Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa
File:                     3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa (raw, json)
Hash identifier:          F0vIBnXm7QmhkLGIRL9MuzSSEvBi3tkeEcypHIDebRw=
Subject key identifier:   50:C8:C2:40:1E:A0:E7:E1:C1:CE:0C:53:5B:6E:7A:D6:45:56:27:C9
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       53FAFD10C2103016CF3AFE20C78783AB98FC5AFF
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa
Signing time:             Thu 03 Apr 2025 13:59:16 +0000
ROA not before:           Thu 03 Apr 2025 13:54:16 +0000
ROA not after:            Thu 02 Apr 2026 13:59:16 +0000
asID:                     270690
IP address blocks:        181.225.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 11:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fa:fd:10:c2:10:30:16:cf:3a:fe:20:c7:87:83:ab:98:fc:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Apr  3 13:54:16 2025 GMT
            Not After : Apr  2 13:59:16 2026 GMT
        Subject: CN=50C8C2401EA0E7E1C1CE0C535B6E7AD6455627C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:58:fa:0d:e6:f6:04:58:74:d4:6f:f1:75:
                    b2:c6:56:00:45:e7:89:3d:72:46:c9:40:e1:02:7b:
                    42:20:5f:5f:ea:67:63:eb:3b:bb:84:b9:57:08:27:
                    5f:88:b7:7c:13:35:04:59:80:15:a8:b9:48:17:1c:
                    ea:5f:ca:e4:28:17:4a:0d:d9:42:d4:c9:59:cb:e2:
                    dc:fa:5a:b3:f2:35:f8:de:ea:1a:bf:9d:6a:22:97:
                    48:ff:ef:1a:c9:d6:5d:78:a7:7c:5f:c8:97:4a:00:
                    72:be:08:e5:f8:6a:7c:c1:96:b2:88:7f:17:86:59:
                    69:4a:8a:8e:d9:50:1f:d1:9e:5b:e0:08:90:20:77:
                    ff:fe:0e:1b:40:c0:53:1e:22:e5:8e:f5:4e:d9:b1:
                    d6:e2:46:ba:56:34:a9:90:6d:85:fa:f3:81:e8:d8:
                    84:88:52:55:44:c7:59:77:92:ba:8d:4a:3d:f6:d2:
                    7c:a9:08:7c:93:53:4e:60:c3:22:88:48:61:a5:a9:
                    93:ad:12:d7:82:e9:87:df:a0:3d:2a:aa:55:95:12:
                    8c:a5:a3:8c:2a:bc:b9:fb:0e:2b:a1:16:06:9a:ef:
                    61:ca:d7:5c:6c:d3:53:46:e6:88:b4:f6:25:0c:d5:
                    16:ba:fc:56:b6:3e:5a:d2:03:3e:06:9b:df:3c:d7:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:C2:40:1E:A0:E7:E1:C1:CE:0C:53:5B:6E:7A:D6:45:56:27:C9
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135382e302f32332d3233203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:b5:ac:88:9d:02:53:ad:f6:24:65:a2:e3:63:90:a1:f7:
         01:5e:ca:3f:ce:9c:2c:6b:f7:57:cf:c4:61:bf:78:06:04:4b:
         6e:45:de:f1:fe:0c:b3:78:a3:5e:3c:6c:a3:e5:18:68:e8:75:
         d0:54:c7:17:cb:85:4f:2f:1c:eb:45:5e:70:46:96:78:a9:dc:
         c1:f4:5e:ac:7f:6b:91:36:94:1c:f1:52:87:0f:f6:0b:e9:68:
         f4:9d:ea:89:43:08:96:b9:6f:9b:16:fc:1d:18:7f:0d:65:58:
         f7:18:aa:35:ed:fb:1f:92:fa:3b:22:ea:29:90:b6:ce:7c:a6:
         77:a9:e3:04:46:44:48:e0:77:f6:91:72:42:b3:b7:0f:2a:57:
         57:24:93:b2:d2:86:31:f5:ac:e2:b0:fb:fe:4e:9e:12:ea:74:
         ec:17:c2:51:db:ab:8e:1f:37:3a:28:42:30:6c:1d:4c:1f:b2:
         44:5f:6b:7a:18:97:56:fa:2a:af:c9:49:fc:bd:42:d2:cc:1b:
         8d:d1:79:2f:d6:2a:95:82:01:a1:8a:4b:d4:b7:25:23:80:1b:
         62:68:d6:4e:23:b9:5b:23:5a:c8:91:f2:45:51:24:e1:91:24:
         3f:37:8f:4f:aa:ea:68:bc:b5:5b:9f:33:4e:61:8f:5d:d3:f8:
         7a:8c:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:30:14 2025 by rpki-client