1b:74:79:4c:
         5a:6d:ff:62:3e:47:ac:34:ff:c7:88:2d:03:61:32:06:1b:f3:
         48:0b:5b:93:d9:db:3c:d2:7c:72:53:0a:32:38:b9:c5:da:f4:
         d4:d9:13:59:f0:d5:41:5f:73:26:91:6d:6a:fa:7e:78:94:11:
         26:fa:61:41:68:6d:5c:24:1b:77:7a:f0:82:06:5e:33:19:3b:
         61:11:a0:78:60:17:d2:07:dd:b3:47:65:3d:4c:33:6b:ca:e6:
         1e:f2:0a:93:b4:cd:7f:c2:89:51:73:e2:e5:ce:24:3b:d3:c3:
         a9:a6:30:57:05:d8:e0:56:b1:21:7e:94:9a:b5:e2:f0:c6:a4:
         47:2a:fc:f0:35:53:87:ab:fc:7e:83:1b:5b:c8:68:7f:52:4b:
         7a:c7:2b:30:b8:3e:79:5b:59:6b:23:28:dc:44:96:36:52:85:
         f8:2d:ec:66:dd:94:ae:a0:ef:70:20:f5:2e:df:10:08:3a:39:
         f2:81:43:74:ae:d4:cc:98:82:39:5c:9a:0a:c1:27:60:8d:1d:
         cd:70:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:09 2025 by rpki-client