Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          XwZwnGLQtwgwMmBOul4r3/MIGHfpZbt+/M93PODrJok=
Subject key identifier:   65:71:49:43:16:A9:4A:D8:3E:88:99:FB:A2:B4:F6:7E:10:B8:66:9D
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       6813882AAF327DC14C27958BB37D3C51B4AC4633
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 13 Jun 2025 12:43:35 +0000
ROA not before:           Fri 13 Jun 2025 12:38:35 +0000
ROA not after:            Fri 12 Jun 2026 12:43:35 +0000
asID:                     264886
IP address blocks:        201.49.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 13:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:13:88:2a:af:32:7d:c1:4c:27:95:8b:b3:7d:3c:51:b4:ac:46:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jun 13 12:38:35 2025 GMT
            Not After : Jun 12 12:43:35 2026 GMT
        Subject: CN=6571494316A94AD83E8899FBA2B4F67E10B8669D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:58:53:0c:b4:5d:0e:ca:31:17:11:f9:e0:
                    71:2c:6a:22:4d:f7:cd:c5:24:c1:3d:6a:cb:25:bd:
                    cd:02:e1:60:69:3a:dd:a5:ed:f3:4d:b9:9b:6c:32:
                    21:fa:38:d4:f2:d1:ab:95:67:01:4f:71:cf:37:a7:
                    30:5d:0e:75:4f:42:60:b2:12:54:ed:51:5f:04:4d:
                    66:cd:90:d2:d8:53:c9:34:e3:cd:a7:bc:e7:f8:68:
                    bd:0c:dc:34:04:dd:0e:6a:28:c7:a1:d2:ad:f1:b1:
                    5c:2d:58:d7:06:dc:27:3c:fa:51:7c:3c:4a:2a:68:
                    02:79:ac:f2:9b:76:1c:a1:29:89:83:ae:47:af:86:
                    c6:c4:7c:46:d7:a5:eb:90:19:ab:e5:12:da:03:75:
                    63:f4:7e:ae:83:2b:22:cb:ba:c3:94:a8:53:fd:59:
                    7b:69:29:10:eb:a2:4b:08:74:e2:25:f9:3a:ff:82:
                    b5:cf:7a:b7:9c:ef:41:d5:4f:ff:c4:4b:02:40:ef:
                    11:2e:8c:2e:dc:e7:f9:bc:f6:46:d3:9a:59:f5:7c:
                    39:a2:70:d7:fc:35:5a:a8:e7:e4:cf:cd:d4:e0:50:
                    51:00:c0:61:69:9f:9b:37:a2:16:5c:42:28:3b:5a:
                    84:76:36:56:12:4e:7b:9a:04:68:b6:05:6f:89:91:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:49:43:16:A9:4A:D8:3E:88:99:FB:A2:B4:F6:7E:10:B8:66:9D
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232372e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:24:24:1c:c9:ef:61:f0:23:da:84:b9:b7:8d:f7:f0:4d:
         04:76:37:d1:d6:eb:c5:b5:08:1a:9c:47:83:5e:94:0e:c2:63:
         e2:aa:da:50:61:51:01:c8:f3:59:51:12:4d:ec:4b:94:5a:7c:
         f1:6f:72:88:51:35:18:60:11:22:96:08:43:e7:f4:24:66:ad:
         13:c4:0e:13:87:0d:07:d5:da:a7:44:b8:40:cc:a3:44:f6:01:
         10:55:e1:cd:80:42:81:ca:1c:ae:f5:fa:b4:ec:9d:24:7d:1c:
         66:e0:37:1e:fd:c0:06:9f:4b:73:cd:f5:e7:30:5c:33:8f:03:
         66:e2:71:6b:25:05:aa:7c:0d:f0:a1:60:f8:cd:5c:f3:2a:13:
         de:66:dd:97:84:3a:ec:d5:1d:6e:c6:8f:28:12:9b:60:aa:fc:
         5c:8f:d2:1d:52:01:bc:1d:50:e9:a4:f5:9b:bf:fd:2d:12:7a:
         44:2d:fb:01:a2:28:d4:21:26:63:d1:40:98:da:0c:a8:d0:f0:
         14:06:95:af:09:e1:66:7a:45:14:13:1e:b5:a5:23:54:ce:ba:
         79:cb:cf:a6:23:1d:9c:de:03:63:b1:af:e2:db:df:99:c8:9c:
         f7:1c:ed:3d:00:d0:ae:41:e5:9a:c7:49:87:90:aa:c7:6a:eb:
         71:07:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:36:43 2025 by rpki-client