Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          /Bqgdv/wF+ru9WBmwhXO8Kmck4O1wcfAaIl22CcZyRo=
Subject key identifier:   31:83:7E:5B:98:60:10:DB:83:9C:DD:6C:6B:D1:74:19:C6:B1:C3:AF
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       7E4BC38D6A07FC36F173D1596A03D5D27E069FB6
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa
Signing time:             Wed 12 Feb 2025 12:59:52 +0000
ROA not before:           Wed 12 Feb 2025 12:54:52 +0000
ROA not after:            Wed 11 Feb 2026 12:59:52 +0000
asID:                     264886
IP address blocks:        201.49.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4b:c3:8d:6a:07:fc:36:f1:73:d1:59:6a:03:d5:d2:7e:06:9f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Feb 12 12:54:52 2025 GMT
            Not After : Feb 11 12:59:52 2026 GMT
        Subject: CN=31837E5B986010DB839CDD6C6BD17419C6B1C3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:1a:88:58:2a:3a:93:a3:82:35:ff:2a:0e:
                    7e:64:df:92:3c:1d:12:50:f5:d4:16:cb:00:7a:a0:
                    48:9f:7d:ed:5e:fc:06:81:f2:47:a7:ab:dd:3b:e4:
                    70:e2:7e:b4:72:6b:19:67:f3:d5:7e:77:49:4f:e8:
                    fe:c0:81:07:b1:5f:3c:b5:10:6d:56:20:60:68:af:
                    f3:00:25:23:be:f5:c6:59:c2:5a:03:f6:65:cf:2c:
                    bb:7e:4b:b2:ef:41:b7:c5:1a:8b:41:fb:77:0a:c1:
                    2a:f2:d4:55:f5:39:df:64:94:65:c2:14:69:19:83:
                    e6:c1:27:ba:c8:ee:98:52:89:64:27:b1:05:36:90:
                    b5:73:82:65:0f:a5:cc:e6:34:dd:75:8e:43:f5:cc:
                    6d:91:73:41:fd:a9:1e:75:49:4f:ad:e7:3f:ea:23:
                    7c:c2:bf:6b:ac:a1:f3:c6:81:99:98:b1:eb:e9:d7:
                    70:52:e0:3c:f1:23:96:33:16:8a:72:34:a1:84:eb:
                    fe:eb:dc:78:ac:a2:46:66:80:9b:78:06:a3:7a:18:
                    e1:97:2b:19:91:7d:63:24:62:27:1f:4f:6d:c8:dd:
                    77:27:35:6a:63:6d:4a:04:14:79:4e:f0:82:04:03:
                    ee:79:c8:55:aa:e7:80:00:93:ce:25:50:07:07:dd:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:7E:5B:98:60:10:DB:83:9C:DD:6C:6B:D1:74:19:C6:B1:C3:AF
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232362e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:20:64:fd:30:89:cf:01:34:d3:e0:d8:9a:8b:37:26:51:0a:
         88:fa:54:a0:ca:5a:ba:58:91:d6:f3:a5:9a:d1:f6:d0:08:a9:
         7c:84:d9:54:9a:16:47:a9:6c:0c:47:57:6e:a1:3e:b7:a5:33:
         73:67:4d:29:6b:95:54:ed:6f:e0:5f:95:ba:21:9b:4b:41:1d:
         d5:44:f2:e2:6a:c1:3b:a2:45:90:c3:61:89:45:09:06:a5:7b:
         49:eb:c1:9d:ef:8b:22:d7:0f:26:62:28:6b:0a:86:1d:8a:e8:
         b0:9c:5e:54:ee:a0:76:52:6b:23:cc:89:de:c2:2d:2b:3f:fa:
         ce:23:1a:32:d2:f7:ac:c3:5a:bc:43:28:e6:aa:14:ee:63:00:
         ad:f1:10:45:c0:43:18:7b:32:e7:40:db:34:19:18:06:92:8b:
         03:26:f0:c5:37:6b:d2:48:c2:26:3f:53:41:b8:11:87:94:e9:
         c4:0d:15:92:63:d0:52:cd:a7:6d:67:f3:d0:dc:04:48:61:de:
         51:50:41:3f:73:51:7c:fd:b2:73:75:cd:df:82:af:5b:b2:fa:
         73:1f:0f:a0:d0:6a:31:13:b9:5e:c9:78:d4:d1:da:e1:7d:92:
         1c:34:39:e4:48:3a:0a:f9:24:fa:0f:d2:bb:ef:26:93:53:d4:
         0b:1d:d0:5c
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUfkvDjWoH/Dbxc9FZagPV0n4Gn7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTAyMTIxMjU0NTJaFw0yNjAyMTExMjU5NTJaMDMxMTAvBgNV
BAMTKDMxODM3RTVCOTg2MDEwREI4MzlDREQ2QzZCRDE3NDE5QzZCMUMzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIRqIWCo6k6OCNf8qDn5k35I8
HRJQ9dQWywB6oEiffe1e/AaB8kenq9075HDifrRyaxln89V+d0lP6P7AgQexXzy1
EG1WIGBor/MAJSO+9cZZwloD9mXPLLt+S7LvQbfFGotB+3cKwSry1FX1Od9klGXC
FGkZg+bBJ7rI7phSiWQnsQU2kLVzgmUPpczmNN11jkP1zG2Rc0H9qR51SU+t5z/q
I3zCv2usofPGgZmYsevp13BS4DzxI5YzFopyNKGE6/7r3HisokZmgJt4BqN6GOGX
KxmRfWMkYicfT23I3XcnNWpjbUoEFHlO8IIEA+55yFWq54AAk84lUAcH3Vt1AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUMYN+W5hgENuDnN1sa9F0Gcaxw68wHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADJMeIwDQYJKoZIhvcNAQELBQADggEBADAgZP0wic8B
NNPg2JqLNyZRCoj6VKDKWrpYkdbzpZrR9tAIqXyE2VSaFkepbAxHV26hPrelM3Nn
TSlrlVTtb+Bflbohm0tBHdVE8uJqwTuiRZDDYYlFCQale0nrwZ3viyLXDyZiKGsK
hh2K6LCcXlTuoHZSayPMid7CLSs/+s4jGjLS96zDWrxDKOaqFO5jAK3xEEXAQxh7
MudA2zQZGAaSiwMm8MU3a9JIwiY/U0G4EYeU6cQNFZJj0FLNp21n89DcBEhh3lFQ
QT9zUXz9snN1zd+Cr1uy+nMfD6DQajETuV7JeNTR2uF9khw0OeRIOgr5JPoP0rvv
JpNT1Asd0Fw=
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:48:43 2025 by rpki-client