Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
File:                     3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (raw, json)
Hash identifier:          5pdbPp9zg8h2O6jC8T9MSMaGCT/Tc07PijToqB39kio=
Subject key identifier:   60:68:5D:E0:99:F1:43:1E:8F:14:5A:E6:B5:AD:6D:23:18:81:6F:57
Certificate issuer:       /CN=790C9628ED14224C863D38B11F70DADA38D3E260
Certificate serial:       2CB92A101FD3B654A446F5E6BF3B87D4974839B6
Authority key identifier: 79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
Signing time:             Tue 29 Jul 2025 17:08:13 +0000
ROA not before:           Tue 29 Jul 2025 17:03:13 +0000
ROA not after:            Tue 28 Jul 2026 17:08:13 +0000
asID:                     267517
IP address blocks:        201.182.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl
                          rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 05:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b9:2a:10:1f:d3:b6:54:a4:46:f5:e6:bf:3b:87:d4:97:48:39:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790C9628ED14224C863D38B11F70DADA38D3E260
        Validity
            Not Before: Jul 29 17:03:13 2025 GMT
            Not After : Jul 28 17:08:13 2026 GMT
        Subject: CN=60685DE099F1431E8F145AE6B5AD6D2318816F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:09:37:74:a0:59:de:30:fa:7e:85:e7:db:
                    bf:99:40:9f:b3:2c:5e:9f:c9:78:6c:cb:5d:3c:df:
                    88:7a:ae:34:31:bd:9b:a8:7a:22:b2:3d:6f:83:6a:
                    6a:80:a4:9d:29:ec:e5:66:30:c0:64:4d:97:68:08:
                    e8:71:31:19:81:a3:89:c3:0e:0c:c1:75:4c:cc:f9:
                    58:74:59:58:8d:80:04:77:33:b6:8f:8a:19:19:4f:
                    58:e5:4a:49:c4:17:b3:b3:fa:2a:7b:25:ad:03:2d:
                    32:49:67:70:e8:84:19:b8:67:db:7b:e3:6a:b9:b6:
                    bf:3b:1f:a3:ba:84:e0:2b:c6:30:c9:e9:60:cc:bd:
                    16:f9:5a:df:09:d7:ac:e4:cc:07:fb:42:9e:86:5f:
                    04:af:03:20:13:73:3b:69:84:11:8c:f6:06:b8:f0:
                    e1:55:ea:9f:5f:9b:41:55:bb:41:f4:55:33:a6:8c:
                    2a:5b:94:eb:be:ce:5f:46:60:27:5b:b3:a1:df:27:
                    e5:5d:9d:00:8c:c6:e8:d0:e6:b1:65:05:06:05:f4:
                    9c:ad:51:2e:3a:72:d1:65:b2:1b:05:3f:20:4c:75:
                    e0:7b:df:0e:4a:7f:6c:0a:93:3f:c1:20:02:4d:1d:
                    af:8e:54:ca:ac:15:6f:d0:71:37:36:e7:10:1f:51:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:5D:E0:99:F1:43:1E:8F:14:5A:E6:B5:AD:6D:23:18:81:6F:57
            X509v3 Authority Key Identifier:
                keyid:79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:36:31:0d:38:96:02:d2:42:c1:bf:8e:6c:61:01:60:99:
         fb:11:53:c8:62:59:b9:34:d5:cd:e9:f5:e5:cd:33:33:f6:fd:
         26:c6:2a:a7:10:9b:26:3b:12:86:6c:67:71:33:e3:c1:97:3e:
         bf:db:3d:b8:f4:2f:14:37:7b:e6:b7:a3:76:d4:b7:db:27:e9:
         63:5f:ce:07:0b:d1:09:b2:38:3a:52:db:15:d3:41:80:ef:76:
         af:fd:d2:f2:33:c6:1e:0d:4b:e7:47:de:03:16:d7:b4:93:a4:
         f3:06:5c:79:21:25:21:6c:86:b1:9b:ab:3d:60:31:e4:be:73:
         e0:13:be:9b:d8:38:7f:5c:1a:90:b1:e3:d7:5e:a8:f3:f6:98:
         e9:f1:81:65:39:3d:f3:7d:cf:e6:81:74:57:73:2e:bb:97:3f:
         a6:af:05:ca:70:04:f3:74:0f:69:20:d1:3f:85:02:54:c0:cc:
         19:bf:54:4c:f5:cf:4b:12:6c:ca:45:c9:6c:8d:b3:dd:82:6a:
         06:66:fe:12:c3:25:29:0d:55:cd:e5:c1:de:f6:56:02:77:02:
         18:08:44:43:3b:49:d2:df:e1:5c:d2:7f:b0:17:9d:6b:3e:15:
         41:60:1b:27:c0:ad:03:21:1b:05:3b:15:d5:9b:7e:ae:ca:8f:
         de:a6:80:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:58 2025 by rpki-client