Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          f+lRmXc5sY73FXixGHv0kpHu4cxag34ptZ5H5Ec76Cg=
Subject key identifier:   C5:22:11:12:12:49:58:54:F1:C2:5B:B8:0B:A0:9E:07:5A:61:38:A3
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       0B940EBBF09C6DDDF32A5A691ECB4A3224E6D1AA
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:18 +0000
ROA not before:           Wed 30 Apr 2025 18:20:18 +0000
ROA not after:            Wed 29 Apr 2026 18:25:18 +0000
asID:                     270793
IP address blocks:        201.159.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:94:0e:bb:f0:9c:6d:dd:f3:2a:5a:69:1e:cb:4a:32:24:e6:d1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:18 2025 GMT
            Not After : Apr 29 18:25:18 2026 GMT
        Subject: CN=C522111212495854F1C25BB80BA09E075A6138A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:d4:20:ce:f4:a3:e7:08:8d:f6:75:92:ba:
                    8c:fc:f1:44:d3:2b:64:21:41:b2:06:85:10:cc:17:
                    12:26:59:ac:f2:5d:a5:ef:3e:48:49:14:99:a6:19:
                    a1:0b:38:01:b6:40:03:60:3b:4f:6c:58:eb:b5:d8:
                    bb:d7:f5:36:c2:8a:9d:bd:de:d3:b6:f4:bc:86:5c:
                    b1:8a:cd:05:86:69:67:be:0c:02:68:44:14:17:f3:
                    5c:93:8d:9f:c3:a4:ab:43:c0:14:a8:0a:20:bb:5f:
                    fc:45:f8:41:e1:b2:8f:06:c9:17:92:e5:5e:1c:a4:
                    08:48:e7:5c:77:d1:82:e7:89:8b:be:fc:74:2c:3b:
                    88:83:90:6a:a7:4a:df:cf:65:05:3d:94:f0:ef:a4:
                    9e:dc:41:57:b3:7b:35:2d:bc:eb:85:e4:9c:b7:b7:
                    79:48:44:c0:4f:a0:44:6f:36:8d:a9:0f:7f:36:c3:
                    4c:ef:6f:e3:49:4f:02:3f:e0:51:d7:43:b7:08:4d:
                    27:3c:9c:6c:2a:2b:aa:4c:57:a8:e9:4f:bb:4a:8a:
                    fc:d6:fe:5d:2f:fe:ad:ce:21:d9:8b:90:85:07:10:
                    d2:92:b1:8e:59:d5:76:5a:7a:36:96:ef:41:e3:99:
                    00:d5:1d:3e:28:d2:72:32:7e:c4:49:01:c2:ec:b8:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:22:11:12:12:49:58:54:F1:C2:5B:B8:0B:A0:9E:07:5A:61:38:A3
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:3f:b8:72:7c:0a:15:3c:45:f4:5a:b7:eb:1a:b9:a6:82:
         13:72:6a:b3:6b:7b:01:5e:ab:c2:0b:0f:01:da:58:f7:fc:9a:
         1b:40:d7:cd:71:11:28:ef:0d:78:a6:f7:3d:22:81:0d:e5:82:
         cb:14:8e:a3:6e:06:bd:05:a1:df:8c:9a:51:e7:26:62:8a:a7:
         bf:71:e6:4a:b8:89:94:c7:bc:56:c2:63:d0:1e:c6:03:04:f6:
         c7:5b:04:53:5f:c9:30:b2:86:aa:e2:33:dc:ff:79:dd:2a:fc:
         ce:08:4f:94:d5:12:d1:a6:e5:ef:75:fe:08:8a:41:94:a3:c9:
         b5:21:07:d6:98:fd:e8:c2:45:79:ed:b8:63:cf:e8:68:c5:1e:
         5c:f0:ff:11:a8:be:40:2a:1e:08:72:3b:af:a7:67:ed:32:c8:
         d9:37:59:be:1c:50:f2:69:cb:f1:43:62:ca:66:4d:b8:22:15:
         77:be:4e:d1:49:b1:6d:1e:2f:5e:3f:4c:83:78:da:3b:1d:ff:
         ad:91:3e:37:59:a4:d0:f6:93:94:c6:fa:0f:b9:6f:75:76:f2:
         24:10:fb:93:58:46:b0:d4:39:67:04:df:08:8d:b9:e5:49:6c:
         96:5b:89:78:6d:1c:99:ab:86:dd:63:77:dd:33:1d:eb:25:0a:
         34:82:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:24 2025 by rpki-client