Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          P9yKXvhhlSkRsYakfdUQdMbTa083/HvMmg3R2Scgz/8=
Subject key identifier:   DE:0E:21:28:CF:03:BF:EF:C8:D0:CD:57:18:6B:B2:0B:C0:04:F5:42
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       62B5D3A7ED76AD41E411C37A72799E1E81C1852C
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa
Signing time:             Wed 05 Mar 2025 20:03:40 +0000
ROA not before:           Wed 05 Mar 2025 19:58:40 +0000
ROA not after:            Wed 04 Mar 2026 20:03:40 +0000
asID:                     271562
IP address blocks:        181.174.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b5:d3:a7:ed:76:ad:41:e4:11:c3:7a:72:79:9e:1e:81:c1:85:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Mar  5 19:58:40 2025 GMT
            Not After : Mar  4 20:03:40 2026 GMT
        Subject: CN=DE0E2128CF03BFEFC8D0CD57186BB20BC004F542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:ac:15:ea:a3:7d:c2:5b:0f:cb:58:df:6e:
                    9d:fc:f6:80:91:c9:cd:fc:8e:86:ba:e4:78:a8:76:
                    b3:be:10:fa:0c:a1:12:34:a5:9f:b1:a2:b2:f7:4a:
                    2c:1b:db:79:d9:04:e2:ab:d4:89:92:7b:1a:5e:21:
                    67:eb:a7:e8:42:5b:b2:a6:7d:b1:d7:fc:7f:23:14:
                    87:2d:e8:db:85:33:98:98:47:96:de:b3:31:fc:e0:
                    e4:f1:04:91:e3:73:c9:46:3a:09:d1:e3:8b:20:d3:
                    2c:64:8a:e5:61:e8:cc:d1:ad:8d:86:01:8c:6d:83:
                    a4:91:f7:98:5e:00:dd:ed:0d:43:16:5e:c7:91:45:
                    5d:b7:93:21:62:74:9b:f8:69:6b:14:cf:09:9f:40:
                    6b:26:e2:ad:e7:8b:b2:9e:14:ca:0a:74:16:2d:0e:
                    cf:74:cf:39:b1:35:62:32:c7:a9:e8:28:51:e1:c7:
                    b2:91:8c:30:78:3e:54:ec:a1:e4:08:ac:ef:27:35:
                    91:68:ab:6a:87:1d:c9:66:76:23:23:fe:c5:30:56:
                    1d:e8:d1:18:b1:66:ae:dd:5a:df:ea:f5:2a:8b:23:
                    69:ef:fa:c0:44:09:f9:f2:52:c9:90:04:85:5f:e6:
                    41:30:c0:40:72:a6:75:43:eb:7a:02:c4:b8:4e:cc:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0E:21:28:CF:03:BF:EF:C8:D0:CD:57:18:6B:B2:0B:C0:04:F5:42
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/3138312e3137342e3232322e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:bf:8b:a3:c9:4c:d4:8b:0a:1c:96:3f:de:56:91:c7:52:06:
         98:1b:43:62:96:57:15:93:ba:27:4d:9c:82:c7:ca:dc:bb:eb:
         ba:7c:17:01:a9:d3:80:73:32:fb:73:42:89:8d:64:93:ae:f3:
         92:09:69:10:64:4c:39:5f:52:69:09:7f:51:f2:76:e0:a1:83:
         17:9f:54:04:a3:06:7d:be:be:10:f8:2e:63:90:1f:0e:58:d5:
         a2:cc:c4:3a:91:5a:02:1a:e9:5f:f7:a7:9b:8d:f0:a5:bf:da:
         dd:44:5d:46:97:fb:0c:e5:30:b7:9a:66:9b:2e:0f:6f:a3:ff:
         4c:fa:ff:3a:70:96:a7:47:54:00:71:6e:69:6c:9d:76:20:79:
         bf:b7:0d:56:b2:81:48:b6:a1:79:2b:3d:35:cb:57:9d:d6:07:
         98:e0:d1:b4:1e:64:e2:00:be:ac:6d:6d:6b:83:2e:98:9d:38:
         53:d2:25:ff:bb:19:9e:3e:85:7a:f7:d8:46:36:ec:60:8b:70:
         fb:05:17:83:36:aa:ab:ec:29:7c:e7:7b:5a:9f:72:14:cf:0f:
         af:ff:eb:40:13:51:f2:11:ad:3e:3b:83:fa:30:67:70:32:ae:
         ca:cb:68:c3:9d:7c:c8:de:03:0a:57:03:3e:79:f4:ef:fc:77:
         c3:65:0e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:13:50 2025 by rpki-client