Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa
File:                     3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          WUTnGI0qoUWOK0ODpHWYVq3BnNFJ2Sba86mqix7Ulg0=
Subject key identifier:   18:39:17:A9:AC:91:D6:80:05:76:0D:D1:5C:FE:5F:21:F0:50:2A:FB
Certificate issuer:       /CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
Certificate serial:       35FF57232E96B557A1AABA5D50197F6B155382B6
Authority key identifier: 94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa
Signing time:             Fri 07 Mar 2025 05:11:16 +0000
ROA not before:           Fri 07 Mar 2025 05:06:16 +0000
ROA not after:            Fri 06 Mar 2026 05:11:16 +0000
asID:                     262462
IP address blocks:        181.224.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 17:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ff:57:23:2e:96:b5:57:a1:aa:ba:5d:50:19:7f:6b:15:53:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Validity
            Not Before: Mar  7 05:06:16 2025 GMT
            Not After : Mar  6 05:11:16 2026 GMT
        Subject: CN=183917A9AC91D68005760DD15CFE5F21F0502AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:1b:2e:de:51:28:43:30:87:bb:fd:a3:bc:
                    43:08:f3:48:03:3e:79:97:e9:05:4f:06:06:eb:d7:
                    33:78:35:84:33:4d:3e:40:03:e6:99:5f:f1:f6:5e:
                    03:3b:8e:7e:0b:bc:1e:2e:40:cc:9e:0c:02:19:df:
                    53:02:34:63:f3:80:c4:27:dd:34:43:60:8e:77:74:
                    b8:1f:5a:5c:74:e0:c1:44:1d:bd:45:7f:cf:b1:e1:
                    e2:82:97:cf:bb:f4:c0:f0:54:12:56:c4:dc:cd:c8:
                    b7:15:53:f0:c9:06:e4:6c:a4:0c:e7:7e:b0:c4:27:
                    d4:c1:29:ce:32:2a:5e:eb:b1:1d:0c:8e:7a:66:06:
                    b6:bd:ba:5a:66:37:cd:d1:cd:1f:c9:9a:58:71:13:
                    2c:fa:26:37:d4:84:1f:fe:ce:a9:75:26:62:9d:5b:
                    67:4c:a8:34:0e:71:ab:89:aa:11:b8:f0:8a:17:c4:
                    5e:55:14:ad:ed:d8:35:1e:e3:54:fe:4c:d5:94:ce:
                    d6:a5:8a:8d:eb:7a:32:6e:7d:3d:77:b8:a2:01:fd:
                    c3:d7:89:b3:2d:64:9f:67:a5:92:f5:4a:67:56:ac:
                    9d:ff:30:13:59:5d:0c:64:64:34:04:16:00:b9:54:
                    1c:c3:2f:c5:35:31:3a:ae:5b:da:27:c3:3d:58:5d:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:39:17:A9:AC:91:D6:80:05:76:0D:D1:5C:FE:5F:21:F0:50:2A:FB
            X509v3 Authority Key Identifier:
                keyid:94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:62:45:0e:67:f2:79:49:03:42:92:67:3a:d1:e0:2f:eb:82:
         80:02:5f:e6:4f:d2:63:ba:d3:07:1b:ab:ca:56:e1:51:eb:ec:
         51:ce:04:6f:8e:b1:eb:75:d9:b6:a7:f2:63:4e:ac:2e:06:91:
         af:70:11:62:04:f3:01:ae:1c:82:d5:33:9c:b6:25:31:8d:de:
         c9:7b:c1:dd:3f:0b:44:13:7f:f9:a5:9c:eb:29:6d:45:aa:ff:
         02:f8:97:eb:33:fc:1d:93:ae:41:0d:d8:e4:c6:93:84:b3:60:
         d7:cf:0c:f4:a2:1e:3a:06:54:0d:40:dc:e9:f0:9b:cd:3d:5c:
         8c:29:13:bf:62:9f:c3:2b:26:11:94:b9:71:ee:8f:16:aa:3c:
         bd:ef:e0:55:7d:54:aa:3c:45:71:b6:cf:a6:de:7d:0b:fd:9a:
         01:98:6d:b5:b7:be:1e:de:e5:2d:d9:20:3f:3c:a4:c0:ed:b4:
         52:6c:d7:98:61:42:e7:a7:43:d9:a6:a8:83:2d:b2:61:a7:18:
         12:77:08:ba:6f:4b:da:46:24:bf:3a:d5:3a:ad:33:7b:77:23:
         ca:c1:3d:63:8e:0f:41:24:55:95:66:1a:d6:35:e7:49:cb:65:
         ca:07:6e:cf:bf:f4:15:eb:1f:52:07:97:59:a2:b9:2d:7e:c3:
         61:21:fc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:22:12 2025 by rpki-client