Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa
File:                     3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa (raw, json)
Hash identifier:          Jrl+29PjRYaGs7Z7VBfpj0rK4isXN5q2+8XgIa3SkKk=
Subject key identifier:   7C:DA:24:FE:45:EF:85:1F:9F:C3:C0:B5:4C:D0:89:CC:16:A6:00:40
Certificate issuer:       /CN=FE2FB4044730F5FD718399AEBDC9295665F44072
Certificate serial:       7B7DDE8ED0CDD65D8025D6F8E827A3F3D655C0B5
Authority key identifier: FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa
Signing time:             Fri 13 Jun 2025 12:21:50 +0000
ROA not before:           Fri 13 Jun 2025 12:16:50 +0000
ROA not after:            Fri 12 Jun 2026 12:21:50 +0000
asID:                     267453
IP address blocks:        181.191.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl
                          rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Jun 2025 01:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7d:de:8e:d0:cd:d6:5d:80:25:d6:f8:e8:27:a3:f3:d6:55:c0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2FB4044730F5FD718399AEBDC9295665F44072
        Validity
            Not Before: Jun 13 12:16:50 2025 GMT
            Not After : Jun 12 12:21:50 2026 GMT
        Subject: CN=7CDA24FE45EF851F9FC3C0B54CD089CC16A60040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:f9:0d:d9:d7:48:1c:98:7e:86:ca:85:60:
                    70:5a:2f:75:27:ef:b7:e5:e7:fe:66:8e:5b:1e:5d:
                    f8:05:ef:59:57:a2:80:a6:ba:c2:92:bc:89:b2:9f:
                    c5:8b:c6:6e:99:44:2d:dd:10:6d:58:04:a0:97:37:
                    51:2f:be:74:ce:51:7a:ce:2e:4e:d9:5b:26:f9:7a:
                    46:10:7d:17:47:34:34:d9:06:fa:2a:dc:61:1d:1d:
                    15:ce:f0:7b:cf:55:50:6a:21:b2:d3:a5:e6:4a:26:
                    c7:db:12:cc:f3:b8:7f:61:f3:1f:64:94:43:cf:c4:
                    6a:ca:7b:d0:0f:be:d1:04:a5:58:5c:bf:9b:77:b3:
                    ef:02:03:1f:ac:b9:f0:14:17:8a:da:db:a5:d7:94:
                    e7:bb:38:0b:4f:90:80:33:4f:30:f7:82:0d:f8:92:
                    fd:c5:98:fc:88:1a:64:56:84:5d:85:5d:0f:23:a0:
                    2d:bb:d1:8d:6e:7e:cf:2d:21:d6:c0:33:3d:25:d5:
                    a2:97:e0:19:76:74:3e:52:65:37:a1:a1:61:3a:41:
                    a0:e7:83:55:04:73:97:8b:e6:31:51:7e:8e:ae:f7:
                    15:b1:36:33:2b:c2:35:79:b5:c0:bf:8b:4c:10:c5:
                    c6:b7:2c:1a:d9:d9:f6:27:5b:9e:98:84:c6:71:5d:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DA:24:FE:45:EF:85:1F:9F:C3:C0:B5:4C:D0:89:CC:16:A6:00:40
            X509v3 Authority Key Identifier:
                keyid:FE:2F:B4:04:47:30:F5:FD:71:83:99:AE:BD:C9:29:56:65:F4:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/FE2FB4044730F5FD718399AEBDC9295665F44072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE2FB4044730F5FD718399AEBDC9295665F44072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86FvZtDsydfEWa4vCj5kvwg1rWLmmZxXQU7FYRx86pnj/0/3138312e3139312e34382e302f32332d3233203d3e20323637343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:14:19:5d:99:f5:83:c9:f8:bd:0f:7a:09:de:b9:d4:cd:9e:
         8a:c8:aa:cf:58:1e:d9:78:fd:6a:48:f1:0a:c9:8b:ca:97:91:
         39:17:33:29:06:7a:02:16:24:7e:31:90:aa:d9:ef:4f:36:91:
         a0:c8:18:a5:67:1d:e1:ac:ae:2d:f3:15:7c:df:8f:bd:fa:c3:
         83:f9:a5:47:76:a8:01:f6:89:73:f9:fa:27:20:61:3a:f9:91:
         b7:47:bb:09:fd:3a:d9:5f:de:17:a0:14:fa:49:29:cb:79:0e:
         1f:d3:98:ac:80:3f:ee:35:35:96:54:0d:d0:9c:4f:aa:75:25:
         50:8b:d2:6c:77:f2:52:c4:98:04:6f:a7:ac:6f:b5:e0:c0:96:
         15:fd:e6:ec:74:4e:53:1e:bc:d4:0f:80:c1:b9:f6:c5:a5:8a:
         74:ec:1f:b8:7e:ac:85:e4:ff:7f:2f:b6:39:5a:eb:ab:96:42:
         f3:b1:fa:e8:bc:b7:75:ca:77:95:71:da:36:7a:f1:75:09:59:
         95:09:c7:76:63:57:7c:43:2a:bc:af:3c:01:6c:c8:b9:6c:92:
         dd:bc:e9:a6:40:ff:2b:ea:4b:c8:18:ba:30:41:36:d0:23:a8:
         e0:9b:c1:1e:c3:47:49:3a:7e:8d:df:54:a0:c8:08:b7:64:f7:
         ec:64:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:34:53 2025 by rpki-client