Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa
File:                     3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa (raw, json)
Hash identifier:          FIwFwpyUCKNwCUQ0QTzPbTgQumrMufTSN6FixF1CLtI=
Subject key identifier:   23:B0:5C:3D:29:46:34:7A:8B:E0:0E:66:C9:EF:D7:3C:32:5A:15:94
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       0ABA1B6900CBF7E06A413BA01B9BF223121D8C36
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa
Signing time:             Thu 03 Apr 2025 13:59:10 +0000
ROA not before:           Thu 03 Apr 2025 13:54:10 +0000
ROA not after:            Thu 02 Apr 2026 13:59:10 +0000
asID:                     270690
IP address blocks:        181.225.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ba:1b:69:00:cb:f7:e0:6a:41:3b:a0:1b:9b:f2:23:12:1d:8c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr  3 13:54:10 2025 GMT
            Not After : Apr  2 13:59:10 2026 GMT
        Subject: CN=23B05C3D2946347A8BE00E66C9EFD73C325A1594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:e0:ff:92:f6:d0:60:9e:82:dc:d9:24:2b:
                    53:ba:5f:b5:43:3e:8c:63:b5:4a:d6:9a:07:4e:b0:
                    16:20:7d:a8:47:a9:e1:fc:61:15:48:af:ec:bd:78:
                    b1:af:a3:41:15:29:7d:2e:97:24:55:5c:97:a7:94:
                    58:dd:e4:f1:2b:b2:93:04:1d:ca:71:0f:1f:26:84:
                    e3:3c:51:b4:2a:20:73:af:a9:d7:fc:b2:46:1a:24:
                    8b:92:9c:9d:fc:8c:62:b1:bb:79:86:c4:8a:4a:3f:
                    9a:9d:1a:56:92:e6:6a:c3:7f:c4:55:9f:84:8d:ce:
                    9e:d0:e6:2e:2f:ed:db:61:6d:0b:9d:f4:5d:3c:ac:
                    4c:4f:dd:25:c6:08:0d:eb:9e:52:64:57:b6:8f:cd:
                    94:60:11:29:b0:de:47:cc:39:b3:c7:5c:47:f0:a5:
                    da:80:df:1c:5a:8e:56:d4:43:81:4b:25:37:42:5b:
                    94:81:3e:55:8e:eb:c6:fb:4b:64:e3:2e:b8:bd:f7:
                    0d:b4:08:f3:34:c2:e0:74:2c:51:c8:7f:28:54:21:
                    75:f1:18:30:31:16:f8:1f:c0:15:d7:9c:89:a3:4a:
                    4f:0f:f6:e0:0e:c2:98:9c:ab:ad:f0:ae:2c:69:52:
                    e1:6a:95:5c:08:b7:04:12:cf:18:74:23:2e:c0:41:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B0:5C:3D:29:46:34:7A:8B:E0:0E:66:C9:EF:D7:3C:32:5A:15:94
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32332d3233203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:b4:43:5f:21:d6:bc:17:4f:c0:17:17:1a:89:10:d3:ac:8e:
         e6:ee:82:15:74:d0:f6:45:24:f2:72:6f:db:9b:4c:9a:f3:e4:
         9f:00:a7:03:93:f1:20:6a:b9:30:df:d9:83:c2:86:4b:3e:fa:
         fb:29:27:77:3d:20:c8:74:22:88:56:25:e7:07:6d:85:a1:af:
         a7:c1:a9:5d:00:28:8a:ce:0a:2d:de:ce:6d:ce:a5:36:d5:c3:
         f3:c7:b5:5d:3e:ab:95:65:bc:31:60:27:54:4d:25:1d:a4:3d:
         ac:4c:91:f8:7a:36:ed:87:f1:58:2b:25:b6:4a:c6:59:fb:5b:
         b1:d2:97:1c:a8:2e:3d:ba:d8:34:f1:9c:53:99:8c:e4:7b:83:
         e4:9f:fb:0b:cf:e6:0e:4e:82:7c:65:b4:b1:37:bd:bc:20:41:
         43:14:f0:79:63:82:b0:68:30:b6:ca:fc:5d:85:39:b4:5d:01:
         9d:dd:5b:4b:da:7f:30:a8:05:10:16:b4:17:de:ad:15:d6:11:
         2e:ea:42:0b:2e:eb:b8:eb:26:d0:c8:39:13:59:dd:c5:f2:04:
         44:99:03:bd:99:1f:7c:80:05:c0:fe:bb:99:b4:f3:af:37:dd:
         e0:ad:d3:a5:fb:a1:dd:f4:c8:73:a6:12:28:42:05:dc:fa:9a:
         92:4f:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:33 2025 by rpki-client