Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3234203d3e20313938393439.roa
File:                     3230312e35352e3137362e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          UCPF9BHrVll4+GfqIuehwEpZwV+FS1XdlVzylJmOp/c=
Subject key identifier:   C8:87:C0:68:17:D8:02:B5:F7:8B:E4:D4:43:4E:C8:8A:88:4C:C8:5B
Certificate issuer:       /CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
Certificate serial:       2E4B243BE80ED948F3A7F0D321C0AC103253B9EB
Authority key identifier: 18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3234203d3e20313938393439.roa
Signing time:             Thu 11 Sep 2025 14:28:48 +0000
ROA not before:           Thu 11 Sep 2025 14:23:48 +0000
ROA not after:            Thu 10 Sep 2026 14:28:48 +0000
asID:                     198949
IP address blocks:        201.55.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl
                          rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4b:24:3b:e8:0e:d9:48:f3:a7:f0:d3:21:c0:ac:10:32:53:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B
        Validity
            Not Before: Sep 11 14:23:48 2025 GMT
            Not After : Sep 10 14:28:48 2026 GMT
        Subject: CN=C887C06817D802B5F78BE4D4434EC88A884CC85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:a6:27:b1:10:fa:3b:a2:df:c2:6c:ca:bf:
                    6b:b7:6f:06:ab:ac:8a:c6:06:98:37:93:3e:27:0d:
                    38:cf:4c:12:3f:a6:83:67:2e:31:5f:f2:5b:89:31:
                    5f:6a:d3:52:8f:d8:08:be:db:29:b7:bd:fb:33:2b:
                    bd:62:3f:cc:32:ca:42:59:23:fa:29:50:43:50:ce:
                    8e:02:0c:80:21:48:1e:82:64:aa:6b:2b:e9:bc:61:
                    be:99:95:4c:62:a9:41:d5:c8:9b:ae:9c:fe:67:7d:
                    14:0f:82:80:be:42:ba:85:ae:0f:7b:d7:7c:7b:5f:
                    59:55:55:eb:da:80:b4:f5:63:53:ea:b9:60:e8:a9:
                    66:96:a6:e3:a3:7e:0f:a2:d3:77:10:22:3c:6a:bb:
                    55:55:22:6d:63:fe:71:19:27:70:8d:0f:84:20:2a:
                    15:d1:d4:e0:ec:87:25:a7:5d:76:10:de:05:cd:f8:
                    d5:89:a0:64:59:6f:42:ce:77:57:35:fe:e4:5f:37:
                    54:9b:4f:c8:d2:5f:06:b4:7e:44:30:ac:5d:34:0f:
                    ca:0d:f0:9c:a4:97:ae:62:4e:38:60:cc:51:64:a4:
                    97:e7:fb:f2:f6:35:ad:06:f3:ad:4a:43:46:06:ca:
                    9d:38:ad:79:8a:60:0c:86:b0:dd:9c:a4:c7:3b:ac:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:87:C0:68:17:D8:02:B5:F7:8B:E4:D4:43:4E:C8:8A:88:4C:C8:5B
            X509v3 Authority Key Identifier:
                keyid:18:EC:B5:AE:B5:0F:51:D6:D9:3C:7B:F4:92:29:D6:9F:DC:AE:21:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18ECB5AEB50F51D6D93C7BF49229D69FDCAE216B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAQrAB2XjaTUSqiFjx2yZpuxEsePpdR7KUhyxdsTSA8p/0/3230312e35352e3137362e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:50:e0:a7:45:83:21:2a:9a:b8:78:19:a9:40:fb:26:59:
         9a:f4:33:01:cb:97:34:dd:39:bf:e6:37:cf:d7:02:c0:f1:85:
         88:d2:48:13:c7:9c:b2:f6:93:30:d9:24:cb:ae:51:ee:d5:46:
         07:23:41:0d:c7:a3:1e:dc:b4:f0:42:0a:a3:74:f5:a5:c0:c0:
         3e:a4:5e:ec:ca:e5:ae:f8:a1:d8:89:d6:cf:48:4f:5d:e7:ef:
         d6:1c:b6:4a:12:3b:49:4b:96:e7:ab:d6:9a:36:f6:93:65:1a:
         41:24:7f:49:28:7f:42:b5:04:1c:44:a1:55:17:be:ca:4e:ac:
         73:6c:19:a8:3a:c0:81:8f:1e:67:f4:20:dc:64:94:98:82:8c:
         ad:c7:c2:64:77:3d:ef:44:6f:3f:c1:01:13:59:63:94:18:20:
         38:a2:af:09:3f:d4:77:ae:4f:7d:2e:ff:d9:a0:dc:dc:d2:67:
         c5:7e:04:db:fb:89:29:a2:c5:21:58:49:d0:4f:a5:8d:32:8a:
         5d:0b:4e:a2:7d:ba:17:7c:7d:23:18:ad:51:77:24:91:da:ab:
         f8:e5:bc:07:b1:c8:42:93:4e:35:6a:40:2c:20:97:e1:a3:98:
         f2:f7:d6:ec:67:5b:60:43:f7:8b:b4:8b:3f:f8:6d:11:e9:6d:
         27:b9:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:25:18 2025 by rpki-client