Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa
File:                     3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          tradz2yxIDY28Khqra+ZJ//eQ8sN7qA+4RHq/OBl+x8=
Subject key identifier:   E6:2E:F9:95:BB:A3:D5:08:6C:41:D4:DF:0F:1D:5C:04:E5:42:A4:7E
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       4A4802ED5BBBB54A7748D9FBAB199D68C27C5864
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa
Signing time:             Fri 28 Mar 2025 01:43:03 +0000
ROA not before:           Fri 28 Mar 2025 01:38:03 +0000
ROA not after:            Fri 27 Mar 2026 01:43:03 +0000
asID:                     262875
IP address blocks:        181.233.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:48:02:ed:5b:bb:b5:4a:77:48:d9:fb:ab:19:9d:68:c2:7c:58:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Mar 28 01:38:03 2025 GMT
            Not After : Mar 27 01:43:03 2026 GMT
        Subject: CN=E62EF995BBA3D5086C41D4DF0F1D5C04E542A47E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:bc:a4:2b:2d:33:fd:d7:87:31:a1:f0:9b:
                    41:12:bd:3a:2a:da:a4:a6:5f:98:64:5d:64:33:d5:
                    b8:ad:d8:fb:45:b8:48:db:c4:0f:87:8c:20:7c:b7:
                    e3:9a:d6:77:6a:a6:4c:42:b4:b4:af:df:b5:6b:4b:
                    03:7d:de:4e:df:c5:39:08:46:83:c5:6d:e7:18:64:
                    71:dc:ba:75:fa:98:46:9d:2a:01:9c:69:10:55:ab:
                    96:54:4e:ce:de:81:7a:4f:30:f6:e2:6e:1a:80:ed:
                    35:d9:bf:4a:25:80:8a:ba:b4:08:55:0c:57:ee:b8:
                    d5:39:ce:74:b1:d0:99:d4:1d:41:f0:b3:26:bf:f3:
                    6e:21:37:25:bb:17:50:37:c9:dd:af:06:e5:42:d1:
                    d3:46:19:82:7c:60:e0:0b:b8:b5:f1:b5:45:11:3f:
                    7f:9c:46:b6:c2:e7:23:4a:cf:fd:66:7a:b8:6e:54:
                    e9:8c:40:4e:4e:bd:7e:14:d1:84:82:34:b0:14:31:
                    b7:47:95:a2:ac:bf:d6:6f:5b:fb:d7:02:6c:3f:6d:
                    64:35:33:cc:2e:ee:12:65:ae:a0:a8:b0:df:44:65:
                    79:4b:37:b5:be:91:5c:0e:7d:7c:a7:e1:9d:fd:cb:
                    36:c4:5f:8c:32:0c:b1:23:27:67:71:af:60:97:4c:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:F9:95:BB:A3:D5:08:6C:41:D4:DF:0F:1D:5C:04:E5:42:A4:7E
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c9:84:8e:7b:8c:27:50:e1:75:29:df:ff:a9:7f:b5:3f:eb:
         fc:87:8c:f0:50:5a:55:4e:24:d4:66:fe:6d:81:5e:ed:8a:32:
         2a:92:aa:f0:3a:61:0c:7e:b5:90:58:92:3f:7d:cf:c7:b3:9d:
         12:34:41:4c:d6:f6:46:90:cd:42:01:bd:c2:73:18:9e:5d:c5:
         ae:0c:71:6e:aa:4c:b6:9e:56:16:0d:f2:0c:f4:9f:e5:2c:41:
         41:3c:c9:1b:a0:98:ca:42:3c:a2:c9:ee:ce:15:8c:1c:7f:be:
         ea:52:30:f3:81:bd:55:19:0e:64:a8:80:df:de:98:1a:7e:c9:
         fd:a2:00:ef:5e:49:ab:b6:49:e2:a6:cc:64:b5:ac:85:b4:4e:
         72:9c:fe:34:8b:7a:98:00:d6:60:81:45:8f:ec:d4:b0:e4:3b:
         df:dc:d3:8f:32:41:3e:3d:d1:99:8e:20:62:22:64:5a:c3:f3:
         1b:0a:1c:b0:20:0d:96:95:1c:67:08:fd:b8:cf:30:c3:62:f4:
         60:68:2c:62:d2:55:56:fc:20:11:99:cc:e8:ca:49:5a:bf:f3:
         f8:34:8f:b0:9f:fa:b5:9c:8d:78:4d:16:e6:e3:5a:52:d2:c1:
         b3:4b:0a:5b:61:36:08:ef:cf:a9:52:74:ee:6e:2b:26:4c:28:
         cc:fe:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:48:08 2025 by rpki-client