Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
File:                     3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa (raw, json)
Hash identifier:          EyCOoDDnrBhr0IlOwvWF2i6lbOe5Cr7rSleEYhRojY4=
Subject key identifier:   41:9E:AB:BC:BC:32:1C:F4:8F:E8:3C:DB:C8:B1:98:A5:27:67:CE:69
Certificate issuer:       /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial:       2A4E1F91CC0D249D80658857A882E3CE606D02A4
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa
Signing time:             Thu 06 Mar 2025 02:16:35 +0000
ROA not before:           Thu 06 Mar 2025 02:11:35 +0000
ROA not after:            Thu 05 Mar 2026 02:16:35 +0000
asID:                     271378
IP address blocks:        181.189.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl
                          rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4e:1f:91:cc:0d:24:9d:80:65:88:57:a8:82:e3:ce:60:6d:02:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
        Validity
            Not Before: Mar  6 02:11:35 2025 GMT
            Not After : Mar  5 02:16:35 2026 GMT
        Subject: CN=419EABBCBC321CF48FE83CDBC8B198A52767CE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:5b:b1:96:4c:90:45:44:e9:a9:da:1c:e8:
                    3c:c2:c8:b9:4f:be:ff:5a:d1:82:13:89:40:64:84:
                    16:7f:75:0b:90:5a:53:6c:6b:6c:ea:29:2f:e7:49:
                    a5:a1:eb:aa:82:d8:bd:dd:fc:f5:fa:2a:8f:41:05:
                    d4:6c:a9:6a:fd:73:25:35:a6:49:72:17:83:1c:79:
                    e3:e8:52:9a:fa:da:69:5a:51:99:0e:c3:8e:6f:62:
                    0d:23:3f:6a:83:29:49:ba:92:84:f6:bc:d8:e9:f8:
                    f7:18:47:fe:8c:b7:13:bb:70:21:8c:69:c4:7e:36:
                    5d:cd:8b:66:ef:ef:59:7f:b0:08:a3:a4:42:dd:9a:
                    24:f3:91:9a:e3:6b:b7:c7:a1:94:c8:c8:d3:20:a7:
                    ca:35:70:85:e3:45:9b:fd:cb:9a:b9:9b:f2:05:ce:
                    34:2c:06:a9:e4:be:29:a3:38:29:94:2f:be:39:24:
                    13:a1:67:ae:8c:23:df:a6:4a:7d:0b:7b:34:27:4f:
                    56:73:47:40:f6:dc:11:9d:2a:b4:f8:9e:7c:fc:73:
                    8e:90:55:50:02:1d:52:13:73:a0:f9:fd:59:85:93:
                    6b:f5:55:95:6c:44:4f:a1:13:c3:b7:0a:19:8b:88:
                    48:12:a4:55:f5:de:24:10:40:b3:45:fc:52:2e:b7:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:AB:BC:BC:32:1C:F4:8F:E8:3C:DB:C8:B1:98:A5:27:67:CE:69
            X509v3 Authority Key Identifier:
                keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/3138312e3138392e34342e302f32322d3234203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:02:1a:f8:36:de:4b:7c:f4:d2:45:e8:92:68:f2:fd:14:
         42:cd:ca:0d:c1:fd:f8:4b:51:3c:bc:5d:c2:27:53:7e:f3:df:
         3c:ca:78:3b:d5:09:54:9b:77:54:05:d0:24:27:48:f9:20:10:
         ac:58:d1:5e:2b:e1:19:e6:e2:28:21:c6:56:87:38:a6:78:cf:
         d2:6a:6e:56:88:88:1f:51:ef:1f:d0:82:06:da:8d:0c:7e:92:
         36:5d:83:6f:42:4d:f0:03:89:f1:10:98:7e:f5:df:66:5a:8c:
         f6:5d:11:84:17:cd:46:f4:5d:b4:fc:e6:5f:80:88:ca:8c:e0:
         84:3d:48:0c:89:d5:c7:36:c5:c1:50:ba:0b:f5:2a:8d:70:88:
         fe:98:36:d1:9e:e2:2a:f7:db:d9:a5:3a:b4:b8:3a:0a:0d:f6:
         5f:7c:e7:8e:fd:36:92:69:cc:f3:65:ff:fb:83:fa:9e:be:c3:
         6b:8e:f6:43:9c:f0:ff:2e:c2:2d:9e:63:5f:67:ac:00:86:61:
         1a:37:79:6d:0b:f4:fa:49:1d:5f:c2:6d:79:ae:b7:fe:f8:c3:
         47:1b:7e:78:60:e2:8d:9c:33:b7:da:32:13:38:ee:42:30:25:
         30:95:2f:19:68:44:d2:0d:aa:ef:f4:36:89:b4:14:00:7e:75:
         b6:23:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:59 2025 by rpki-client