Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3230302e302e34382e302f32312d3234203d3e20323632343334.roa
File:                     3230302e302e34382e302f32312d3234203d3e20323632343334.roa (raw, json)
Hash identifier:          HclPkReG2zDh8+BAPtYLpfT+vvHecYOSWWZEdOxxmMA=
Subject key identifier:   2B:66:C8:8C:4F:1B:91:DE:03:EB:A1:8C:DA:FE:32:6A:D5:F6:A5:32
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       43536C38EFCD649B7F9ABF158CA4296CE8E5399F
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3230302e302e34382e302f32312d3234203d3e20323632343334.roa
Signing time:             Tue 03 Jun 2025 20:38:14 +0000
ROA not before:           Tue 03 Jun 2025 20:33:14 +0000
ROA not after:            Tue 02 Jun 2026 20:38:14 +0000
asID:                     262434
IP address blocks:        200.0.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:6c:38:ef:cd:64:9b:7f:9a:bf:15:8c:a4:29:6c:e8:e5:39:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Jun  3 20:33:14 2025 GMT
            Not After : Jun  2 20:38:14 2026 GMT
        Subject: CN=2B66C88C4F1B91DE03EBA18CDAFE326AD5F6A532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:ad:fb:2c:9b:3b:9b:e2:bb:44:0e:d9:5e:
                    04:88:c4:05:1b:96:ad:75:87:3c:05:4f:86:51:0c:
                    46:0b:a7:e3:32:d4:9c:03:de:84:73:94:e8:ae:f4:
                    74:a9:9b:34:82:c2:c0:40:67:3c:8e:86:d4:74:68:
                    c5:32:cb:f7:8d:cd:f2:b8:95:93:5e:61:f5:78:08:
                    96:a7:57:47:f2:de:6c:b4:f0:6f:42:c6:95:e2:65:
                    17:2c:94:bd:54:69:c5:34:9d:da:42:64:7d:44:a1:
                    3e:46:87:4f:62:4d:bf:7a:b2:2f:18:5d:7f:7e:73:
                    48:1b:c0:83:e1:a0:e7:57:ac:c0:61:57:bd:3d:57:
                    c8:84:75:33:5b:a7:0b:dc:a5:2e:f9:f5:1c:92:cf:
                    08:6e:49:39:5a:4d:13:ad:8d:e9:94:1c:dd:b0:7e:
                    e3:d1:eb:2f:63:bd:5d:02:d9:92:67:9b:ea:04:87:
                    30:0c:35:8c:66:d2:8e:59:e8:fa:39:b9:36:ab:fb:
                    ad:93:fd:83:d0:a2:70:7c:f3:35:4d:af:16:cb:63:
                    91:1d:50:73:04:0e:09:83:db:1c:c6:26:d2:e4:47:
                    08:f2:23:26:24:7c:29:44:da:08:73:be:d0:05:ff:
                    5e:d6:2a:a8:9d:15:ad:ff:a7:e6:6a:c0:a6:f5:f6:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:C8:8C:4F:1B:91:DE:03:EB:A1:8C:DA:FE:32:6A:D5:F6:A5:32
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3230302e302e34382e302f32312d3234203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:23:c7:f8:da:b3:ea:8d:09:c8:34:4c:89:98:4d:94:b3:0c:
         58:f1:e6:cd:41:36:df:1a:55:f2:c9:07:a2:14:c1:87:47:0a:
         20:83:17:cb:98:fd:16:b6:7b:6e:59:2a:d3:0b:72:d4:af:0a:
         ea:71:4c:5b:c1:fd:ac:45:06:98:13:bc:9d:25:7d:c2:fe:76:
         2f:a3:14:03:b5:f3:0e:24:e6:1c:31:92:02:a5:26:6c:82:4d:
         fa:9b:8a:73:32:72:8b:a9:12:ef:95:92:da:c7:c0:49:93:52:
         83:73:28:21:64:c1:21:a0:da:7d:11:25:ff:c7:37:01:52:f0:
         15:38:c9:64:91:47:26:2b:39:c8:68:b9:ce:8a:a1:a1:36:37:
         c9:8f:56:c2:66:92:f2:16:01:4e:25:27:3f:77:cb:db:fc:13:
         de:d6:25:01:db:6a:b0:be:c1:d5:0f:d7:27:6c:98:b6:d6:68:
         ab:13:99:21:97:a6:84:de:2a:f2:19:97:3c:b1:5b:02:f3:43:
         25:c7:86:8c:00:30:91:44:c5:d1:46:88:97:b5:5a:65:4d:d3:
         e1:72:69:19:4c:00:b0:2f:53:f0:4b:af:e7:ca:49:fb:cc:81:
         0e:6c:7f:74:11:6a:e9:71:22:94:95:0d:51:35:35:9f:67:e3:
         94:35:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:57:54 2025 by rpki-client