Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          48qGLex6rZ/+vqPr8wQrN7hP3x2g1yp6EBlAhjMA7F4=
Subject key identifier:   18:83:3D:53:D8:32:F0:CB:EB:7F:2E:BC:39:AB:CA:F5:CE:33:5A:33
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       53A1FFE0F7C536FA532A0FEAD9C7CC53E4B622B0
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:43 +0000
ROA not before:           Thu 06 Mar 2025 02:47:43 +0000
ROA not after:            Thu 05 Mar 2026 02:52:43 +0000
asID:                     266635
IP address blocks:        128.201.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a1:ff:e0:f7:c5:36:fa:53:2a:0f:ea:d9:c7:cc:53:e4:b6:22:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:43 2025 GMT
            Not After : Mar  5 02:52:43 2026 GMT
        Subject: CN=18833D53D832F0CBEB7F2EBC39ABCAF5CE335A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:71:e2:a4:cf:fe:04:7e:ad:97:9f:c1:f3:
                    d1:37:ce:7f:57:7d:c6:31:be:73:b8:96:59:0b:05:
                    dd:0a:c5:70:a6:e1:88:b4:48:24:49:f1:63:4d:6e:
                    e9:d5:75:97:48:ae:a3:8b:6f:52:ab:93:c7:a3:52:
                    24:7d:8a:8d:f0:13:ff:ef:9c:4c:0e:23:60:8a:35:
                    84:c8:59:ca:a2:0c:07:b8:03:43:f0:3b:36:d0:0c:
                    a3:fa:d7:f0:38:a6:b1:2e:d4:3b:c2:48:c2:8c:83:
                    9b:99:4d:d0:55:b5:24:cd:0e:4f:f0:60:9d:f0:38:
                    aa:4b:01:00:55:f1:16:d5:76:77:74:c7:68:2c:4c:
                    b5:06:e9:cb:da:e3:9c:38:5d:b0:05:81:47:7d:77:
                    81:b4:14:3a:26:e3:84:3e:ed:fc:fc:50:60:35:e9:
                    81:c9:44:b5:08:14:d6:9e:fa:ee:49:ba:d5:6c:5b:
                    c7:da:2e:ec:8f:86:91:9b:c7:86:75:8c:dd:78:3b:
                    38:c3:ac:f0:55:20:92:66:e0:31:85:fe:07:39:b2:
                    8e:b2:9d:c6:ec:1c:1a:c5:4e:44:aa:2b:b4:5b:f0:
                    7b:49:3d:aa:a1:13:5c:db:9e:53:55:21:12:28:35:
                    41:09:4d:82:1f:e4:f9:49:c6:f6:7c:a9:90:5e:2f:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:3D:53:D8:32:F0:CB:EB:7F:2E:BC:39:AB:CA:F5:CE:33:5A:33
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135382e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:7c:99:7d:62:5e:f2:5d:55:8a:f6:e9:2b:02:dc:de:dc:
         f1:df:9d:7e:e8:ed:6b:50:ec:67:35:6f:37:96:fd:53:6f:de:
         c0:62:b1:67:04:7d:7f:3b:a1:97:aa:6b:79:62:e0:13:d2:f3:
         c8:81:cc:17:48:ba:1d:6c:fa:05:cb:76:ff:df:3b:24:73:14:
         f0:37:2e:56:dd:1e:da:69:e7:f1:fa:0d:a8:41:95:a9:e0:ee:
         d7:15:5b:29:01:db:53:46:f4:00:3c:b5:aa:32:78:e5:c1:f5:
         6f:78:8d:27:ec:f0:5d:b9:0e:32:f5:13:ed:bd:43:d2:17:7c:
         29:3d:03:12:dd:22:9f:32:77:fd:72:5e:2d:72:9c:ae:40:5c:
         9f:58:30:9c:56:d6:b7:8a:67:53:d3:94:06:15:37:ac:d9:15:
         68:39:93:d0:64:0c:a1:38:c3:82:9f:f8:59:47:29:e6:45:26:
         c4:29:e3:70:39:4e:0d:3c:8e:35:22:aa:16:28:ad:91:30:5a:
         1b:24:2f:5a:84:af:8e:8c:d1:2f:20:9e:e8:0b:27:f5:4e:56:
         26:28:1d:41:c7:9b:03:88:aa:2a:55:46:58:73:ac:5a:4a:3a:
         7f:aa:73:14:de:ae:76:e4:ec:62:f5:59:a6:6f:dd:c7:3d:e6:
         8f:aa:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:12:38 2025 by rpki-client