Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          jyIAstKnITE7aEhAnQjO+PWUqPQWBU3eLHH3Eo2hckE=
Subject key identifier:   15:81:29:AC:D3:C4:0D:28:97:D4:DB:A9:37:F5:94:43:5F:5C:A5:3F
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       206DF75F0AE20F076F20B1A687BFD7B2CB413C70
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 12 Mar 2025 13:31:49 +0000
ROA not before:           Wed 12 Mar 2025 13:26:49 +0000
ROA not after:            Wed 11 Mar 2026 13:31:49 +0000
asID:                     271466
IP address blocks:        201.49.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:f7:5f:0a:e2:0f:07:6f:20:b1:a6:87:bf:d7:b2:cb:41:3c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Mar 12 13:26:49 2025 GMT
            Not After : Mar 11 13:31:49 2026 GMT
        Subject: CN=158129ACD3C40D2897D4DBA937F594435F5CA53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:80:78:3f:73:44:23:7c:35:76:9d:36:ec:
                    9d:64:6a:37:ed:ad:20:96:f3:d0:07:72:b9:55:57:
                    0f:48:be:d1:bc:83:c8:b7:d2:8a:45:2b:cf:b1:3e:
                    2f:13:74:b8:cc:65:95:73:a8:a2:3f:85:dd:2a:bb:
                    59:01:a2:b4:2d:ae:40:0d:8b:b9:a7:08:9a:3a:06:
                    2c:30:e8:cd:60:0d:bd:1b:23:3d:c5:e2:d9:6e:c3:
                    ab:a4:14:f4:57:e2:64:bd:4f:dc:fe:bc:b4:56:16:
                    6b:96:18:79:32:36:23:39:14:c4:4c:14:03:2a:19:
                    04:d0:a4:e4:ca:70:54:98:6a:93:87:c7:78:3a:b8:
                    f0:e4:2a:5b:f5:10:ac:60:e9:ba:a4:c7:36:3b:bf:
                    5d:ec:ed:b4:d0:b6:be:0d:7a:45:85:b6:5e:3e:93:
                    e7:32:40:1f:ee:f9:7a:9b:85:cd:c1:c6:c7:d4:82:
                    a7:ea:6c:e4:2b:d0:68:28:12:60:32:6d:1d:75:1a:
                    fb:ea:fd:63:fc:e1:de:01:f1:be:52:ec:50:23:80:
                    3c:b0:8e:7e:e4:77:64:f8:c1:af:69:af:49:8b:dc:
                    c5:b5:13:c5:ae:b4:c0:63:27:4e:d9:34:fe:a7:63:
                    42:11:6e:f9:a2:12:65:f8:cb:46:cb:bf:07:56:fc:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:81:29:AC:D3:C4:0D:28:97:D4:DB:A9:37:F5:94:43:5F:5C:A5:3F
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:6f:21:bd:08:94:10:5d:f7:d4:7d:f3:95:d6:c5:7f:3d:77:
         0b:92:c6:c5:8a:67:96:0a:28:ac:89:a8:d3:f8:1a:35:83:89:
         6f:b8:15:e2:b7:b8:24:48:6d:30:3c:d5:96:73:e7:17:80:6c:
         e5:10:1b:7b:eb:0b:c4:03:58:4f:ff:eb:84:e1:c0:db:aa:8b:
         fc:b6:ca:86:e3:fa:fc:66:d1:86:7d:05:19:a1:67:73:8b:b5:
         7a:15:c0:b2:c2:89:ae:82:75:03:d4:16:4f:bb:98:f6:ed:f1:
         93:58:79:ca:b6:73:da:24:87:72:b1:98:25:cc:83:0d:28:62:
         7a:79:41:2e:36:db:e0:fc:86:2d:3c:1a:bb:98:68:46:0f:3d:
         a1:ef:dd:27:6a:b9:7c:76:2c:aa:bc:71:9f:0e:2e:49:f4:d0:
         ec:60:2a:bc:50:2c:07:48:37:6a:6e:95:19:39:27:7a:2a:39:
         bf:db:a0:35:34:95:e7:f8:7f:ad:bc:e9:81:9f:38:ca:8f:c0:
         4f:90:cb:d4:b4:4b:64:14:3a:39:d5:60:f0:bd:87:1e:66:42:
         02:d5:24:03:2f:ec:fb:d9:a0:28:36:5e:01:2b:47:21:00:db:
         79:1d:a1:f9:75:10:d6:2e:5f:cf:5c:4b:45:d5:f5:5e:05:0c:
         6b:d0:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:10 2025 by rpki-client