Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          MwakXQDp8VPS07RxEauyiv4qHuhatlLluKDPqt6YRhw=
Subject key identifier:   A8:C4:37:24:E4:67:40:E9:C4:05:64:00:DC:31:0C:A0:6B:4D:F2:F7
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       5FFE9A2F81CFB266CE987906C50B2BBA330DFCBE
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa
Signing time:             Wed 05 Mar 2025 20:03:40 +0000
ROA not before:           Wed 05 Mar 2025 19:58:40 +0000
ROA not after:            Wed 04 Mar 2026 20:03:40 +0000
asID:                     271562
IP address blocks:        181.174.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fe:9a:2f:81:cf:b2:66:ce:98:79:06:c5:0b:2b:ba:33:0d:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Mar  5 19:58:40 2025 GMT
            Not After : Mar  4 20:03:40 2026 GMT
        Subject: CN=A8C43724E46740E9C4056400DC310CA06B4DF2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:f7:f9:d0:53:0a:99:d4:83:d1:19:83:c6:
                    48:d0:d4:4e:30:8c:e1:71:a7:f8:b9:cd:71:54:79:
                    27:8d:ab:2c:63:a1:29:3a:b6:45:2a:d9:de:c1:69:
                    34:1d:06:fa:88:8a:72:7f:d7:d4:d0:b6:06:e7:91:
                    0c:5f:93:b4:05:02:22:cc:71:20:b7:ae:2a:3c:93:
                    bb:e8:f2:d4:44:a7:10:95:67:b3:fd:7b:9b:9a:72:
                    ef:7b:d6:2a:41:a5:e8:52:8a:d9:91:fc:f5:51:bc:
                    1c:a8:84:fc:15:5e:d6:cd:d7:e8:3f:d1:eb:3b:48:
                    b7:f8:9a:a9:3d:eb:34:ea:4d:d8:09:0c:b1:09:60:
                    a6:c6:ec:16:ef:72:3e:cd:20:2f:56:e2:06:c1:e0:
                    d5:2d:9b:3c:2f:9f:ea:e3:e4:4a:6e:53:cc:60:d8:
                    22:11:55:94:e4:ff:35:52:4a:0a:ad:73:a3:40:66:
                    a3:34:40:83:f9:96:37:d8:bc:6f:8c:29:cc:72:a9:
                    ac:8e:0c:bc:c2:a4:77:ef:f7:98:c3:9b:30:8a:e9:
                    a9:85:c8:62:95:62:e6:b5:03:c6:96:bb:f8:f9:6e:
                    5c:d6:78:6d:d0:e1:1b:3c:ee:88:21:88:ec:c9:d0:
                    3e:e1:3a:81:1a:61:8e:39:06:e4:88:e6:04:2c:31:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C4:37:24:E4:67:40:E9:C4:05:64:00:DC:31:0C:A0:6B:4D:F2:F7
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232302e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:ab:a3:b9:04:20:34:2d:79:0e:2c:98:31:2b:7d:ce:f9:45:
         c0:64:c3:2a:87:66:5a:13:41:64:ae:28:2b:02:d7:15:d2:fd:
         48:0e:d9:63:aa:3b:24:86:93:53:c4:29:91:fb:45:de:08:d8:
         2f:f4:85:7d:71:0e:02:56:5f:99:30:03:fe:a9:95:66:94:fd:
         70:91:fd:47:b5:87:e2:af:f2:9c:7b:b5:a8:51:7a:d4:98:ff:
         9f:88:62:ab:d2:3a:94:53:79:a5:f2:49:2f:14:9c:3e:c8:69:
         18:bb:c0:5a:4f:28:6c:8c:c4:5c:e3:8b:66:15:0b:f1:fd:bf:
         48:40:b6:aa:04:5b:1e:68:68:3a:4c:7f:1f:01:12:f0:b1:02:
         1c:fc:63:46:15:21:be:5b:9e:71:f2:be:93:c9:ba:5c:aa:a6:
         0f:87:a5:ea:59:1c:db:61:76:4b:78:69:f8:22:be:18:0c:b6:
         23:57:3e:52:33:5e:9a:51:5d:0a:84:f8:e3:4f:9e:a7:e4:a8:
         0f:d1:64:0b:a6:3d:6f:62:6a:98:1f:0f:6c:4d:44:3c:8d:fb:
         f9:9b:d5:32:a8:84:2b:3b:cd:8f:41:51:bf:a6:b6:14:76:7a:
         bc:92:be:5d:2c:47:a5:b6:86:97:c3:9d:93:05:b0:70:75:a2:
         07:c0:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:13:56 2025 by rpki-client