Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa
File:                     3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa (raw, json)
Hash identifier:          VoAeRcDLop4iDqVWSFGZA36P/Mvk9Prgr43AZW8xkIM=
Subject key identifier:   A6:3B:DB:54:87:C1:00:1C:81:B8:9D:CC:50:6A:E3:9C:50:CA:38:BB
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       4B978962FA06D868CDCEC290CD0AA34F40144DCA
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa
Signing time:             Wed 05 Mar 2025 20:03:40 +0000
ROA not before:           Wed 05 Mar 2025 19:58:40 +0000
ROA not after:            Wed 04 Mar 2026 20:03:40 +0000
asID:                     271562
IP address blocks:        181.174.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:97:89:62:fa:06:d8:68:cd:ce:c2:90:cd:0a:a3:4f:40:14:4d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Mar  5 19:58:40 2025 GMT
            Not After : Mar  4 20:03:40 2026 GMT
        Subject: CN=A63BDB5487C1001C81B89DCC506AE39C50CA38BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:0e:1c:e1:0a:e9:6d:6e:2b:29:72:bd:ae:
                    fe:e3:cd:a8:64:d8:35:4c:ce:89:1a:bc:14:66:a6:
                    59:2d:ed:00:c0:e4:75:5a:fe:c1:bd:3f:79:aa:55:
                    c4:b0:ed:04:77:69:c6:73:53:43:9f:c4:8b:d5:5c:
                    a5:b5:88:05:b7:eb:ae:ce:11:38:34:2b:a2:4c:a9:
                    37:d4:cc:21:e6:c1:7d:ed:51:34:23:5c:7f:64:ca:
                    02:d4:b7:64:b9:0e:db:cf:ce:90:3a:e7:12:da:bd:
                    fd:ab:cf:a3:5b:f9:ba:e9:42:ac:07:52:02:b0:ee:
                    cf:7b:62:0a:1c:0e:86:15:e8:02:51:a9:bd:f2:ef:
                    1e:a3:ce:21:72:75:2f:b7:d1:e8:83:c8:be:d8:98:
                    a7:49:0b:e4:7c:79:8e:12:ab:71:23:53:fe:b6:b0:
                    ab:f8:c6:48:f0:80:19:28:0c:51:a6:11:88:96:1d:
                    0f:5d:b7:d1:d4:54:28:d1:3b:63:6b:e4:63:6f:2a:
                    ed:cf:08:24:95:fe:67:f0:a0:2f:25:06:60:9d:98:
                    64:a1:2a:df:8e:17:dc:b2:12:07:6b:d5:f2:10:67:
                    de:e0:ed:28:09:0f:2b:39:e3:37:78:f0:04:67:67:
                    6d:0a:8a:d6:28:86:c5:27:a6:d3:bc:27:0f:93:71:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:DB:54:87:C1:00:1C:81:B8:9D:CC:50:6A:E3:9C:50:CA:38:BB
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32332d3233203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:0e:9d:ab:2d:e6:de:5d:8e:cf:2c:42:93:02:56:ea:bc:
         3c:f3:37:b0:da:35:b3:b5:f2:07:0c:d2:d8:0b:d4:32:b4:49:
         80:d2:70:fd:6e:d3:25:3b:34:05:12:40:91:60:99:da:39:d3:
         46:7d:44:56:2d:c2:aa:3d:78:98:d7:6c:b1:25:f3:68:06:f1:
         c3:73:d8:83:aa:e0:55:15:55:43:ef:97:1b:7f:29:cd:35:e2:
         83:92:a8:c6:93:2e:f9:9d:4a:70:7e:16:22:ea:4d:76:b0:57:
         5b:ca:54:04:1d:12:a7:7e:26:4f:7d:98:c9:48:a8:71:17:2b:
         dc:c4:45:a7:62:47:fe:b7:1d:83:ce:c1:c3:21:31:72:eb:9d:
         5f:6c:d7:02:33:6e:9b:17:e7:2d:34:f3:75:61:a9:ee:7a:cb:
         2e:61:b8:ad:01:5c:fe:ca:fc:e6:5d:60:11:0e:e3:cd:a3:37:
         80:8e:31:be:e6:0b:78:ab:11:3f:43:ad:b5:93:3b:b0:6f:b5:
         f9:77:ce:44:ad:38:fc:66:61:91:a6:b2:d4:58:e2:70:43:d9:
         15:c8:96:eb:04:ae:89:90:ee:39:f0:a4:7e:e6:80:53:55:5f:
         53:90:69:2f:bc:9e:57:ac:64:18:eb:4f:b7:ba:7e:d7:69:47:
         9e:8f:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:35 2025 by rpki-client