Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa (raw, json)
Hash identifier:          RNePHApXbpYxQQDbijqscQKzG/EqPXqiPaIVcyaQEI4=
Subject key identifier:   DD:9E:E0:E6:6E:A7:46:E3:D8:E0:DA:19:32:74:D4:2D:E1:F5:45:13
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       03023AA11BB0589A2AC3DCC4AC99103A3962047C
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa
Signing time:             Tue 18 Mar 2025 17:04:14 +0000
ROA not before:           Tue 18 Mar 2025 16:59:14 +0000
ROA not after:            Tue 17 Mar 2026 17:04:14 +0000
asID:                     267453
IP address blocks:        181.191.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:3a:a1:1b:b0:58:9a:2a:c3:dc:c4:ac:99:10:3a:39:62:04:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Mar 18 16:59:14 2025 GMT
            Not After : Mar 17 17:04:14 2026 GMT
        Subject: CN=DD9EE0E66EA746E3D8E0DA193274D42DE1F54513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:4c:37:88:e3:fb:8e:1b:27:ec:8f:21:fb:
                    b2:0c:d7:06:3c:cc:9a:50:6d:18:a8:4c:13:9b:26:
                    b2:7e:96:97:27:6c:11:b2:11:09:e0:b1:0f:29:97:
                    59:c0:20:8f:dd:66:de:3a:90:d6:c0:c2:58:f4:57:
                    80:25:b3:a2:02:fc:24:a4:0a:c2:6b:10:6d:28:f6:
                    8c:65:f8:b5:d1:3e:4b:f9:46:80:09:c9:3c:3b:17:
                    37:6e:0f:a4:93:e1:89:67:7f:0d:d1:71:93:8e:8f:
                    54:06:9b:69:71:a4:17:c5:52:06:1f:a4:53:ef:65:
                    7a:5e:1a:8c:3a:5b:3a:e3:ba:82:fb:84:41:cf:2a:
                    8d:40:ae:87:ce:38:47:73:02:88:c6:7a:76:bb:49:
                    1b:64:29:03:e8:83:dc:b7:a8:de:ab:ba:a5:0d:67:
                    1c:26:34:6e:35:68:c0:59:f3:22:94:b2:1d:9a:56:
                    92:14:77:92:f2:9a:1a:4c:ce:d5:51:ab:19:13:e5:
                    3a:05:a4:aa:33:3d:d2:1f:da:99:e7:37:7e:03:a3:
                    3e:2b:1e:04:59:8e:5d:62:4b:bb:8b:ba:8d:ce:85:
                    52:55:a0:73:73:d3:a6:a1:8a:ea:dc:2a:98:4a:23:
                    c2:75:a8:1c:45:03:30:77:c6:8a:26:fa:9a:13:38:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9E:E0:E6:6E:A7:46:E3:D8:E0:DA:19:32:74:D4:2D:E1:F5:45:13
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32322d3232203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:a6:11:06:88:5c:73:ad:d2:b2:e2:94:35:28:a4:47:34:
         6e:dc:56:ca:06:29:e1:c8:5a:5e:0d:60:e0:0f:d3:71:0e:f9:
         13:61:b6:c9:b3:d1:52:c2:ee:9d:35:ac:ff:b8:f1:6b:6c:66:
         f4:55:8d:38:a6:35:77:15:f0:6d:3e:f6:14:d0:34:69:d4:68:
         5d:28:28:5b:a6:2b:e7:50:8c:98:7a:aa:a7:6e:fb:28:76:a8:
         98:78:5e:22:55:9d:8d:aa:1f:2d:ff:30:ea:f4:81:2e:2e:2b:
         79:68:19:54:a9:ca:da:a4:68:28:5b:80:0f:30:1b:c0:fa:d8:
         77:93:86:2b:e0:12:a0:66:5a:19:2b:34:c7:45:53:88:d0:71:
         aa:aa:ec:bc:40:14:ef:55:4e:dc:02:c5:2d:73:2b:fe:1d:46:
         2d:46:0b:9a:40:94:43:1a:19:04:dc:64:f3:73:58:2d:31:0b:
         97:6b:40:c1:51:66:0f:b4:4f:1b:3f:d4:dc:92:fa:08:2c:00:
         95:71:7f:cb:7e:dc:48:11:d9:4e:9e:fa:bc:2a:4c:f3:d0:3e:
         96:96:f9:11:35:13:23:eb:74:ff:6b:f7:df:8d:b8:9e:1d:39:
         48:3e:6c:9b:49:ed:31:af:d8:6e:ce:08:72:6b:c5:d3:3e:5e:
         24:51:d1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:11:48 2025 by rpki-client