Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
File:                     3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa (raw, json)
Hash identifier:          1MqIra5ZRap3dYrbjBoLTJJdvHrHCihP+dmugn6/djI=
Subject key identifier:   20:76:99:9B:8A:62:04:FC:70:3C:C5:ED:7D:98:B3:7C:22:B3:7E:87
Certificate issuer:       /CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
Certificate serial:       4DA3E09FEE307A367E0F38818BF8A2B9037E5140
Authority key identifier: 7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     271567
IP address blocks:        181.232.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl
                          rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a3:e0:9f:ee:30:7a:36:7e:0f:38:81:8b:f8:a2:b9:03:7e:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:77:3c:b3:f9:d1:3c:6f:c3:a1:d9:e1:49:f7:
                    1f:e5:75:3a:8a:24:f4:e4:08:ec:bd:8d:8a:24:31:
                    65:a8:45:fc:fb:ba:5f:7f:7b:5a:39:6d:29:0b:f4:
                    a9:a6:b7:8a:2b:ed:e9:27:59:58:00:96:2a:51:b0:
                    25:64:d2:9f:3f:2a:f2:34:81:58:f8:05:0d:1e:01:
                    44:94:b6:ef:43:f4:e8:53:f4:0f:f1:25:ee:22:6f:
                    c5:c2:0a:41:6a:2f:3b:9d:4b:52:29:6d:61:e9:b7:
                    9d:d4:e3:d6:8b:78:0a:a6:83:5e:2c:df:a9:ff:69:
                    c4:6a:9e:21:b6:be:2d:d4:79:a3:bb:1e:88:6f:af:
                    c8:98:b4:e2:15:11:aa:b4:1a:ed:94:07:2c:63:7e:
                    8e:1d:90:5d:a2:f2:76:6a:6f:00:b0:7c:45:05:84:
                    da:81:57:b6:8f:58:c0:5a:a6:67:d7:81:30:ee:58:
                    72:a9:d6:f4:0a:c9:39:38:5e:90:55:a5:8b:32:67:
                    13:48:e5:79:26:34:2e:71:95:7c:2e:e2:b5:bd:1a:
                    66:8f:81:87:1a:de:27:f5:c7:5f:d9:7c:16:01:b3:
                    29:d7:be:db:46:70:e0:79:e3:5a:d8:6e:23:40:09:
                    64:a5:f3:1a:1d:09:c4:16:e5:ee:d8:ec:e7:49:c6:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:99:9B:8A:62:04:FC:70:3C:C5:ED:7D:98:B3:7C:22:B3:7E:87
            X509v3 Authority Key Identifier:
                keyid:7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/3138312e3233322e3234382e302f32332d3234203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:ac:89:76:97:c5:59:d5:c4:bb:5e:9c:da:2b:61:ef:7d:d6:
         be:df:c9:67:71:de:9c:8a:49:f2:ff:6b:80:e1:cf:b8:e6:ad:
         fa:9c:32:9e:9c:90:3a:1a:a3:f6:43:1b:82:91:15:39:fe:f5:
         d1:8f:5a:3b:36:e1:1b:0b:96:bb:91:2d:ae:cc:7b:38:d6:7a:
         0c:c4:b8:11:1f:22:33:de:8b:77:ea:33:6d:c1:73:31:cd:3b:
         7b:83:47:da:bc:e7:52:a5:d0:0b:15:c0:fa:1d:94:92:50:78:
         f4:48:93:fd:e4:cb:eb:5e:7a:6f:ab:f4:66:1c:79:be:f7:b6:
         94:f5:dc:04:aa:4b:b3:fc:b8:82:ea:e9:37:76:cc:b4:c7:68:
         92:95:0a:79:62:f5:a3:f8:cb:e8:44:92:98:fc:5b:f3:11:a4:
         71:6c:a6:48:fd:8f:7d:d2:9b:2b:2b:13:d7:2a:10:fb:26:14:
         0e:23:27:07:71:37:88:d2:b3:2d:7f:b5:85:ab:50:2c:93:5d:
         55:0f:64:a6:11:16:04:7b:d2:da:20:d3:1a:d6:0a:bd:e3:b1:
         bb:c7:25:95:62:f0:3d:29:45:01:71:27:c6:e5:92:81:05:8f:
         dd:06:88:05:ee:54:df:2c:9e:85:a8:3e:cd:16:a3:95:e6:36:
         c3:6e:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:31 2025 by rpki-client