Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa
File:                     3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          pTb4BZBb+vT1N3y2rOEzZTkDwA1MFDS+AauZA2gcMWU=
Subject key identifier:   DA:95:AE:27:68:F2:16:56:C6:FA:A3:3C:72:3F:5C:58:4F:EB:88:48
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       45C6B1721584BD2C42E2989E5F2F50D80742ADD1
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa
Signing time:             Thu 13 Mar 2025 13:15:34 +0000
ROA not before:           Thu 13 Mar 2025 13:10:34 +0000
ROA not after:            Thu 12 Mar 2026 13:15:34 +0000
asID:                     271110
IP address blocks:        160.20.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c6:b1:72:15:84:bd:2c:42:e2:98:9e:5f:2f:50:d8:07:42:ad:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: Mar 13 13:10:34 2025 GMT
            Not After : Mar 12 13:15:34 2026 GMT
        Subject: CN=DA95AE2768F21656C6FAA33C723F5C584FEB8848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:62:c3:8e:4a:26:28:fb:76:30:05:6c:ee:
                    ad:be:5c:33:71:af:c6:12:8d:f4:5c:b7:56:c8:80:
                    a2:d0:6a:b5:8e:83:92:64:af:2e:15:28:ad:4b:2f:
                    9c:f7:d0:3c:89:17:fb:78:f8:7a:de:88:a6:6f:c1:
                    1e:65:e3:9e:be:70:29:bf:cb:06:7c:a0:8f:fd:63:
                    35:8e:d6:29:4a:76:55:17:25:48:e4:00:d1:4a:20:
                    4a:58:74:c6:84:ec:dc:15:78:69:78:89:f6:51:b6:
                    e8:25:88:34:05:48:d4:d7:84:dc:d3:c9:6e:6c:89:
                    d6:7e:62:c9:e9:8f:8d:63:f6:02:92:d7:1e:8a:0c:
                    db:bb:7f:6b:5b:38:82:3a:a4:03:51:f6:f0:74:49:
                    37:4a:89:7e:c5:18:e8:e7:0b:2e:88:ad:b6:db:01:
                    c9:d5:46:1c:04:91:02:1b:93:bd:42:60:49:1a:8b:
                    de:db:d8:33:b2:5b:aa:2f:be:46:31:e4:96:c4:be:
                    30:50:a2:6a:ec:90:5e:17:47:84:0a:b8:5e:9e:f6:
                    d0:e2:32:a2:0d:34:ad:7a:f9:8d:0c:e5:79:26:68:
                    6b:6d:64:d4:12:71:2f:9c:c7:ae:bf:0f:5c:b7:47:
                    24:8c:24:6d:f8:37:3b:e2:45:2b:ce:45:6a:1a:aa:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:AE:27:68:F2:16:56:C6:FA:A3:3C:72:3F:5C:58:4F:EB:88:48
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137382e302f32342d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:8e:ed:90:46:c9:1f:92:1c:fa:f0:7c:aa:b2:7a:12:7e:
         7c:b2:e5:72:1e:c8:c7:2c:09:6e:db:bc:cf:07:da:67:15:60:
         4b:18:7b:64:7f:63:ce:cd:58:cf:b4:22:bb:4e:3f:17:9a:c9:
         71:bc:1b:29:c0:78:e1:53:dd:c5:50:6a:cd:33:69:51:80:a9:
         19:d5:76:e9:e3:d4:e4:b0:4f:8d:55:89:60:a3:3f:85:34:6a:
         6d:49:3a:4c:ba:9d:3e:d8:78:ab:a8:23:c4:f2:e7:05:e3:02:
         b5:6d:7e:dd:57:91:6b:47:4c:df:52:f4:31:de:91:f7:3b:22:
         15:ac:1a:7f:2f:99:28:52:5f:5f:47:fa:e9:f2:f1:36:86:7e:
         5b:44:cc:72:cf:0a:c0:a3:66:ab:1d:01:15:78:90:34:48:8d:
         9b:b9:ca:7c:d2:47:01:c8:ac:94:9b:b3:95:94:d8:76:e6:04:
         b1:98:10:b7:89:e7:39:2a:89:ed:5d:bc:e6:f8:cd:d1:bb:27:
         2f:f0:46:eb:b4:93:92:3c:be:96:ef:3b:22:d0:30:86:8e:21:
         1c:d1:1a:d1:29:79:d6:58:19:37:6a:d4:38:70:66:89:4e:86:
         f2:50:a9:40:00:74:74:60:7c:f4:8e:a4:c9:ef:a8:4c:7a:50:
         db:c0:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:19:31 2025 by rpki-client