Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32322d3232203d3e203238353839.roa
File:                     3230302e3135322e3138302e302f32322d3232203d3e203238353839.roa (raw, json)
Hash identifier:          zlLsxzwCTqW8ur4Zzk+DMLz+9V/vPikZFS+rzHqKRI8=
Subject key identifier:   48:2A:93:66:DC:CD:41:30:E4:68:3A:E6:27:74:01:A5:2C:46:25:38
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       5948ADC4E5491EF9A30F64116D058542D64CA049
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32322d3232203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:03 +0000
ROA not before:           Fri 27 Jun 2025 20:34:03 +0000
ROA not after:            Fri 26 Jun 2026 20:39:03 +0000
asID:                     28589
IP address blocks:        200.152.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:48:ad:c4:e5:49:1e:f9:a3:0f:64:11:6d:05:85:42:d6:4c:a0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:03 2025 GMT
            Not After : Jun 26 20:39:03 2026 GMT
        Subject: CN=482A9366DCCD4130E4683AE6277401A52C462538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:a6:7b:14:f1:99:b9:71:72:e4:0f:2a:9a:
                    b9:4f:c7:4a:2d:52:d8:17:ad:9e:73:da:6b:4e:82:
                    f9:0f:85:57:5d:b8:42:8c:cb:40:a5:21:88:fe:4a:
                    03:18:7b:09:cc:2f:bf:04:e1:68:c1:4b:1f:83:4f:
                    3f:5b:7d:1d:d3:26:e0:bd:11:f8:e9:88:c2:ef:b6:
                    0a:ce:31:22:c1:0a:c2:8e:91:e7:01:d8:8d:ed:36:
                    d6:7c:b2:87:25:a7:15:cc:2c:df:9c:79:b0:9b:ac:
                    2d:45:1b:0a:59:80:d1:99:bc:dd:4e:42:9c:f5:5c:
                    07:8d:9d:a7:65:29:e3:8c:b0:70:bf:76:ec:9e:0a:
                    89:3e:9d:3d:a3:2e:97:a2:b3:e5:a8:37:bc:ab:22:
                    fc:69:d1:e6:08:c3:b8:88:19:73:d7:79:86:9c:cc:
                    6a:f0:d2:d9:8d:34:43:21:cf:d9:76:f8:92:97:ab:
                    62:35:76:f0:ca:f2:ae:89:f6:f3:d5:bd:62:9c:0d:
                    37:4c:ef:e1:6b:0d:4c:e3:e9:78:03:9f:46:ad:c3:
                    6f:bb:07:17:09:a4:02:86:8c:22:56:4c:48:6b:04:
                    61:46:91:fe:6b:2e:38:2a:3e:55:96:7f:21:21:9d:
                    88:69:f1:16:7b:3f:98:52:cb:e6:32:bd:4e:a0:44:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2A:93:66:DC:CD:41:30:E4:68:3A:E6:27:74:01:A5:2C:46:25:38
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138302e302f32322d3232203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:e8:07:dc:10:bf:74:c0:2e:e2:08:9e:97:11:c2:25:58:
         05:cc:44:90:9b:c5:3e:4f:32:6c:1e:c3:88:6e:2a:9f:ac:ef:
         42:e6:fe:be:e7:4d:5c:95:d6:d9:9f:e6:20:f8:8c:66:be:12:
         8e:10:68:72:9b:0e:fe:93:a1:5c:9b:02:ee:4d:86:85:e2:88:
         ea:18:76:7e:63:6e:7a:2e:65:61:a9:ab:6a:28:47:c7:cf:bd:
         4e:40:bd:fd:a8:62:19:fd:e9:a8:91:23:fa:7f:a5:6e:54:cc:
         ab:eb:06:f9:68:4b:b9:d4:fa:c6:33:88:bf:1e:de:a5:3b:ae:
         09:bd:c9:6a:d6:b8:b4:ab:c0:c3:5d:d1:11:25:5d:3c:3d:2c:
         5c:43:18:1e:e5:33:91:ff:4a:f3:c0:50:b4:4d:10:77:12:05:
         74:c2:b6:f8:48:ca:28:6c:ed:09:6d:bc:ae:22:07:a2:ad:0e:
         91:4a:c1:0b:47:8d:b4:26:0a:9b:99:96:a8:50:a3:e9:bb:35:
         32:8a:27:e1:12:33:49:c2:ab:57:77:74:0a:33:4c:13:c1:e2:
         be:55:25:29:2c:b9:f7:48:be:2b:2b:f3:e1:5a:43:22:9e:33:
         ae:92:38:d7:fe:a9:89:23:9a:9c:50:0d:d8:38:6d:25:db:f2:
         d6:42:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:53:02 2025 by rpki-client