Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa
File:                     3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (raw, json)
Hash identifier:          4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=
Subject key identifier:   89:23:85:2B:FD:39:72:55:BE:39:6D:59:05:A6:37:5A:7E:BC:B0:41
Certificate issuer:       /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
Certificate serial:       78578B6B9E4396A0833F4EA8EDF49B462869D139
Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa
Signing time:             Thu 06 Mar 2025 15:08:35 +0000
ROA not before:           Thu 06 Mar 2025 15:03:35 +0000
ROA not after:            Thu 05 Mar 2026 15:08:35 +0000
asID:                     271541
IP address blocks:        181.232.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl
                          rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:57:8b:6b:9e:43:96:a0:83:3f:4e:a8:ed:f4:9b:46:28:69:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
        Validity
            Not Before: Mar  6 15:03:35 2025 GMT
            Not After : Mar  5 15:08:35 2026 GMT
        Subject: CN=8923852BFD397255BE396D5905A6375A7EBCB041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:61:b6:ae:88:6b:57:bc:71:e7:a9:69:94:
                    f9:c9:0f:9a:5d:ba:dc:94:20:d8:cc:91:23:97:4b:
                    a6:da:91:80:13:2a:73:35:b0:48:5f:97:8b:59:95:
                    55:2b:9b:10:85:76:80:b9:07:e6:d5:08:e2:b3:c7:
                    3c:ef:2f:51:e0:5e:11:66:4c:24:26:19:31:c4:ff:
                    d8:b2:a3:83:24:b6:37:9e:46:4d:fa:26:aa:d4:ad:
                    e1:67:82:54:b8:4d:3d:08:06:b3:f7:d5:91:83:13:
                    15:ce:90:33:ed:60:99:cb:15:14:31:98:08:a0:e7:
                    a9:88:0f:6b:98:09:ef:05:74:29:04:27:33:b9:32:
                    b7:25:c2:15:e2:ee:cc:d8:8a:32:69:c2:e1:99:c7:
                    4c:6c:19:ad:fe:54:5b:79:d9:eb:1b:0a:37:35:18:
                    94:d9:9b:9a:b7:4a:5e:32:62:f5:1c:08:07:1c:fc:
                    26:a3:d5:61:e5:91:8d:63:37:30:b0:38:5e:59:fa:
                    16:f8:ad:73:4a:d1:4f:e0:0b:b3:5a:b8:da:89:59:
                    48:41:89:00:bb:ce:e0:de:fc:7b:9f:58:16:c7:dc:
                    4f:85:53:db:7b:39:c1:b0:a2:b0:ff:95:61:1a:77:
                    75:51:0f:25:c6:c3:c5:5a:8c:67:86:88:01:72:92:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:23:85:2B:FD:39:72:55:BE:39:6D:59:05:A6:37:5A:7E:BC:B0:41
            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:88:95:44:55:16:09:73:50:b2:b4:0d:a4:72:13:3b:6b:
         6a:37:84:65:59:f5:80:bf:21:46:ce:36:9d:76:aa:b6:5d:ee:
         c3:f8:eb:cf:05:06:fe:0e:01:15:6d:e4:d1:55:4a:21:d2:a4:
         5c:60:b0:48:14:16:8d:f6:3f:ca:10:b5:79:d6:e9:e3:b7:fb:
         43:b4:6f:56:76:59:75:34:39:6a:25:a1:a1:20:88:d1:39:26:
         a4:1b:c8:07:26:38:bb:48:13:67:a5:f3:71:bf:49:b8:86:de:
         b4:df:b7:3f:85:3c:c6:63:e0:78:c6:45:45:eb:73:6b:49:3b:
         b1:32:22:c5:4f:2f:9b:4e:92:bf:a7:46:ed:35:a2:98:b5:1a:
         74:f8:eb:b1:79:22:bc:c2:4e:bc:53:5c:05:a5:ec:28:fb:b1:
         a8:bd:5f:ec:57:d2:c3:55:62:87:c5:9f:b8:d4:11:65:64:59:
         2b:db:d8:67:d9:22:a1:e5:ce:ae:42:7f:d8:ec:0e:11:04:66:
         a9:ca:00:d5:ac:de:0d:3c:a6:f5:4e:df:e4:1d:a2:85:a6:6e:
         00:e7:8d:27:a8:ff:51:d6:12:d3:8b:82:22:90:f5:e6:df:9c:
         de:b8:bf:78:f4:d1:a4:92:e0:f3:48:23:77:4c:20:51:f1:12:
         24:fe:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:54 2025 by rpki-client