Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa
File:                     3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa (raw, json)
Hash identifier:          mF0u/vAyNOeoPPNVDLbnxzMdhqwwSdgGBBg/m8ai89U=
Subject key identifier:   EF:13:CF:8B:7F:89:96:39:0F:31:8C:E9:3A:1D:10:BB:8E:10:3A:E8
Certificate issuer:       /CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
Certificate serial:       3400F45FB4331830D0C14B82ABBA212D1F1B919E
Authority key identifier: 40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa
Signing time:             Thu 06 Mar 2025 10:55:31 +0000
ROA not before:           Thu 06 Mar 2025 10:50:31 +0000
ROA not after:            Thu 05 Mar 2026 10:55:31 +0000
asID:                     267499
IP address blocks:        201.182.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl
                          rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:f4:5f:b4:33:18:30:d0:c1:4b:82:ab:ba:21:2d:1f:1b:91:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD
        Validity
            Not Before: Mar  6 10:50:31 2025 GMT
            Not After : Mar  5 10:55:31 2026 GMT
        Subject: CN=EF13CF8B7F8996390F318CE93A1D10BB8E103AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:19:df:0d:ad:e9:e7:84:52:86:15:80:9b:
                    3e:78:67:b5:ce:38:4b:72:6e:09:ac:9e:50:c0:73:
                    87:44:05:96:ed:92:37:fe:7c:3b:fa:ec:c5:69:6e:
                    c6:10:1a:fc:7b:05:83:de:42:1a:3d:20:79:ee:46:
                    f0:20:bb:39:3e:d1:84:a5:af:6c:31:16:7a:84:a3:
                    c2:7e:62:f2:3f:bf:10:ca:85:a5:af:6c:78:09:2a:
                    13:b1:40:81:ec:24:74:fb:ff:ac:cc:0a:52:4e:71:
                    3e:bc:99:a5:59:13:e1:c0:5b:52:9b:62:8a:d1:48:
                    6d:e1:46:5e:2d:1a:cd:e6:c4:b0:d5:7f:a8:d0:92:
                    a1:6a:f1:dd:59:9a:73:2b:f7:5d:91:b6:18:96:c0:
                    56:22:bf:42:05:25:4b:bd:e4:dc:f3:17:0e:f8:37:
                    db:ca:00:93:8d:d4:2a:40:92:b5:b9:98:2b:49:ba:
                    5d:6f:70:19:27:a0:38:a2:b2:3d:32:ac:bd:8e:39:
                    39:96:39:04:cb:df:d9:68:82:74:d1:11:b2:0d:01:
                    e2:66:2e:fe:7d:28:a5:98:6f:97:70:64:da:a5:ae:
                    8b:e8:4e:de:9e:8c:70:8f:c8:bc:76:33:ae:0a:af:
                    f8:6e:2d:5f:a1:cf:e1:9e:f2:8c:63:0f:ad:b7:aa:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:CF:8B:7F:89:96:39:0F:31:8C:E9:3A:1D:10:BB:8E:10:3A:E8
            X509v3 Authority Key Identifier:
                keyid:40:CA:A2:BC:57:B3:3D:FB:E5:5B:3E:B4:EA:58:A7:E9:A1:71:55:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40CAA2BC57B33DFBE55B3EB4EA58A7E9A17155DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4ZhiaRkX89dbDVqHMG3uuk3sZC755ug1Wp7R1LQpUJg/1/3230312e3138322e35362e302f32322d3234203d3e20323637343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:ae:c7:0f:de:0a:72:3a:f6:cf:70:df:20:5a:93:1d:08:
         a6:f1:ed:ea:bf:fc:0b:62:f6:41:ed:d3:8f:5a:0d:91:1c:df:
         1c:ed:1f:b4:c0:2c:39:c0:01:bc:2a:c0:c0:b4:ca:eb:db:e7:
         08:33:e4:34:42:df:99:38:69:ca:a6:0a:08:56:c0:a0:fb:90:
         43:46:9b:a3:ad:f6:06:68:36:70:27:1c:c0:e6:5f:3a:04:eb:
         72:52:45:b5:b4:63:02:45:ef:4d:29:2b:9f:59:81:ab:8d:27:
         b7:01:62:1e:00:72:aa:90:06:01:57:71:13:c9:b8:fb:e6:62:
         30:75:8c:68:03:fc:cd:79:04:ef:70:fd:d6:89:ba:a9:a6:ae:
         5e:27:e8:2f:36:78:6c:4f:4e:a0:c8:89:d3:e7:a4:46:95:36:
         94:81:d4:f2:7d:eb:86:d0:94:15:5b:d8:99:16:d4:35:d8:e2:
         1d:bb:9a:45:f3:c7:69:79:14:57:35:7d:2b:7c:2e:b4:25:9b:
         1e:c8:0f:85:d1:35:1d:a1:90:65:73:27:ae:e3:64:d1:5d:55:
         89:3d:03:6c:72:fe:b1:fa:07:74:e5:da:ea:db:85:e8:91:76:
         63:ae:be:50:5e:f6:40:7c:ae:f4:ee:e6:cf:3a:59:c1:f0:d1:
         a9:63:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:21:14 2025 by rpki-client