Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa
File:                     3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa (raw, json)
Hash identifier:          KWo2e0MMaeWOD1sEQEF2tyjd6Usg2QFAOkw32N/GXOQ=
Subject key identifier:   4C:EC:C5:EE:D5:86:84:EC:81:BF:08:57:85:0A:2C:5D:04:81:51:20
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       63F11CE5FDD8E95B0CA945036B3D6B8F97429DF9
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa
Signing time:             Wed 27 Nov 2024 14:27:30 +0000
ROA not before:           Wed 27 Nov 2024 14:22:30 +0000
ROA not after:            Wed 26 Nov 2025 14:27:30 +0000
asID:                     267548
IP address blocks:        201.182.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 20:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f1:1c:e5:fd:d8:e9:5b:0c:a9:45:03:6b:3d:6b:8f:97:42:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Nov 27 14:22:30 2024 GMT
            Not After : Nov 26 14:27:30 2025 GMT
        Subject: CN=4CECC5EED58684EC81BF0857850A2C5D04815120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:38:b4:6f:75:a7:4f:d6:34:4a:1b:29:92:
                    09:2f:87:fc:8d:c4:8f:35:b4:f8:ad:88:9f:eb:59:
                    ff:46:d4:12:f3:47:9b:42:20:24:a2:bb:dd:f3:9e:
                    54:85:ab:a5:57:3d:f6:a9:fc:a0:8c:69:a7:c0:60:
                    81:a6:20:55:93:31:56:26:bd:4b:6f:e4:fc:94:9e:
                    bf:30:e1:8d:17:d7:8c:0f:79:6e:20:f8:e0:c0:4d:
                    68:af:a1:91:8d:c9:d0:69:34:73:6c:c0:4b:40:4e:
                    9e:0a:cf:30:0b:30:8c:84:92:a8:9b:3d:98:c6:7b:
                    23:af:c8:0c:2a:ab:a4:e8:47:33:8c:9f:91:3c:7c:
                    df:ce:94:c8:45:59:60:e2:6d:88:55:d8:33:f7:6f:
                    53:cc:62:f7:5e:2e:be:1b:52:ce:7d:dd:a0:c4:5a:
                    af:8b:b3:4f:b8:52:d8:9f:e9:d6:e4:eb:60:8b:e2:
                    38:d0:85:bd:8f:08:f3:5e:97:cb:d1:c3:7a:0b:07:
                    4a:7f:49:c4:25:22:84:99:a9:6a:68:ed:10:ff:79:
                    4d:a9:b5:bf:f1:aa:0e:6f:27:39:d0:6f:75:23:24:
                    a7:db:77:08:7b:26:20:83:86:c9:86:36:c1:dd:fd:
                    a7:86:92:c1:85:c6:5b:ee:3c:fe:3e:f4:77:2f:fc:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:C5:EE:D5:86:84:EC:81:BF:08:57:85:0A:2C:5D:04:81:51:20
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32332d3233203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:55:ca:7b:5f:19:6e:a3:bb:9b:1b:ac:b3:33:33:29:42:35:
         e2:d7:09:dc:63:08:5e:ea:0a:f0:f6:1e:e7:a5:8f:a1:70:9d:
         da:ac:6d:c9:3b:66:1e:f0:a5:a8:b0:98:85:e5:6a:1c:b6:9f:
         d2:ad:a7:a9:80:11:8d:83:76:9e:b2:c9:74:15:9c:e9:22:e8:
         3a:5a:8d:72:8f:15:53:b0:d0:cd:0b:32:5b:28:fc:d1:b3:18:
         bc:45:16:27:b6:88:6f:ee:5a:48:60:f0:43:cd:e7:68:54:09:
         b4:8b:1a:5b:3e:1a:92:6f:33:46:8a:0a:ba:37:d5:60:9b:21:
         7f:ae:f7:2e:3d:11:1d:3b:74:03:d5:25:1c:f9:9a:10:82:95:
         67:cd:2e:4b:ba:d9:37:2d:fd:f8:64:27:0d:62:b5:0a:c4:a4:
         67:50:8d:da:e2:7e:5a:26:4e:f2:0d:17:2f:3c:aa:01:37:7a:
         f4:f9:c1:b9:6d:b3:38:1e:4c:25:2c:00:1f:2b:ff:40:d1:19:
         03:73:9b:bb:2f:39:a4:46:7c:3e:2a:72:45:79:19:72:52:96:
         31:ce:c1:ef:60:bb:99:b8:92:a0:db:3d:56:90:7a:6e:22:2b:
         23:74:2b:b9:8e:96:2c:16:aa:e5:5c:94:e8:17:a8:7a:18:a5:
         08:69:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:08:58 2025 by rpki-client