Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3332203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32322d3332203d3e20323637353330.roa (raw, json)
Hash identifier:          sETbf6sRzJ67LgArSqJp/he1iwfQNy21QVgrKxmh3YE=
Subject key identifier:   8C:06:7E:82:41:71:E2:A0:C1:DE:B8:93:26:17:26:E6:23:2B:2B:C0
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       6EF2A4432A83700FB53892A02D2E2F624087DC0B
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3332203d3e20323637353330.roa
Signing time:             Thu 06 Mar 2025 13:01:37 +0000
ROA not before:           Thu 06 Mar 2025 12:56:37 +0000
ROA not after:            Thu 05 Mar 2026 13:01:37 +0000
asID:                     267530
IP address blocks:        201.182.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 16:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f2:a4:43:2a:83:70:0f:b5:38:92:a0:2d:2e:2f:62:40:87:dc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Mar  6 12:56:37 2025 GMT
            Not After : Mar  5 13:01:37 2026 GMT
        Subject: CN=8C067E824171E2A0C1DEB893261726E6232B2BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:f9:f2:3a:b4:02:08:92:54:cd:52:48:c9:
                    ad:f1:3b:e1:9c:56:c7:47:f7:f6:7f:aa:f8:ce:8b:
                    78:d0:5e:fe:5f:5a:9f:e2:2e:7b:e9:5c:57:8c:28:
                    50:ed:a4:08:09:34:01:53:1c:ca:85:ef:c4:4c:44:
                    a5:1e:3d:bc:dd:61:5e:e3:d8:24:77:d3:1a:e3:a5:
                    a3:47:bd:2f:44:2d:64:6e:dd:be:2d:0f:b7:03:80:
                    c8:67:db:ef:b3:43:38:36:b0:12:6b:02:c9:d3:d9:
                    59:a4:ec:ce:13:7d:39:8c:20:fa:79:63:e2:15:b5:
                    0b:fa:1a:ea:8d:bc:1e:50:53:58:fa:e0:3b:4b:a8:
                    0f:90:38:d5:c3:2d:b8:87:99:85:eb:fa:23:1e:e7:
                    6e:fe:17:45:ef:49:8c:9e:ac:4b:47:c0:32:cf:cd:
                    1c:96:a4:7d:6d:5b:c5:6b:a7:1d:fe:ca:9e:54:6f:
                    0c:2f:c1:7d:66:14:a2:79:29:bc:00:11:f8:1f:bf:
                    cf:86:91:73:8a:c2:df:97:db:dc:9d:60:fc:db:08:
                    fe:1a:0d:be:ef:a6:86:0c:17:0a:e8:81:b2:8e:78:
                    f1:be:3b:c1:3c:f6:83:1c:3b:e4:c9:fb:fb:05:ed:
                    9d:3c:46:64:ae:89:e4:c5:c0:2e:67:68:b7:c8:5f:
                    02:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:7E:82:41:71:E2:A0:C1:DE:B8:93:26:17:26:E6:23:2B:2B:C0
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3332203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:ae:c9:27:94:e7:00:05:ef:09:73:69:7b:a4:1f:d7:76:
         0f:fb:39:b4:cf:c3:c4:66:f5:bc:e8:7a:8d:3c:95:78:f7:0d:
         a7:e9:9f:48:32:e6:fd:76:48:56:de:11:7f:2e:1a:71:20:f3:
         8c:0b:6a:92:eb:7a:cf:38:21:86:3e:1e:32:02:cb:7e:3d:1b:
         6b:f9:1e:45:c4:0a:e8:73:16:4d:db:df:fa:f2:75:0f:62:3d:
         00:34:8b:63:81:f1:d4:18:71:47:0a:4d:08:2c:f3:52:59:44:
         9b:58:49:a5:09:b8:69:59:de:d3:c3:e9:02:48:9e:96:4f:e6:
         87:bb:32:35:1d:e7:09:c1:16:fd:20:66:c2:63:3a:a6:64:84:
         8c:90:6f:f2:79:26:4a:e0:02:23:92:14:0e:8b:e4:ae:0f:d1:
         1a:2b:a2:23:30:e8:b9:24:02:d4:13:f0:77:d9:2f:5e:96:ff:
         3e:f6:1b:49:ea:34:ca:4e:1d:fa:65:52:88:c8:cb:3b:6e:29:
         92:7b:45:48:51:a1:f8:4e:d9:82:29:3a:d4:8f:b6:75:03:70:
         d7:e3:2b:50:cb:98:c7:88:06:7c:0e:9c:c2:16:08:1b:14:3c:
         d1:60:3c:5d:79:11:d5:5b:b1:1b:09:04:8d:db:af:23:6d:5b:
         54:4b:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:51 2025 by rpki-client