Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138362e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138362e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          g/45VZLymeYIOyxwaXyzDw2ABF+gL0VDk9ufv88yy68=
Subject key identifier:   FE:A7:49:CD:07:02:EF:2E:27:52:35:FC:86:73:48:34:80:02:14:A8
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       784A84774634D35359C1683951B479A64D39453F
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138362e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 27 Jun 2025 20:39:03 +0000
ROA not before:           Fri 27 Jun 2025 20:34:03 +0000
ROA not after:            Fri 26 Jun 2026 20:39:03 +0000
asID:                     28589
IP address blocks:        200.152.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 07:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4a:84:77:46:34:d3:53:59:c1:68:39:51:b4:79:a6:4d:39:45:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Jun 27 20:34:03 2025 GMT
            Not After : Jun 26 20:39:03 2026 GMT
        Subject: CN=FEA749CD0702EF2E275235FC86734834800214A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:f8:da:9a:f1:d2:44:d9:a8:8d:90:0e:9a:
                    e0:30:b4:63:ee:df:7f:bf:c5:4e:31:33:e0:1e:aa:
                    5b:aa:3c:43:5d:75:12:f1:e8:40:dd:fe:17:5f:37:
                    cb:3f:48:bc:9d:eb:22:74:31:e0:24:f2:98:36:89:
                    b7:b2:54:09:6f:f5:9e:ae:78:19:a7:e2:1c:90:c0:
                    2c:87:e7:af:33:f9:48:d9:b2:55:c2:7a:57:34:b2:
                    19:57:ea:0d:30:b9:8c:f4:1f:3f:4e:19:57:b0:96:
                    41:94:82:15:ae:94:fd:ff:af:3a:39:7b:b8:52:66:
                    55:d0:f0:ca:82:6f:31:77:73:0a:6f:a2:3f:2b:b5:
                    95:67:09:ee:32:c5:68:6f:f6:69:0e:0a:5e:80:05:
                    87:d3:b9:24:60:bb:fa:fc:7e:67:e7:c4:15:b9:2c:
                    76:fe:c2:6f:a0:90:90:60:7b:d7:c9:6d:a2:62:ad:
                    d7:b0:2e:34:9f:5f:67:65:37:6d:85:28:db:dc:d5:
                    c4:99:4e:e7:37:b5:4f:c0:52:38:9e:fa:83:1b:cb:
                    fc:29:c3:b7:c6:ea:65:5d:e9:e7:0c:06:df:29:e8:
                    2e:9e:d6:f3:9e:4a:7d:f9:21:14:e0:95:20:24:db:
                    3b:a3:5b:d4:a4:48:95:48:64:90:7e:86:c1:55:95:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A7:49:CD:07:02:EF:2E:27:52:35:FC:86:73:48:34:80:02:14:A8
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138362e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:d1:cf:00:ce:ad:2f:6b:53:e9:55:6f:e6:72:21:8b:eb:
         03:48:3f:98:b4:19:33:c4:65:0b:e4:cb:1b:01:c5:3f:32:3f:
         76:62:c0:11:8a:97:c0:f6:c6:cb:a8:86:de:dc:17:cd:b0:04:
         17:e1:eb:ff:6b:c9:ba:6c:f7:53:a4:27:19:df:54:77:89:f1:
         e7:56:7e:7e:18:f8:df:8f:0b:78:cd:f0:20:b8:99:22:8e:5f:
         50:55:14:9f:1f:a2:d4:4b:6e:53:ac:dd:91:b7:03:4c:65:dd:
         7e:db:7e:0d:5c:0f:2a:d5:d0:d5:a5:9d:06:57:d8:6c:7a:cd:
         59:c6:45:ec:ca:45:39:a9:f5:66:2a:ad:96:7d:16:ce:f3:36:
         6d:7d:3e:d1:64:7e:f8:3a:36:9f:16:40:96:ca:82:98:a4:81:
         74:b3:7e:d9:cf:76:a5:15:9d:0e:0d:6e:ce:c3:a6:47:9f:31:
         bd:14:17:bc:9a:fc:ee:d2:70:be:3d:8d:db:3f:3c:09:e6:24:
         7d:da:20:20:ce:8d:92:44:20:85:ab:75:c9:18:55:59:b0:19:
         af:aa:f1:cd:00:57:d4:51:da:51:aa:28:c5:26:57:de:9b:7a:
         be:66:85:3a:d8:a2:e2:23:75:35:c7:07:da:d0:28:0c:6d:63:
         d3:5a:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:50 2025 by rpki-client