Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          pY25irafGaMOUVKL8fHciFHhc3TfZkyym8uyUei5gCk=
Subject key identifier:   54:A5:E4:86:35:C9:5F:D1:7B:B4:80:8B:56:A6:41:8F:D9:B1:4B:02
Certificate issuer:       /CN=E066B97193F54796970FC225B48A67CD25FD8932
Certificate serial:       595F72799E4F1D25627BB752E5FFE5A3069F0AEC
Authority key identifier: E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
Signing time:             Fri 01 Aug 2025 19:08:15 +0000
ROA not before:           Fri 01 Aug 2025 19:03:15 +0000
ROA not after:            Fri 31 Jul 2026 19:08:15 +0000
asID:                     267540
IP address blocks:        201.182.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl
                          rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 03:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5f:72:79:9e:4f:1d:25:62:7b:b7:52:e5:ff:e5:a3:06:9f:0a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E066B97193F54796970FC225B48A67CD25FD8932
        Validity
            Not Before: Aug  1 19:03:15 2025 GMT
            Not After : Jul 31 19:08:15 2026 GMT
        Subject: CN=54A5E48635C95FD17BB4808B56A6418FD9B14B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:b2:39:3e:9a:6e:08:ad:e7:08:0a:2f:33:
                    6f:69:b8:6f:84:9b:c0:3b:08:11:fc:bd:46:0e:fb:
                    cd:c3:ed:37:61:1e:ea:67:e9:85:a2:ef:5c:cb:6c:
                    df:3f:1f:98:c8:57:b4:bf:ff:d9:46:46:ff:e3:69:
                    30:cf:b3:b4:81:f4:53:4c:e4:c1:3d:78:d6:92:6f:
                    ab:2a:ee:22:c8:b1:41:29:49:b8:db:3b:4c:ad:23:
                    11:25:ad:9b:79:ed:54:9c:03:88:4e:34:35:65:73:
                    15:dd:7c:c0:5d:52:ba:e1:7c:32:bb:64:04:a8:e5:
                    46:1f:2e:6f:dc:b4:72:08:9d:ed:e6:cf:0f:5f:fa:
                    64:37:8e:3f:ac:b5:83:93:05:fc:53:8e:c3:87:2c:
                    7f:44:e5:b3:c5:08:1e:9f:81:ee:7f:c4:32:13:81:
                    12:5e:bc:8a:8a:e2:ed:6d:43:0d:df:37:f4:4e:16:
                    da:c7:67:13:8c:22:88:ec:c3:2c:9a:be:30:a0:79:
                    b2:3b:4c:fe:1b:c6:e1:72:59:b5:84:b5:e1:95:8b:
                    9a:02:d0:b1:8e:48:9e:bf:18:5e:4c:5c:52:6f:d9:
                    fa:d6:4d:23:3c:fc:25:d5:c8:a1:48:96:40:a6:61:
                    c1:a5:e0:2c:bd:d1:cb:f8:d2:af:8d:40:ee:d1:af:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:E4:86:35:C9:5F:D1:7B:B4:80:8B:56:A6:41:8F:D9:B1:4B:02
            X509v3 Authority Key Identifier:
                keyid:E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:0b:f0:a6:44:27:c4:80:0c:f4:a3:f6:f9:62:d5:6b:94:d5:
         b8:32:ae:e3:a5:0b:e6:ef:7f:77:33:61:53:5e:4d:78:4e:cb:
         f7:b0:82:d8:b2:a7:6c:f9:07:ec:bc:8b:5e:f1:34:df:7c:83:
         c1:3d:75:52:6c:0f:3a:ea:89:cb:8b:88:13:93:78:9e:c8:20:
         9a:44:47:1d:64:11:a4:b4:b8:59:7b:58:2b:05:5d:39:41:88:
         13:bf:ab:4e:02:4e:e9:85:93:17:a4:2c:b7:94:9d:22:c7:ca:
         2d:5c:8e:f5:15:2d:94:2e:a2:1d:a7:bc:29:db:6c:0a:58:d0:
         6f:1a:80:f2:b7:2e:4f:5a:5c:d1:2c:dc:81:ff:d6:e4:41:03:
         fb:a7:e9:db:a5:b4:c4:03:9a:70:5e:cb:d9:c3:c7:49:d9:4d:
         a9:e9:db:cf:b9:78:6a:19:0f:92:0f:45:5f:ca:6c:59:fb:70:
         d0:71:98:78:56:b8:ec:50:29:0e:e4:4c:b0:cd:b0:e0:12:5d:
         df:5f:04:3b:51:84:04:df:6a:6a:32:0d:39:1a:88:a3:7b:38:
         be:ff:ce:49:73:f2:1b:ae:b7:5d:36:39:55:1d:31:90:74:58:
         d6:ff:03:86:2e:b8:cc:1e:51:f8:d3:f7:ca:55:ea:59:9c:1f:
         d5:30:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:03:37 2025 by rpki-client