Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          3472xPVTEvPuEpmOvoVTr1WYczzSUc8IU/3mWUjsN70=
Subject key identifier:   7C:96:A2:23:8D:59:0F:96:20:3A:12:F3:38:07:8F:D5:6C:C3:44:69
Certificate issuer:       /CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
Certificate serial:       6260B3050CFF588A809284CEE1FDE5EFB92A90F9
Authority key identifier: 47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa
Signing time:             Wed 09 Apr 2025 19:14:26 +0000
ROA not before:           Wed 09 Apr 2025 19:09:26 +0000
ROA not after:            Wed 08 Apr 2026 19:14:26 +0000
asID:                     267426
IP address blocks:        181.191.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:60:b3:05:0c:ff:58:8a:80:92:84:ce:e1:fd:e5:ef:b9:2a:90:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474B51CEB662EF010C6B1DDD845BC89A81122C37
        Validity
            Not Before: Apr  9 19:09:26 2025 GMT
            Not After : Apr  8 19:14:26 2026 GMT
        Subject: CN=7C96A2238D590F96203A12F338078FD56CC34469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:71:37:e6:2f:70:05:da:e9:5e:ea:6f:a7:
                    bd:cb:6d:13:47:4b:8b:9c:d5:33:a3:f6:8f:c3:4c:
                    b5:d8:bb:e8:64:27:f4:1f:fe:5b:c5:f9:7d:17:45:
                    1f:b9:16:2b:02:6b:17:73:c3:25:5f:45:78:49:69:
                    e5:1f:d0:02:c4:7a:93:0b:06:48:fd:9d:c5:ca:8d:
                    c2:81:f8:f7:2a:dd:ec:88:0f:3f:08:e3:a3:6c:72:
                    1c:d8:02:f7:ee:7b:b7:d2:d1:2b:22:aa:a3:06:b2:
                    ab:41:8a:c0:19:03:50:c8:1c:77:92:00:20:69:68:
                    98:3a:96:89:8e:9d:bf:7b:0f:71:aa:24:5c:1c:58:
                    a7:ff:7e:f6:fa:c0:9e:7e:ba:ca:18:70:45:1b:e7:
                    83:df:52:95:82:e4:b5:0c:d1:62:12:62:c8:f6:95:
                    ce:32:54:73:13:f1:50:ee:e4:8c:42:58:d5:bb:4c:
                    6d:7c:e1:be:56:97:d0:9b:a2:12:eb:a2:e0:47:e2:
                    68:6d:6d:4d:37:71:f5:d1:e4:39:d1:fa:de:0e:68:
                    09:50:5e:6e:ad:64:52:6c:c6:f4:fd:b1:0a:bf:52:
                    d5:81:b4:28:d4:b6:34:6e:a1:e2:35:c9:55:77:e9:
                    f1:e6:96:f5:e8:64:43:dc:06:02:55:5d:2b:59:25:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:A2:23:8D:59:0F:96:20:3A:12:F3:38:07:8F:D5:6C:C3:44:69
            X509v3 Authority Key Identifier:
                keyid:47:4B:51:CE:B6:62:EF:01:0C:6B:1D:DD:84:5B:C8:9A:81:12:2C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/474B51CEB662EF010C6B1DDD845BC89A81122C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474B51CEB662EF010C6B1DDD845BC89A81122C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136322e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:67:26:6e:03:e7:19:57:f6:3e:53:71:1f:fa:62:46:ae:41:
         f7:4a:9e:3e:1d:20:ad:8d:cc:16:0a:6e:ad:97:53:79:5e:cf:
         31:3a:4b:c6:a2:e8:d4:33:86:af:77:e3:a3:8e:aa:5d:27:d3:
         da:a3:67:66:ab:92:02:15:3f:c9:8a:58:a3:4a:c1:cd:7d:ab:
         43:14:6c:5d:48:44:de:d4:e9:0d:da:62:9d:79:e2:4a:00:72:
         48:6e:50:2a:52:bb:2e:36:ea:28:25:79:8d:16:5b:4c:88:fa:
         c6:56:8d:40:0f:f2:c0:76:85:48:93:1d:b7:cd:e1:53:bc:02:
         8f:fd:20:93:80:b0:69:30:62:86:95:c2:a5:17:d0:ef:3a:a4:
         d2:95:cd:07:00:96:b0:d3:5b:a8:1f:50:f1:15:1e:15:a8:46:
         90:5a:c8:74:86:70:da:32:99:cd:7a:4c:cd:16:d4:47:50:cf:
         24:b8:99:3b:de:9e:8b:94:7b:ec:18:14:a3:51:6d:81:dd:f0:
         b4:a2:93:17:3d:57:65:4a:eb:6f:4e:7d:0c:54:45:60:6b:83:
         e5:1c:fc:2a:7b:c7:a8:85:9f:cd:1c:9f:3b:71:5d:41:db:91:
         2d:e9:6a:f9:3e:e0:ef:97:9e:bb:dd:2f:2a:cd:ed:29:36:d5:
         06:40:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:52:39 2025 by rpki-client