Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32322d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          e/S/UAp5dEIapXuMmc48DkI8hCcgJYR+xfAzKvtfdrA=
Subject key identifier:   01:A8:EB:E5:0D:FE:48:42:1C:5F:70:C0:39:75:01:AF:76:8E:67:43
Certificate issuer:       /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Certificate serial:       2C716DC8F408E45C182AE59A2871E730BC46D40E
Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3234203d3e20323637343236.roa
Signing time:             Tue 10 Jun 2025 16:27:01 +0000
ROA not before:           Tue 10 Jun 2025 16:22:01 +0000
ROA not after:            Tue 09 Jun 2026 16:27:01 +0000
asID:                     267426
IP address blocks:        181.191.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 04:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:71:6d:c8:f4:08:e4:5c:18:2a:e5:9a:28:71:e7:30:bc:46:d4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
        Validity
            Not Before: Jun 10 16:22:01 2025 GMT
            Not After : Jun  9 16:27:01 2026 GMT
        Subject: CN=01A8EBE50DFE48421C5F70C0397501AF768E6743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:2c:5a:55:b5:ba:f2:bf:3b:76:1d:4a:e9:
                    62:bd:ff:90:ac:17:4d:fa:6c:44:62:1e:20:29:89:
                    e7:7c:2b:e3:17:87:23:8f:8f:e6:ca:fe:80:ec:0a:
                    fd:4e:6b:22:49:c0:ba:28:51:aa:72:0c:d8:91:c5:
                    c3:0b:70:c3:b4:3a:1e:59:a6:07:c4:9f:8b:6a:12:
                    ef:bc:9b:fe:67:3c:8b:bc:87:d3:bd:42:a0:53:fe:
                    c2:e8:9f:be:0a:47:bb:75:88:f8:73:85:d0:e1:5c:
                    e7:28:bf:08:01:54:d0:fa:06:3a:94:66:fc:70:f5:
                    57:ed:f0:ed:06:ee:c4:3c:f2:fb:85:b9:e1:67:81:
                    17:32:4d:f3:92:46:d5:cc:d1:41:2f:e9:06:10:27:
                    a3:7f:33:88:0d:ec:de:ba:7c:e1:3f:c8:62:91:3b:
                    5f:f6:bb:d4:f3:76:27:3a:31:53:19:2c:ad:42:1a:
                    55:ee:0b:29:b3:d4:46:db:3c:e5:5c:22:32:39:94:
                    6d:c1:db:1a:2e:7a:f4:17:e9:ca:67:2b:a6:7b:59:
                    7e:dc:d8:75:12:fb:17:27:e8:60:e7:ed:a3:57:9d:
                    dc:00:a7:0e:c7:c7:56:a8:f6:9a:18:35:f7:e7:18:
                    e3:e2:49:07:99:33:e9:57:81:5c:68:69:4d:41:7f:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A8:EB:E5:0D:FE:48:42:1C:5F:70:C0:39:75:01:AF:76:8E:67:43
            X509v3 Authority Key Identifier:
                keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32322d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:fe:30:89:c4:1e:4f:eb:10:33:fe:ad:a3:1d:db:9a:ab:
         87:89:b3:49:26:7e:14:a6:3e:7a:c7:8c:e4:83:24:de:2a:6e:
         bf:d2:ef:82:e6:e8:27:20:51:13:b5:79:c3:45:0f:66:3c:f2:
         3d:91:3c:c0:35:f0:2a:cb:97:c3:51:43:8d:c5:66:a8:28:11:
         2f:c2:fe:63:f2:d7:10:9f:75:86:05:d6:a5:05:a8:26:3e:ac:
         01:8c:94:14:ae:80:57:63:0d:40:8b:d6:54:96:36:59:5c:3e:
         ff:34:56:05:c2:59:5c:40:8b:08:7b:27:d1:3b:a3:bd:75:3a:
         b1:4e:c4:d0:5d:40:4c:67:57:be:4b:2a:77:63:3c:5f:19:05:
         07:4f:71:1f:9d:11:22:cf:ba:56:d2:ce:07:25:32:49:a6:64:
         15:e1:88:38:6d:7c:99:2a:a0:23:71:70:3c:6a:a3:9b:bb:b0:
         3f:9a:e3:d0:26:4f:a8:e9:bf:63:dd:c7:ff:d6:11:7a:62:f6:
         bf:2f:98:fd:a5:43:b3:ee:9d:d3:1e:00:f2:f7:e1:aa:b2:b4:
         75:c4:82:cd:0f:ed:4d:c0:2e:2b:d3:00:87:e9:8c:c0:4e:1b:
         10:38:b6:f7:e7:66:a3:cc:a0:12:99:02:ae:25:5b:bb:9a:ca:
         3b:42:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:15 2025 by rpki-client