Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa (raw, json)
Hash identifier:          1JgNAlhM5FcY+8lJY8wXU17to2JzohUljz0Anzdz5qY=
Subject key identifier:   3E:00:05:7E:4A:ED:DC:27:9B:39:1C:9C:16:CB:95:86:60:80:63:CD
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       58FA8DD629FE4CA15487D73B0037D73B4B19D42D
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa
Signing time:             Tue 18 Mar 2025 17:04:15 +0000
ROA not before:           Tue 18 Mar 2025 16:59:15 +0000
ROA not after:            Tue 17 Mar 2026 17:04:15 +0000
asID:                     267453
IP address blocks:        181.191.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:8d:d6:29:fe:4c:a1:54:87:d7:3b:00:37:d7:3b:4b:19:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Mar 18 16:59:15 2025 GMT
            Not After : Mar 17 17:04:15 2026 GMT
        Subject: CN=3E00057E4AEDDC279B391C9C16CB9586608063CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:67:b3:2d:c9:74:e7:d3:93:c7:87:c8:ad:
                    66:3b:00:ea:36:e4:62:28:a4:b1:28:b9:d6:32:3e:
                    36:6a:df:6e:9a:f4:2e:9f:a3:c8:46:2f:57:0a:76:
                    e2:c7:a7:14:10:1f:4f:35:ff:29:36:a1:e2:51:e0:
                    f8:87:05:71:e5:d5:b5:7d:00:62:5e:0f:b6:af:a2:
                    bd:e7:f9:12:c9:be:22:c4:21:78:38:65:ca:27:23:
                    1b:97:b4:69:96:e3:84:7e:0c:65:20:d3:b5:d2:f8:
                    76:86:bf:1d:00:e3:ed:ad:b2:c9:ad:68:b4:12:2e:
                    18:12:4f:1a:70:3e:91:d4:41:03:fd:94:47:2c:7b:
                    ad:47:4b:4c:ea:3d:f3:cc:df:53:26:a5:3e:f4:2a:
                    ee:eb:0a:be:13:70:74:b0:fd:44:a2:b4:1e:31:bd:
                    ee:68:31:27:38:7a:43:31:7a:ec:1a:b3:e9:7b:5b:
                    f8:4a:ff:e7:7c:66:35:f3:e1:b5:04:93:bf:8a:a0:
                    b7:76:67:0b:1d:80:b4:c7:3d:a2:e4:ff:2b:b8:91:
                    e1:97:8c:eb:b0:61:4a:51:d8:6d:48:23:04:bf:bb:
                    1a:18:18:54:66:7a:34:6a:50:d4:d1:1f:40:f5:88:
                    d0:2c:01:cb:b7:86:77:4c:b2:90:c4:00:58:3c:c8:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:00:05:7E:4A:ED:DC:27:9B:39:1C:9C:16:CB:95:86:60:80:63:CD
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:42:b7:c0:b8:01:db:5e:10:9f:41:85:27:6f:39:fe:05:82:
         e7:c4:ca:31:6a:41:af:95:0f:9b:d6:1c:c3:90:2d:e1:6d:3c:
         e6:21:8f:18:10:17:c1:4e:a6:37:87:d4:e1:40:6a:8f:1d:6b:
         f4:92:2d:9c:4a:e8:31:7a:9f:33:4f:81:e1:d9:2f:11:89:65:
         6b:d3:e4:82:df:ad:5c:be:57:a5:47:f6:9f:15:20:f0:d0:9d:
         2c:4a:a6:86:29:96:3b:e8:0b:dc:87:46:d0:d3:1e:9f:61:2c:
         9f:b6:4d:2c:8a:fd:93:b1:ed:99:11:e3:19:69:45:28:22:14:
         52:85:22:c0:73:2d:e7:4c:bb:d4:ad:cd:75:cd:a9:19:d6:8c:
         32:67:11:52:97:33:80:b4:93:4d:d7:11:9e:66:5f:e0:a4:0d:
         67:8c:35:ee:6d:dc:7a:55:af:97:ae:e3:75:29:1a:50:73:15:
         cd:4e:c2:0b:8e:6c:4d:b0:78:a0:3c:d9:dc:d0:c9:2d:ea:d6:
         8b:83:3f:01:2f:f0:e0:29:f1:28:68:0a:d2:49:3c:3d:51:3b:
         95:fd:45:62:ee:2e:3d:09:77:bd:46:81:e9:12:99:0b:7c:f3:
         4d:1c:bd:f8:eb:3b:35:87:b2:71:0e:6a:45:c7:10:ab:f6:6f:
         e0:ba:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:29:11 2025 by rpki-client