Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa
File:                     3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa (raw, json)
Hash identifier:          FPCFswJ8ifLFMPQLQQLKFV1YPpyHZAIGmI9I5XnrlME=
Subject key identifier:   17:75:7B:F2:5D:55:5F:B3:51:34:EA:91:1C:01:0D:1B:AC:9C:B7:A4
Certificate issuer:       /CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
Certificate serial:       5687C59D2EEB0742EE523D241D516B35E82EE964
Authority key identifier: F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa
Signing time:             Wed 30 Jul 2025 18:30:27 +0000
ROA not before:           Wed 30 Jul 2025 18:25:27 +0000
ROA not after:            Wed 29 Jul 2026 18:30:27 +0000
asID:                     271496
IP address blocks:        181.224.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.crl
                          rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 00:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:87:c5:9d:2e:eb:07:42:ee:52:3d:24:1d:51:6b:35:e8:2e:e9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
        Validity
            Not Before: Jul 30 18:25:27 2025 GMT
            Not After : Jul 29 18:30:27 2026 GMT
        Subject: CN=17757BF25D555FB35134EA911C010D1BAC9CB7A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:63:27:20:40:f9:b7:30:a3:d7:50:94:c0:
                    97:f8:f7:80:c8:2b:e6:ab:ac:96:3c:ef:79:2c:be:
                    6d:0d:b0:ca:ad:89:cb:87:5d:cc:fb:40:e5:b0:98:
                    aa:38:c2:00:61:e4:87:f3:2e:30:ee:f4:37:f0:24:
                    a8:54:5b:d4:c6:03:c7:51:af:e8:d9:ba:d1:e1:7e:
                    e3:dc:66:c3:52:9c:39:ac:7a:c3:79:06:26:18:f8:
                    7b:e1:a2:b0:99:1f:e6:27:90:92:63:78:cc:23:d8:
                    b3:8a:ae:1a:40:d2:65:24:ac:eb:dd:3b:ee:9d:a7:
                    19:c5:f6:c7:bc:59:00:91:23:3a:99:db:09:7b:6b:
                    90:4a:7f:3d:68:ff:42:cb:ef:97:03:c5:a9:c1:0d:
                    49:e5:4b:ef:bf:6e:f1:65:d0:5a:9d:46:62:16:a9:
                    ee:c0:df:e9:dd:5e:3f:99:38:6b:bb:b2:60:33:47:
                    a2:29:7e:99:d3:b6:0e:07:93:be:bf:5a:16:17:83:
                    3c:2d:62:fc:02:a3:51:2e:5a:ec:4c:f8:4a:7c:92:
                    07:31:ee:f6:9b:0b:db:6b:eb:ef:cd:2b:c8:fd:38:
                    85:1d:fa:f4:7b:11:7b:ee:62:54:2a:24:aa:79:88:
                    76:e7:0b:f7:5f:99:7b:89:a6:01:74:a7:a1:05:5b:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:75:7B:F2:5D:55:5F:B3:51:34:EA:91:1C:01:0D:1B:AC:9C:B7:A4
            X509v3 Authority Key Identifier:
                keyid:F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:68:46:e8:20:23:37:31:dd:38:17:39:a9:ed:32:9e:d2:
         70:73:09:f2:5a:19:f1:aa:fd:b3:91:f0:79:e8:61:29:52:ab:
         ae:2c:7b:b2:5c:f5:a6:e9:dc:3a:87:8e:0c:a6:c3:0a:fb:ca:
         b4:13:2f:09:ad:bf:72:92:5b:76:46:0d:5a:61:7c:53:fe:5f:
         f6:30:51:2e:e3:78:77:ec:8f:92:90:c7:74:70:d3:e2:1b:01:
         92:3b:7f:b1:ad:31:43:5d:d5:54:b4:8d:c3:60:be:6e:c9:39:
         2a:40:3f:0b:24:b6:59:36:65:22:e0:6c:85:1f:bb:15:ad:d8:
         85:12:cf:9a:bc:1f:41:a0:8c:0f:5e:81:50:39:ae:a2:a5:bf:
         84:12:d0:78:95:c6:9f:d8:fe:ca:d4:62:34:81:18:3b:21:f7:
         f0:85:3a:1b:b1:5c:07:bd:85:83:b2:ad:12:8f:0a:93:a8:ac:
         4a:d8:7e:91:90:55:2e:ac:c0:3b:a4:3b:92:f4:d5:12:88:d4:
         1b:7f:93:18:b4:82:8a:cf:0b:e8:e2:d1:29:eb:dd:ba:0c:08:
         24:0e:dc:0a:4e:e7:15:ed:48:24:72:e7:61:99:27:ed:c5:10:
         58:1b:e3:f3:d1:1e:a3:de:71:ec:25:c8:16:df:25:9d:37:24:
         4d:3a:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:00:55 2025 by rpki-client