Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138312e3139312e31362e302f32322d3234203d3e203532383932.roa
File:                     3138312e3139312e31362e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier:          PKVxmTYWeToeevqUV4KkDYhxvFsgyqONe5O3Tt/zaz4=
Subject key identifier:   F7:25:EA:A5:CA:3A:CF:A9:A8:46:15:BA:17:43:48:72:E8:58:F7:FC
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       37ADF5EC1A8D4307FCD1C84ABCDB268A9B9C482C
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138312e3139312e31362e302f32322d3234203d3e203532383932.roa
Signing time:             Tue 20 May 2025 03:52:34 +0000
ROA not before:           Tue 20 May 2025 03:47:34 +0000
ROA not after:            Tue 19 May 2026 03:52:34 +0000
asID:                     52892
IP address blocks:        181.191.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:f5:ec:1a:8d:43:07:fc:d1:c8:4a:bc:db:26:8a:9b:9c:48:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:34 2025 GMT
            Not After : May 19 03:52:34 2026 GMT
        Subject: CN=F725EAA5CA3ACFA9A84615BA17434872E858F7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:35:4a:88:96:e3:fa:e9:19:af:79:51:31:
                    f1:e4:1d:5e:50:96:e0:3e:f8:59:49:e9:fa:33:b8:
                    0d:e8:dd:57:8e:68:f7:21:f2:88:59:22:f6:87:b5:
                    26:10:f5:9f:e7:b3:16:62:65:9e:22:47:83:5a:0e:
                    e5:b6:fe:26:45:f0:85:69:0f:d8:f1:b8:dd:16:3d:
                    cb:5b:c7:99:6f:89:3d:f6:e9:47:68:7b:42:f4:c6:
                    a8:1f:84:52:22:02:96:7a:7a:04:64:be:48:2d:29:
                    1e:69:48:ee:1d:ad:c8:91:72:59:08:35:0a:c5:fe:
                    0e:ab:d0:b7:dd:57:e2:2e:41:3c:02:ff:37:cb:c6:
                    ba:c2:d3:90:9c:5f:2e:ba:b3:23:29:e6:d4:17:ea:
                    b3:54:9f:91:c5:07:14:f4:89:f8:96:0d:f6:1f:06:
                    e2:ec:cc:14:a4:b1:99:38:d2:27:d7:3e:30:50:4c:
                    a6:5b:ac:0a:f1:09:7f:cc:b0:04:e6:e0:c8:c2:a5:
                    6a:cc:a3:d6:27:53:06:59:ae:1c:23:4b:46:f7:7c:
                    0e:3d:a1:28:ab:cc:4f:4d:b6:1b:95:b0:d7:7f:75:
                    89:47:3a:7f:e6:d0:73:01:9a:7a:24:d2:a9:33:cb:
                    83:b4:40:c6:47:32:2c:c8:7f:59:93:f1:84:13:e0:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:EA:A5:CA:3A:CF:A9:A8:46:15:BA:17:43:48:72:E8:58:F7:FC
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138312e3139312e31362e302f32322d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:1b:5e:01:82:d7:0d:9c:18:74:bc:5f:17:ed:85:85:fc:
         0a:66:41:5a:cf:f3:79:b0:c2:04:de:29:4b:03:e5:5f:26:02:
         b6:c2:d3:e2:28:a4:5c:49:b7:08:88:88:e7:64:1c:43:12:06:
         ea:0e:75:07:9b:1c:d8:2e:91:f9:44:c4:e8:c9:66:15:9b:50:
         7b:e3:fe:e9:54:fd:72:fb:0f:55:06:3a:6f:f7:26:7a:07:8d:
         f6:2f:ff:13:4c:06:90:27:f3:2d:c1:11:28:28:24:24:be:d9:
         45:bd:3b:70:3c:19:ba:86:e2:35:e5:13:3c:07:0c:3b:d5:80:
         33:b5:16:41:17:c0:23:6b:5e:0a:29:f9:28:e0:8f:df:c7:18:
         56:e0:28:62:8f:65:d9:29:a9:14:ba:8c:a9:bd:20:05:9b:1f:
         6b:04:36:19:d1:7b:9b:f9:30:9a:1a:6a:05:29:8d:cb:78:e3:
         74:23:5d:c5:f2:68:49:4b:c3:51:d1:a5:df:f2:3f:c6:d1:16:
         e4:8d:7e:82:18:05:76:2b:10:bb:32:b1:bf:2e:a5:5b:67:08:
         d2:b7:63:61:ce:ae:c1:86:18:1b:a7:8f:b4:58:98:7b:0c:18:
         70:50:98:09:73:87:f0:a5:24:c2:51:81:7a:b0:54:e4:74:dc:
         1a:d6:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:57:13 2025 by rpki-client