Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33342e302f32332d3233203d3e20323632383735.roa
File:                     3138312e3233332e33342e302f32332d3233203d3e20323632383735.roa (raw, json)
Hash identifier:          JrEJF7ONPBagIXfb7qmt4VnzSlCYu+5QCO1fvHWvpL0=
Subject key identifier:   EE:08:4A:5D:E2:D9:71:DE:BC:2B:69:66:2B:F7:AE:C9:41:7E:7D:DF
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       2CD32CB897C364D09E17B69125B38D7FAA08F15E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33342e302f32332d3233203d3e20323632383735.roa
Signing time:             Fri 28 Mar 2025 01:42:25 +0000
ROA not before:           Fri 28 Mar 2025 01:37:25 +0000
ROA not after:            Fri 27 Mar 2026 01:42:25 +0000
asID:                     262875
IP address blocks:        181.233.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 07:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d3:2c:b8:97:c3:64:d0:9e:17:b6:91:25:b3:8d:7f:aa:08:f1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Mar 28 01:37:25 2025 GMT
            Not After : Mar 27 01:42:25 2026 GMT
        Subject: CN=EE084A5DE2D971DEBC2B69662BF7AEC9417E7DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:50:d6:fa:ac:95:b9:54:2b:bc:87:97:2a:
                    37:a8:bc:ea:a7:fc:6e:a3:64:a7:45:ca:71:bd:fc:
                    56:a5:20:ef:69:1b:34:b7:e4:b0:25:91:f4:1f:41:
                    78:10:f0:78:18:5f:bc:b4:43:ba:5d:c0:e2:70:30:
                    20:d6:9d:e4:d2:25:a8:58:ab:7d:01:c3:3b:8c:7e:
                    0a:ae:38:d8:ab:97:b8:f0:f6:dd:47:2f:28:be:7a:
                    ac:c2:61:e6:42:34:4f:88:b3:0b:d9:90:a9:b8:06:
                    64:4b:75:6f:69:50:d7:89:03:a3:9b:67:f4:6b:5f:
                    fa:59:71:fe:9f:6c:a9:31:44:39:92:7f:69:67:f8:
                    e4:db:ab:14:65:93:2e:1e:f7:fe:1d:cb:6a:68:34:
                    94:9a:94:b6:db:23:67:16:0b:57:28:1f:5f:97:d9:
                    e6:a6:02:07:b2:4f:63:6f:ac:5a:dd:60:4e:7a:48:
                    53:a4:dc:ba:83:aa:9f:b5:96:35:9f:54:e1:47:09:
                    bc:55:4c:20:a7:f0:50:e4:35:21:ca:f8:13:38:18:
                    08:f6:45:82:da:dd:a1:55:64:74:9d:32:da:7b:3c:
                    42:2f:dc:fb:e8:d7:f4:db:25:d0:bd:5c:4d:71:f4:
                    60:14:31:ee:bd:ca:17:9e:9d:24:45:e4:ea:c2:e7:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:4A:5D:E2:D9:71:DE:BC:2B:69:66:2B:F7:AE:C9:41:7E:7D:DF
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33342e302f32332d3233203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:a4:59:c8:60:0e:39:a2:60:c4:c7:20:a9:13:39:6a:19:
         76:46:8c:00:94:65:33:9b:84:03:50:b6:c4:81:4c:f3:51:df:
         84:34:79:3a:e6:86:4a:a9:40:3a:ac:45:1f:61:e9:2f:7c:2f:
         57:56:08:e3:5c:43:54:a6:23:37:5e:00:9d:3d:06:65:16:07:
         6f:9b:f4:72:b2:45:b7:c6:a8:1f:a2:0b:7a:db:ce:c3:4e:75:
         12:79:5d:2a:7d:fa:6b:36:c4:96:b7:87:a9:cb:e0:b9:83:4f:
         21:e5:f9:a3:94:c4:d8:9a:ba:67:79:52:29:d3:84:d4:2f:cf:
         d1:c3:ec:0c:04:6d:77:26:37:d8:49:c4:e1:ee:01:1f:ef:e6:
         a9:c6:c2:f3:bf:d5:46:c4:81:55:c3:06:81:05:59:e0:24:a9:
         6e:34:a6:40:37:3b:ba:b6:b2:d5:cd:7b:71:d3:03:76:fc:41:
         92:68:31:3d:3c:9d:cf:2c:0c:96:bc:62:2e:c5:f8:ab:9d:62:
         bc:38:0d:2e:f0:5a:f8:54:70:d4:f9:5a:b2:5c:3b:1a:ba:bb:
         c8:fb:0d:ba:2e:58:e8:23:7f:ad:e5:2c:a8:5f:80:3e:7f:60:
         30:87:a8:d0:72:75:5f:3c:ee:fa:50:13:8f:d2:c3:57:00:e0:
         e3:c3:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:34 2025 by rpki-client