Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa
File:                     3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa (raw, json)
Hash identifier:          bwef2FO35n3OcLMDwdEQ5txgTHz2qPbbdJUNeGrQEAo=
Subject key identifier:   C8:56:F5:12:2D:08:07:81:ED:0B:F1:E7:EE:8A:10:B9:CD:08:82:6E
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       06429AE4B86687503EE578DBF0C4F67FA8DFD8E0
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:44 +0000
ROA not before:           Thu 06 Mar 2025 02:47:44 +0000
ROA not after:            Thu 05 Mar 2026 02:52:44 +0000
asID:                     266635
IP address blocks:        128.201.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 18:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:42:9a:e4:b8:66:87:50:3e:e5:78:db:f0:c4:f6:7f:a8:df:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:44 2025 GMT
            Not After : Mar  5 02:52:44 2026 GMT
        Subject: CN=C856F5122D080781ED0BF1E7EE8A10B9CD08826E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:87:9a:50:0f:a5:cf:4a:d9:ae:fc:07:d0:
                    f6:4c:42:45:ea:8b:28:16:74:28:17:a2:32:9a:50:
                    92:67:09:25:cb:31:52:6f:7b:13:a4:a9:a4:cb:7d:
                    17:b8:e3:3a:27:cc:c7:91:94:75:f8:21:e2:e6:02:
                    f9:e2:e0:77:23:93:e8:97:79:36:89:a7:88:4c:0c:
                    d6:0b:53:93:6c:52:9b:09:ec:1a:5c:04:cb:ba:1e:
                    0a:df:5c:92:0a:9c:0c:d3:1d:2a:b4:bc:ee:3e:10:
                    f3:8b:d7:6f:50:ba:4e:1d:1b:7f:5c:c9:5b:e2:3e:
                    d8:d6:1d:f3:65:8a:e3:ec:03:c5:a1:04:79:0f:5f:
                    fb:5e:73:88:23:c0:fd:24:51:07:0c:17:d5:db:6e:
                    86:31:a4:26:0d:ec:85:fd:2a:be:9b:c6:bd:98:8d:
                    52:5a:67:53:d1:9a:0e:74:2f:3d:20:24:06:25:10:
                    0e:fd:25:75:1b:a8:a6:a4:ae:9d:91:f8:ed:e1:01:
                    e9:57:d4:e5:2c:3a:80:aa:31:01:fb:4a:a0:42:50:
                    e0:4d:9d:e9:11:dc:77:2b:71:fb:7a:25:18:5c:3e:
                    74:fb:20:02:f6:55:7f:e8:b1:4d:ce:34:d9:29:1a:
                    24:18:ab:d0:4c:b1:a7:77:cd:7e:80:bd:5c:40:de:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:56:F5:12:2D:08:07:81:ED:0B:F1:E7:EE:8A:10:B9:CD:08:82:6E
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135392e302f32342d3234203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:37:97:78:ca:0d:9d:c4:9c:3a:0c:b8:d3:dd:87:df:8a:
         7c:18:f9:0a:98:66:b9:fb:58:03:d6:db:2b:da:f7:3d:40:dc:
         f9:1b:f9:9b:5b:4f:b6:e4:f7:ba:9c:d0:fd:01:eb:bc:00:db:
         46:ed:d6:c3:39:cd:43:13:43:53:cd:3b:48:7e:08:9b:80:17:
         1c:81:18:1f:4b:da:95:b1:3f:ad:81:49:de:6f:0f:55:4e:15:
         be:d1:5b:ea:62:8c:bf:58:cb:71:06:ab:fc:73:9f:ae:53:95:
         29:7a:f2:e7:7d:fa:60:ee:9d:36:95:f0:73:ed:05:ea:97:0b:
         66:75:75:71:8e:e4:6c:9e:a8:ce:10:f9:b7:09:bd:03:a8:01:
         34:c3:07:10:ec:75:33:86:78:c7:15:a8:2e:2a:2e:1b:60:89:
         1b:2c:6f:41:b9:df:67:16:d1:89:e1:4e:14:fb:be:cf:3f:93:
         57:c1:0c:61:ad:14:35:77:74:cd:9a:f3:c2:38:5a:45:f8:5f:
         c7:eb:bd:44:57:c0:5b:6d:c9:f2:59:0e:fc:b8:97:b3:39:65:
         67:51:8e:5c:59:40:22:87:7f:d5:f5:ae:50:60:39:f0:e7:13:
         1c:3c:64:f3:71:74:a7:09:9c:87:ac:94:25:9d:7a:31:fc:01:
         58:96:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:11:35 2025 by rpki-client