Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          uytLFMkLhZ/TmL4+md+v045jJjHZW/DMJzbkIxFD6n0=
Subject key identifier:   71:DF:E5:E0:D5:89:0F:31:91:DE:BE:98:F5:BA:3E:FB:37:C4:BA:A2
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       5BE6527B76C56945547ED3E8828E3748410518A7
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:03 +0000
ROA not before:           Fri 27 Jun 2025 20:34:03 +0000
ROA not after:            Fri 26 Jun 2026 20:39:03 +0000
asID:                     28589
IP address blocks:        200.152.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e6:52:7b:76:c5:69:45:54:7e:d3:e8:82:8e:37:48:41:05:18:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:03 2025 GMT
            Not After : Jun 26 20:39:03 2026 GMT
        Subject: CN=71DFE5E0D5890F3191DEBE98F5BA3EFB37C4BAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:18:9e:4e:0a:8e:d8:9b:fd:e2:07:68:8a:
                    e8:f2:2e:64:d4:7e:1c:71:76:cf:e9:49:81:f4:f6:
                    b6:be:ce:26:db:a3:5f:cd:ab:66:e7:ce:d7:76:6b:
                    42:e3:ce:9b:cb:16:d6:e8:f8:30:21:80:1f:d9:19:
                    70:6a:69:86:da:e6:12:ea:d1:2f:b3:98:37:88:f0:
                    97:55:ff:51:ea:e6:87:3a:1f:65:24:fc:a0:86:16:
                    a9:44:9d:50:ff:89:3c:76:47:e5:95:32:9a:ed:05:
                    a3:57:a1:eb:6b:d1:26:ba:e6:8b:b0:24:3b:91:cc:
                    2e:fc:eb:05:51:af:ef:2a:7d:36:a5:3a:04:79:ee:
                    e0:1c:41:94:d7:db:b0:ba:f6:3e:5b:70:fe:2f:a9:
                    6d:d2:5f:70:63:4c:53:30:4a:78:1d:f5:04:bd:ce:
                    8b:2f:d8:99:8f:cb:8e:7e:01:02:b2:57:db:53:69:
                    58:f4:ea:c5:62:7a:21:eb:8b:1c:01:00:c3:91:3c:
                    6d:f1:2e:c5:04:bf:b8:ab:a9:2b:cb:c0:88:74:d1:
                    f2:8c:25:c6:fc:6c:3a:3c:c9:f3:fd:0d:a3:18:50:
                    80:2e:10:32:5b:54:8c:32:e9:8e:d0:cb:11:7c:c0:
                    2a:e1:e8:00:d5:fb:ed:60:51:99:4a:16:ea:bc:68:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:E5:E0:D5:89:0F:31:91:DE:BE:98:F5:BA:3E:FB:37:C4:BA:A2
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:df:5f:e4:72:a9:da:9e:59:ed:8c:c0:7b:0a:f2:f0:c7:92:
         e6:6e:4b:ea:61:f3:de:63:79:26:8c:ab:9b:a3:97:47:eb:1a:
         be:56:88:45:12:e1:39:fc:c6:19:8b:f8:f5:59:31:ad:74:e7:
         21:b0:1f:09:d7:c4:ca:35:02:28:4a:20:2f:d7:18:3a:a7:3c:
         0f:88:33:d5:76:7f:a0:41:2a:1b:d3:4b:3f:24:1e:a8:e9:e6:
         f3:84:30:73:71:bd:80:6e:68:cc:73:1d:4a:16:6b:68:ef:9b:
         b8:5a:c7:56:59:5e:59:6c:2c:55:e3:be:07:5b:0a:9d:70:ce:
         3d:ef:44:fd:34:95:2e:79:7f:d5:8b:88:96:23:35:35:21:dc:
         1a:f9:a8:1b:d4:96:68:96:c6:fa:79:8f:da:50:4f:6d:1a:b5:
         a7:e5:3d:8d:8b:65:3c:6e:f5:79:e6:67:dc:99:12:6c:09:48:
         13:4e:3d:0e:bf:89:30:fd:b5:14:80:16:3f:a1:9d:07:de:1e:
         fb:c1:6d:5d:43:70:98:7c:91:53:ad:9d:55:95:77:85:e9:09:
         c9:35:e0:be:85:b5:4b:38:b4:cd:78:1d:df:18:08:cf:fb:5c:
         cd:37:c4:c1:13:5f:fd:6f:6c:51:a3:fd:36:e1:e2:7b:42:98:
         26:cf:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:01:25 2025 by rpki-client