Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa
File:                     3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          2A4rDuLRFWXAJlapuXpN/E4CaofZs0b0umVtQA4SiGw=
Subject key identifier:   87:82:64:70:36:BA:50:1C:AF:00:AE:F8:F8:8E:63:58:BD:8E:0A:F0
Certificate issuer:       /CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
Certificate serial:       320EF874AE60BF9A58F42874C7B3A607AAFD9712
Authority key identifier: CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa
Signing time:             Thu 06 Mar 2025 04:01:09 +0000
ROA not before:           Thu 06 Mar 2025 03:56:09 +0000
ROA not after:            Thu 05 Mar 2026 04:01:09 +0000
asID:                     268323
IP address blocks:        201.158.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl
                          rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 15:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0e:f8:74:ae:60:bf:9a:58:f4:28:74:c7:b3:a6:07:aa:fd:97:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8
        Validity
            Not Before: Mar  6 03:56:09 2025 GMT
            Not After : Mar  5 04:01:09 2026 GMT
        Subject: CN=8782647036BA501CAF00AEF8F88E6358BD8E0AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:f0:5a:bb:b2:89:d0:d6:54:63:d4:06:29:
                    17:3b:50:48:7f:b0:27:f8:20:6a:85:b5:48:00:55:
                    12:4c:7b:bf:66:4f:c2:f0:58:52:00:86:b8:40:c6:
                    57:ae:84:32:d5:5b:8f:8e:dd:04:00:4a:5f:98:dc:
                    42:a2:56:74:ba:1d:b1:ae:91:5c:b0:1f:a9:fa:f3:
                    01:48:ea:32:27:4f:ec:b5:29:54:fb:d5:7b:cf:83:
                    cd:ca:44:59:e3:88:69:9c:13:dc:0a:b8:9b:27:19:
                    2b:4a:e0:b2:af:06:95:1c:39:ca:ef:5c:5b:80:28:
                    80:1c:94:c0:4c:1f:0b:1b:f2:df:bd:4e:28:db:13:
                    90:dc:1a:66:b0:f0:98:18:28:18:a5:ec:37:a1:d3:
                    e3:cb:17:4b:e9:0d:58:9a:b8:e5:c0:71:bd:d0:f0:
                    07:20:53:b8:21:83:9b:86:2b:8e:c2:3a:f0:79:4a:
                    59:ad:f2:bf:b9:68:31:0e:f6:38:f0:59:d8:e8:a9:
                    70:d2:61:06:c0:38:19:f6:ec:c7:9c:58:5a:a1:e3:
                    64:23:b1:68:34:c1:34:9e:a4:b4:61:9c:e7:2d:11:
                    94:07:31:48:37:14:2d:4e:42:4c:f0:66:50:db:90:
                    b7:af:ea:d3:eb:00:19:3e:8a:6d:a8:8b:70:05:fe:
                    36:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:64:70:36:BA:50:1C:AF:00:AE:F8:F8:8E:63:58:BD:8E:0A:F0
            X509v3 Authority Key Identifier:
                keyid:CC:1E:CC:FA:C7:A6:BB:A6:B9:3A:63:2D:D1:C6:10:06:86:34:4B:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1ECCFAC7A6BBA6B93A632DD1C6100686344BD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/1/3230312e3135382e34302e302f32312d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:54:55:fa:15:ac:74:8a:cf:ae:73:7e:6d:51:11:0c:9e:1d:
         f6:81:b8:47:7e:45:c4:6f:b3:58:6a:7b:89:6c:f4:fa:7f:49:
         47:cd:73:81:ac:7a:3a:15:54:0c:b1:1c:6f:ee:b0:a8:93:01:
         86:4e:bc:2a:9c:19:4e:8d:db:b0:d5:d0:5b:17:a9:ab:77:24:
         4f:87:a7:8d:29:bf:98:a4:d7:a4:e8:35:ad:78:38:11:e4:36:
         08:fd:be:60:52:be:4a:8c:ef:86:8c:84:cf:ff:88:b7:13:15:
         8a:9b:21:49:eb:57:b6:d8:1f:2c:d8:ab:2a:9e:b8:ba:90:e6:
         7c:22:87:bd:7a:0a:e8:65:f2:66:2f:34:b2:aa:89:78:54:cf:
         f2:a0:58:e3:57:1b:63:15:ec:e0:9d:51:2f:18:b3:29:75:d3:
         1a:4e:9a:e0:fb:23:bb:20:df:df:dc:38:10:7f:18:a4:dd:da:
         23:f6:a8:d4:3a:72:ab:14:b9:3f:26:c2:ee:43:1b:b0:dd:4a:
         6e:4b:78:30:36:05:28:6a:e9:2a:fe:c4:55:9a:c7:0e:78:63:
         86:b6:ac:20:76:01:d0:82:6b:21:95:90:99:52:db:fd:4a:e3:
         a7:93:23:5a:1c:dc:da:6b:ca:12:f6:4d:38:e2:a3:17:ac:f9:
         49:c4:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:41:33 2025 by rpki-client