Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa
File:                     3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa (raw, json)
Hash identifier:          c7A7o/Gw8UO1NElQqJButgFjMm7EWHXY7OaE2mhX6qM=
Subject key identifier:   CB:68:7B:9E:E8:82:E6:88:8A:64:EC:C3:FC:7C:FE:3B:A2:D9:19:DE
Certificate issuer:       /CN=66F999D364628A7CC2634117B086F1A07B01449C
Certificate serial:       7CBC039A79280B1FED7FC7438C2C4B392FB2558F
Authority key identifier: 66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa
Signing time:             Wed 19 Feb 2025 10:33:28 +0000
ROA not before:           Wed 19 Feb 2025 10:28:28 +0000
ROA not after:            Wed 18 Feb 2026 10:33:28 +0000
asID:                     271468
IP address blocks:        181.224.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bc:03:9a:79:28:0b:1f:ed:7f:c7:43:8c:2c:4b:39:2f:b2:55:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F999D364628A7CC2634117B086F1A07B01449C
        Validity
            Not Before: Feb 19 10:28:28 2025 GMT
            Not After : Feb 18 10:33:28 2026 GMT
        Subject: CN=CB687B9EE882E6888A64ECC3FC7CFE3BA2D919DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:89:e7:a4:f2:e0:ac:a9:0c:52:ec:a5:7f:
                    f4:53:fe:bf:24:23:7e:c3:d6:48:29:9c:56:50:b8:
                    6a:4b:b3:46:e1:84:cb:70:4a:97:08:dd:08:7c:6c:
                    64:19:36:e2:35:4f:55:3b:79:ec:30:bd:35:7c:d3:
                    06:96:7c:40:25:3c:64:04:82:01:27:df:52:0e:ae:
                    e1:1b:29:1d:41:ef:98:0a:a3:65:26:e2:b2:f6:7f:
                    e4:2a:67:7b:9c:94:66:5f:8c:f9:50:ce:6a:bc:f1:
                    ab:0b:a8:9b:d5:e5:9c:1b:5e:14:38:d7:76:42:ec:
                    63:32:1c:96:62:0b:80:d5:62:81:aa:33:34:e1:c7:
                    13:b1:2f:1f:02:ec:99:7d:f3:91:92:9a:58:f6:71:
                    40:4f:cf:6c:f0:55:14:94:45:dd:a7:37:7f:29:b2:
                    36:35:e3:83:98:dc:2e:28:ed:66:1a:f5:2b:9b:b3:
                    c7:9e:8d:a0:87:c7:f9:9e:e1:8d:2d:41:03:3a:a7:
                    97:3c:20:3b:d0:a0:26:e0:32:3d:4a:5f:ab:ee:2d:
                    e7:71:20:18:5a:aa:db:34:2f:9a:61:0d:8e:0e:58:
                    e5:d7:c2:3b:08:3d:c8:8c:0b:73:74:f7:0a:0b:89:
                    2b:d9:28:9c:a3:63:b2:30:a6:fb:7e:3f:b0:94:64:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:68:7B:9E:E8:82:E6:88:8A:64:EC:C3:FC:7C:FE:3B:A2:D9:19:DE
            X509v3 Authority Key Identifier:
                keyid:66:F9:99:D3:64:62:8A:7C:C2:63:41:17:B0:86:F1:A0:7B:01:44:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/66F999D364628A7CC2634117B086F1A07B01449C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66F999D364628A7CC2634117B086F1A07B01449C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32332d3233203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:d4:19:98:6e:a1:b9:8e:5c:be:2c:2f:4a:65:fc:51:81:fe:
         5d:eb:bb:5f:cf:52:b3:06:c6:cc:04:37:93:c1:15:d0:e0:62:
         90:f8:fb:30:a9:db:bf:51:e4:28:33:96:d9:fb:1a:6c:05:bc:
         f8:8a:ac:90:96:5c:61:bc:00:77:ea:41:7b:67:fc:c9:a6:46:
         c1:2e:f8:6c:67:10:fc:a5:a9:3a:4f:8b:d2:81:ad:9d:11:1d:
         e6:0f:2b:17:23:b3:d2:15:f5:85:cc:4f:c7:38:79:04:86:8e:
         49:77:8c:60:ac:7d:f3:51:6e:9b:cf:03:f6:32:86:fe:ab:aa:
         c0:46:09:8a:21:4a:6c:04:5b:86:ba:c0:06:a5:e5:85:64:8c:
         50:3a:f4:c0:4b:05:98:6e:99:97:56:7e:aa:10:79:9c:d9:b0:
         16:6c:1c:c1:49:4c:39:ea:58:0f:4c:e5:94:b8:49:f6:ac:ec:
         00:1d:0e:11:b9:02:97:72:62:c3:49:8d:3f:eb:a2:f2:72:ce:
         ad:48:47:69:66:61:7d:bf:d0:41:02:93:63:31:2c:1f:e5:12:
         f3:bc:2d:ff:96:84:e0:e5:d6:50:17:fc:f6:6e:ea:d9:6d:96:
         0b:70:df:6c:65:11:8c:dc:e5:23:e4:08:f2:70:80:21:17:0a:
         8d:9a:7d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:41:49 2025 by rpki-client