Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          lOOufcc68Zfo8VViq/7UL382zQ60cWj8DHEfrIZAxd8=
Subject key identifier:   B9:72:89:15:B1:54:BC:BB:09:2F:9E:2E:4E:80:A3:FF:15:C5:CA:77
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       5CC8F21217C4E7C25830493F0C9FDC1B8D260283
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:02 +0000
ROA not before:           Fri 27 Jun 2025 20:34:02 +0000
ROA not after:            Fri 26 Jun 2026 20:39:02 +0000
asID:                     28589
IP address blocks:        200.152.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:f2:12:17:c4:e7:c2:58:30:49:3f:0c:9f:dc:1b:8d:26:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:02 2025 GMT
            Not After : Jun 26 20:39:02 2026 GMT
        Subject: CN=B9728915B154BCBB092F9E2E4E80A3FF15C5CA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:ac:6e:c3:45:0e:87:3d:d7:83:31:1c:76:
                    f2:36:ff:84:3b:c3:b5:b2:69:1f:5c:02:93:cb:ee:
                    94:14:7b:8d:47:a9:c4:60:06:09:6e:10:5e:e1:5e:
                    8d:32:18:f5:93:4a:28:78:49:16:94:de:5b:0a:7e:
                    16:9c:e8:da:38:c7:a6:3c:9a:2f:16:eb:e8:cf:f4:
                    9b:0c:33:29:40:23:f8:4b:21:29:5b:cf:5e:e6:60:
                    18:54:df:d0:23:fe:3e:83:de:ef:e0:c2:38:16:90:
                    77:91:52:cc:bd:e9:a2:c8:f5:3c:8d:04:3b:05:5f:
                    5b:86:bc:a2:b9:24:3e:b2:e7:ff:79:3f:5f:78:05:
                    4b:a9:06:77:82:6d:9f:88:dd:18:10:45:30:40:dc:
                    44:5a:74:d1:eb:72:d2:c4:ef:a3:a2:06:42:7b:25:
                    9c:45:7f:7e:5d:7d:89:7c:8d:4b:be:11:83:cc:8d:
                    af:5c:b3:b8:06:2d:2e:ba:7a:04:d2:5f:89:35:63:
                    52:2f:9f:ea:76:97:d7:9a:1c:03:b6:c0:1b:e0:f3:
                    8f:14:a2:16:11:f2:54:53:3a:73:35:54:68:1e:88:
                    39:43:4e:94:55:40:37:02:06:59:b5:ae:52:e0:c3:
                    67:17:31:bd:d2:33:96:bb:2f:de:d7:4c:b4:24:4b:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:72:89:15:B1:54:BC:BB:09:2F:9E:2E:4E:80:A3:FF:15:C5:CA:77
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d6:35:aa:ad:23:bc:08:e9:f8:5b:cb:87:69:e7:8e:e6:13:
         9a:8a:5a:48:70:b4:59:94:c4:6f:91:70:51:dc:6f:58:20:fe:
         a5:76:a1:53:43:3f:c6:4f:00:09:8b:e5:4d:8a:fc:1a:91:47:
         4f:54:54:89:e2:81:3e:31:3c:58:f5:95:11:eb:c0:f0:a1:d0:
         ac:d4:4b:cc:02:eb:a9:64:ba:7e:35:40:09:e6:93:80:e8:e5:
         e0:21:6b:1a:be:16:0e:cb:5e:05:85:f3:10:e5:39:f8:f1:9c:
         cc:f6:c8:df:22:6a:fc:3f:7d:56:77:57:54:40:0b:b5:37:2a:
         98:51:9c:dc:3e:a4:9c:7e:c3:6c:0f:67:9d:3b:d2:a6:7c:6c:
         a3:ff:7d:ba:18:20:d3:9c:c3:e6:1e:6f:58:52:9f:94:83:c9:
         dc:d2:2e:f1:4f:5c:1c:8b:d4:80:af:61:75:c5:b5:51:64:30:
         6b:0d:c9:e1:81:c3:dc:8c:05:5b:08:e9:be:84:d4:37:4f:28:
         35:2d:41:c8:26:be:14:1e:e4:02:d8:eb:01:a6:21:36:fd:44:
         27:e8:76:e7:25:3a:10:c0:25:75:23:60:02:b4:99:9c:73:b4:
         a5:58:e1:7c:09:f7:aa:4a:32:4e:fc:a9:4c:df:a4:82:58:8e:
         d5:94:98:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXMjyEhfE58JYMEk/DJ/cG40mAoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUJFRENFNUNBMkE3Mzc1MkU4NDhCMzA1RTdEQ0I0ODA3
NTg2MEU3MTAeFw0yNTA2MjcyMDM0MDJaFw0yNjA2MjYyMDM5MDJaMDMxMTAvBgNV
BAMTKEI5NzI4OTE1QjE1NEJDQkIwOTJGOUUyRTRFODBBM0ZGMTVDNUNBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMO6xuw0UOhz3XgzEcdvI2/4Q7
w7WyaR9cApPL7pQUe41HqcRgBgluEF7hXo0yGPWTSih4SRaU3lsKfhac6No4x6Y8
mi8W6+jP9JsMMylAI/hLISlbz17mYBhU39Aj/j6D3u/gwjgWkHeRUsy96aLI9TyN
BDsFX1uGvKK5JD6y5/95P194BUupBneCbZ+I3RgQRTBA3ERadNHrctLE76OiBkJ7
JZxFf35dfYl8jUu+EYPMja9cs7gGLS66egTSX4k1Y1Ivn+p2l9eaHAO2wBvg848U
ohYR8lRTOnM1VGgeiDlDTpRVQDcCBlm1rlLgw2cXMb3SM5a7L97XTLQkSwLDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuXKJFbFUvLsJL54uToCj/xXFyncwHwYDVR0j
BBgwFoAUq+3OXKKnN1LoSLMF59y0gHWGDnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDhvYlgzQUJRTGlRN214OEo1bldhdDRkZmRGZjNuVG9ZVzN1Vk1qeThQ
c00vMC9BQkVEQ0U1Q0EyQTczNzUyRTg0OEIzMDVFN0RDQjQ4MDc1ODYwRTcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCRURDRTVDQTJBNzM3NTJF
ODQ4QjMwNUU3RENCNDgwNzU4NjBFNzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ4b2JYM0FCUUxpUTdteDhKNW5XYXQ0ZGZkRmYzblRvWVczdVZNank4UHNNLzAv
MzIzMDMwMmUzMTM1MzIyZTMxMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADImLMwDQYJKoZIhvcNAQELBQADggEBAI3WNaqt
I7wI6fhby4dp547mE5qKWkhwtFmUxG+RcFHcb1gg/qV2oVNDP8ZPAAmL5U2K/BqR
R09UVInigT4xPFj1lRHrwPCh0KzUS8wC66lkun41QAnmk4Do5eAhaxq+Fg7LXgWF
8xDlOfjxnMz2yN8iavw/fVZ3V1RAC7U3KphRnNw+pJx+w2wPZ5070qZ8bKP/fboY
INOcw+Yeb1hSn5SDydzSLvFPXByL1ICvYXXFtVFkMGsNyeGBw9yMBVsI6b6E1DdP
KDUtQcgmvhQe5ALY6wGmITb9RCfoduclOhDAJXUjYAK0mZxztKVY4XwJ96pKMk78
qUzfpIJYjtWUmJE=
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:25 2025 by rpki-client