Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          C1UtQsoMtLhMPL2Pju3JmvbqNFr51sGjZqkGlr5OjE4=
Subject key identifier:   FF:73:44:F5:B3:77:23:95:EA:B0:8A:BA:EC:7E:27:6D:B4:83:6A:A1
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       835CAC570E3165DA1076BA5F6727F041CDD097
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:02 +0000
ROA not before:           Fri 27 Jun 2025 20:34:02 +0000
ROA not after:            Fri 26 Jun 2026 20:39:02 +0000
asID:                     28589
IP address blocks:        200.152.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:5c:ac:57:0e:31:65:da:10:76:ba:5f:67:27:f0:41:cd:d0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:02 2025 GMT
            Not After : Jun 26 20:39:02 2026 GMT
        Subject: CN=FF7344F5B3772395EAB08ABAEC7E276DB4836AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:78:8f:f9:65:d2:63:3d:2a:08:41:aa:88:
                    a4:a9:0e:34:a3:26:ea:94:dd:6f:dd:18:8b:08:b5:
                    a9:84:ec:e0:0d:f8:33:90:eb:fb:87:94:05:fe:f1:
                    b6:27:32:84:bc:37:6e:ce:97:2d:32:e9:fa:74:f4:
                    e2:80:a9:21:42:77:62:b3:24:3c:9e:6a:ae:9e:0f:
                    68:30:93:2c:f6:be:8d:6c:75:68:40:61:08:38:78:
                    f2:d3:79:5e:0c:d0:0e:ff:00:e1:8e:ca:9c:b7:17:
                    66:a6:6c:c9:d5:0b:0f:17:ce:8d:48:34:31:ff:0e:
                    5f:81:6f:2f:9c:05:26:75:62:25:91:a3:5e:54:1e:
                    07:09:54:e9:cb:d9:61:ac:75:79:a2:b1:6c:2d:80:
                    1c:7f:b3:2e:56:7c:59:85:1e:9d:9f:ad:77:32:79:
                    d1:98:f1:04:4b:18:c5:0d:65:8a:87:cb:89:28:4b:
                    8d:ad:67:e4:67:59:72:44:fc:a4:64:83:71:90:d3:
                    d2:7b:ed:b0:db:5f:75:95:da:0e:a4:46:ef:49:17:
                    5e:80:86:db:56:97:07:29:8c:64:5a:a9:27:d3:f4:
                    74:7b:dd:a0:79:ba:48:8f:d9:cf:45:97:c4:5c:53:
                    c1:60:52:19:6e:30:52:33:1a:46:8c:f1:4f:d6:ba:
                    96:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:73:44:F5:B3:77:23:95:EA:B0:8A:BA:EC:7E:27:6D:B4:83:6A:A1
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138312e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:23:1b:c2:12:b0:6f:6a:78:39:73:30:dc:8a:8e:81:ed:
         a4:36:86:92:d2:39:8d:ba:8a:18:1e:3a:fe:9c:65:6a:07:30:
         90:b1:82:6a:ae:64:65:2e:f9:cb:26:de:a3:67:6c:26:3e:dd:
         de:bb:01:ff:00:42:df:66:16:4a:29:14:72:01:c2:03:c3:cd:
         3c:31:dc:dc:b2:53:23:a3:34:a8:6c:0a:52:c4:3a:05:40:1b:
         08:0c:bc:9a:1e:a9:9c:83:60:cf:c1:90:77:c2:2f:0a:f9:ea:
         6f:d5:14:9e:7e:43:78:f2:e5:f5:53:b8:b7:45:ba:14:cd:b4:
         3d:28:02:9d:36:f5:9e:ca:d4:90:9d:e3:76:70:9a:18:7b:92:
         d0:f0:f6:cf:48:6f:18:18:97:03:e8:f8:bf:62:9d:12:19:11:
         6e:12:fe:55:00:9c:8e:73:d7:30:5d:81:00:5b:10:e0:a2:71:
         fa:86:ab:b9:10:23:6e:fc:b8:61:9d:2e:5f:96:01:6b:3e:80:
         84:da:f7:93:c7:8d:48:34:d4:75:14:33:9d:f3:6e:d9:17:59:
         50:11:25:d9:f6:fc:dd:d6:4c:6a:c2:79:54:70:d6:0a:87:3f:
         9c:2a:9f:76:64:62:88:55:a0:20:c2:5f:25:63:16:3c:38:55:
         01:7d:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:42 2025 by rpki-client