Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/3138372e34392e34382e302f32302d3332203d3e20323632383036.roa
File:                     3138372e34392e34382e302f32302d3332203d3e20323632383036.roa (raw, json)
Hash identifier:          fVIik2ZJzZ5SQUTJ53a2NrCPIoQmH9vScx86Lz6FffU=
Subject key identifier:   8C:4C:B9:B5:F1:F5:07:05:BC:DE:3C:DB:B8:6C:07:02:BC:39:70:8F
Certificate issuer:       /CN=6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D
Certificate serial:       27D989AD7D6FB2F94CF8C56891147421EFA40EB9
Authority key identifier: 6D:53:5D:3D:BE:BD:56:60:B3:82:C0:18:BB:4E:BD:1C:E7:EF:10:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/3138372e34392e34382e302f32302d3332203d3e20323632383036.roa
Signing time:             Wed 30 Apr 2025 02:15:26 +0000
ROA not before:           Wed 30 Apr 2025 02:10:26 +0000
ROA not after:            Wed 29 Apr 2026 02:15:26 +0000
asID:                     262806
IP address blocks:        187.49.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.crl
                          rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 21:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:89:ad:7d:6f:b2:f9:4c:f8:c5:68:91:14:74:21:ef:a4:0e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D
        Validity
            Not Before: Apr 30 02:10:26 2025 GMT
            Not After : Apr 29 02:15:26 2026 GMT
        Subject: CN=8C4CB9B5F1F50705BCDE3CDBB86C0702BC39708F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:c5:c3:8f:47:3b:0c:c2:ac:98:70:82:26:
                    a2:da:37:c1:09:73:46:b6:2a:63:a8:d8:4b:14:d6:
                    e0:dc:7a:ff:eb:43:38:0e:70:54:27:87:0a:9d:7e:
                    6d:d1:8e:3d:93:00:65:ae:c7:3b:1b:c4:7a:7e:52:
                    3b:cd:7a:b1:b1:f0:d0:8e:74:2e:9a:c5:a5:12:75:
                    9e:e9:7c:49:8e:11:34:9d:84:f5:90:1b:a2:12:79:
                    09:66:2e:a8:c7:30:8c:d9:c4:3a:2d:29:ea:6a:a2:
                    d3:b3:b3:ca:ce:87:d1:bd:b8:e5:fa:65:86:c4:4b:
                    e6:6d:73:64:b9:42:9c:c8:c9:5e:d2:b3:ec:ce:3d:
                    67:fa:3f:4a:14:75:58:4f:e7:57:ad:47:e7:72:06:
                    62:05:d8:f6:1d:3f:e5:c0:e1:2e:4e:23:ba:ba:09:
                    d7:6f:a0:a9:fa:79:18:1a:25:95:06:a1:f2:de:05:
                    36:f0:7c:36:30:58:52:36:c2:c3:91:9e:0e:cc:e1:
                    af:ad:97:8d:19:41:7d:1e:7b:01:9b:df:aa:14:43:
                    ef:ac:f4:b6:2e:71:55:a5:2a:48:a2:f3:57:1d:9a:
                    26:32:04:77:9a:02:30:de:14:c6:0d:fb:e3:6c:47:
                    ed:ed:7d:2f:33:bf:6c:40:5e:bb:36:7e:35:96:cd:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:B9:B5:F1:F5:07:05:BC:DE:3C:DB:B8:6C:07:02:BC:39:70:8F
            X509v3 Authority Key Identifier:
                keyid:6D:53:5D:3D:BE:BD:56:60:B3:82:C0:18:BB:4E:BD:1C:E7:EF:10:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/3138372e34392e34382e302f32302d3332203d3e20323632383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:85:01:84:60:cd:59:74:f7:a7:89:d9:49:c2:81:d3:61:
         56:d8:d2:06:9b:50:0f:0e:89:43:58:3a:b0:68:0a:5a:70:3a:
         b8:c3:6d:14:83:6d:e5:81:a3:1f:99:f9:48:c3:c6:59:73:32:
         11:93:15:8a:9e:e9:25:3c:39:39:75:c9:3a:ee:a7:20:09:84:
         ad:35:65:7f:a7:24:35:b5:5d:43:5f:d4:f4:ad:4a:30:bd:42:
         31:d5:d4:7b:69:94:41:ce:31:ce:04:bd:eb:01:17:6f:3c:c2:
         21:a8:db:ef:86:91:05:66:fd:26:98:b6:cd:76:d1:ca:25:25:
         32:0f:01:99:30:2f:00:54:db:f5:cf:b7:43:c5:9a:fb:0f:61:
         59:4a:12:04:d5:1f:c2:d9:13:4f:50:54:b6:8b:0c:26:3f:e3:
         51:18:5e:fd:eb:d4:2f:2a:f1:f4:69:32:6c:3a:99:5d:f3:2c:
         59:39:21:95:89:24:49:13:0d:af:6a:a2:a1:d4:06:fd:70:e9:
         a9:af:01:a3:29:49:30:aa:25:a1:9c:7e:76:ae:76:65:2f:f5:
         65:ff:40:39:5b:a3:b3:7f:2f:33:58:8d:c8:e1:0d:2b:e0:5e:
         11:65:fe:a8:3d:a8:a5:b2:73:c2:8d:d5:24:82:a9:52:95:40:
         88:ee:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:27:15 2025 by rpki-client