Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
File:                     3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa (raw, json)
Hash identifier:          wgY70tJDkl0lI+b+Kg5FxAP21805ctRI0JF7RBivaYg=
Subject key identifier:   5A:D3:63:0E:EC:03:71:FA:C3:56:BC:E5:07:18:42:F4:0A:8F:22:AB
Certificate issuer:       /CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
Certificate serial:       1BE408589D71BCD4DF1F0B18CF92AB388C3720C5
Authority key identifier: 4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     266210
IP address blocks:        160.238.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl
                          rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e4:08:58:9d:71:bc:d4:df:1f:0b:18:cf:92:ab:38:8c:37:20:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBCEA414C97E21ED954E22389E65590C555EEBD
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:a3:28:83:3d:73:ed:28:44:e0:eb:0f:b8:
                    1a:fd:fa:51:e6:81:ba:5c:64:5b:e1:83:82:c2:76:
                    62:8d:a9:93:4c:de:b5:d9:0c:10:7c:fd:19:bc:ea:
                    34:1f:d6:7a:d3:c6:b3:bc:99:3a:b9:ea:33:8c:d6:
                    4e:63:40:02:f6:ce:12:c2:42:d9:d0:c5:2f:db:03:
                    8f:48:39:1c:91:c6:fe:7a:12:a4:fc:95:78:f3:99:
                    74:3f:93:df:7c:55:24:9c:fc:78:62:8f:f7:23:a9:
                    39:4f:4f:8a:bd:fc:ed:0a:cb:9d:db:20:fc:22:61:
                    2e:4e:af:d6:c4:93:92:b6:43:b5:22:f5:14:d9:e3:
                    4b:a7:49:2f:3b:3e:71:cd:ec:06:65:63:db:68:89:
                    cc:a5:c1:0a:09:5b:d6:2e:09:33:a7:3a:32:ff:61:
                    6f:12:6a:66:3f:36:04:1d:94:d9:16:a7:10:ff:52:
                    1d:31:4c:b3:cc:11:0b:1a:0b:16:48:29:bf:fd:62:
                    d4:63:5e:8b:1f:e8:ff:55:6d:c0:87:91:b1:d3:e1:
                    73:2f:c5:cc:39:03:05:28:c4:bb:af:15:86:5c:c1:
                    8c:55:39:4f:7d:0d:58:08:c1:c9:14:25:71:32:b4:
                    2f:38:5e:ea:f7:25:3b:a7:47:e7:c2:16:fa:0e:63:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:63:0E:EC:03:71:FA:C3:56:BC:E5:07:18:42:F4:0A:8F:22:AB
            X509v3 Authority Key Identifier:
                keyid:4D:BC:EA:41:4C:97:E2:1E:D9:54:E2:23:89:E6:55:90:C5:55:EE:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DBCEA414C97E21ED954E22389E65590C555EEBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/1/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:91:12:86:b1:81:61:e4:36:67:02:ac:e9:58:b9:29:a7:8f:
         ec:d4:36:f2:4d:d6:b8:ba:2b:06:5f:a5:fe:b5:ba:29:94:84:
         e9:22:76:67:ae:57:41:93:a9:08:cb:3f:6d:01:40:0a:ae:48:
         ad:f1:8a:db:42:b7:ff:ea:6a:45:7b:c8:be:f7:c4:4e:84:95:
         b8:9b:4d:77:ce:49:70:d2:f0:e2:75:40:28:82:56:28:ba:7e:
         a9:d7:f8:43:1f:6b:3e:a2:78:b4:43:6c:c0:ee:75:bf:82:72:
         71:08:e3:82:74:16:d5:df:9d:5b:d3:85:da:40:b0:04:44:30:
         ce:1b:c2:03:31:e2:8a:c0:5f:31:49:c5:e0:89:2d:76:2a:0e:
         d6:4c:49:f5:5f:34:02:c9:03:83:5b:bd:5c:72:59:a9:46:75:
         ab:be:e7:3b:6f:64:5a:ff:c2:cf:72:58:d0:bc:59:cd:a9:4a:
         fd:33:3e:67:f9:e9:a5:77:85:5f:78:18:54:13:f3:01:fc:cf:
         e1:fd:8e:14:9a:ba:40:be:93:cd:3a:c3:a1:1f:2d:dd:6e:34:
         0d:c5:14:d7:64:9f:90:3e:db:e6:e0:76:18:be:e2:33:dc:40:
         02:88:fe:aa:29:94:14:66:b9:27:27:b2:50:49:52:17:d5:eb:
         a6:23:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:21:55 2025 by rpki-client