Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e203532353332.roa
File:                     3230312e34392e3233322e302f32322d3234203d3e203532353332.roa (raw, json)
Hash identifier:          hiOiVKyPf3+4eoA/8yVg/d6HRMnxKNUSLrn7PiqhtKU=
Subject key identifier:   24:89:3E:71:7F:4F:87:E3:D0:0C:C2:27:FF:7B:D0:07:25:89:A0:EB
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       7CC4B05CBB3554BF267AEACB0FD1ECD30EE5C9A5
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e203532353332.roa
Signing time:             Fri 13 Jun 2025 12:52:20 +0000
ROA not before:           Fri 13 Jun 2025 12:47:20 +0000
ROA not after:            Fri 12 Jun 2026 12:52:20 +0000
asID:                     52532
IP address blocks:        201.49.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 20:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c4:b0:5c:bb:35:54:bf:26:7a:ea:cb:0f:d1:ec:d3:0e:e5:c9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jun 13 12:47:20 2025 GMT
            Not After : Jun 12 12:52:20 2026 GMT
        Subject: CN=24893E717F4F87E3D00CC227FF7BD0072589A0EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:77:db:1a:26:98:a1:c5:2d:90:d7:12:c2:3b:
                    5c:71:47:f2:f2:47:70:42:72:1d:3b:59:d3:a1:20:
                    6a:04:d6:e6:ca:06:63:c3:cd:0c:d7:e9:d5:51:47:
                    f1:22:a5:5b:15:63:0f:98:2a:a5:aa:38:f3:e5:6e:
                    eb:04:c4:0e:28:d9:04:bd:70:4a:76:52:c6:01:37:
                    dd:20:63:56:fa:47:7f:da:93:90:3d:82:78:10:86:
                    02:4a:2b:7f:5b:a0:23:bf:a2:88:53:33:ff:38:db:
                    56:66:39:66:6a:54:f0:5a:d7:42:3c:b5:fe:67:52:
                    ee:9e:c5:79:66:0a:03:ea:1f:bf:79:7b:22:2b:57:
                    64:fa:2e:32:1c:0e:eb:8c:41:cd:9b:6f:db:3d:4c:
                    ab:ac:12:7e:70:ad:c4:3f:90:b4:b3:31:a3:7a:66:
                    74:e0:8b:c3:12:4f:b7:44:33:e6:43:e9:a6:40:77:
                    3e:07:2e:28:05:08:89:de:06:bb:35:51:64:17:cf:
                    98:83:40:9a:0e:a8:4a:d0:49:ce:c2:37:46:e8:ab:
                    93:31:69:e2:61:88:d4:13:a3:00:c3:b1:8c:c3:db:
                    e1:16:4b:52:2d:17:58:bc:e2:d7:78:a9:58:45:a9:
                    73:6f:c0:aa:0f:2b:7a:c0:83:5b:2c:e4:5d:04:df:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:3E:71:7F:4F:87:E3:D0:0C:C2:27:FF:7B:D0:07:25:89:A0:EB
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3233322e302f32322d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:c0:ea:2a:7c:ad:c6:d6:d2:d7:78:11:43:aa:27:60:0a:
         6b:bf:ba:8d:08:0b:0b:23:6b:14:67:63:47:cd:57:90:1d:0f:
         94:16:97:6d:a2:ce:14:f3:77:e6:0d:63:de:34:2c:fd:45:18:
         74:8c:db:8b:bf:de:1e:75:d4:14:67:ab:5f:83:c9:47:55:ff:
         38:28:ce:40:90:c7:a0:28:41:e6:4b:6c:f9:8a:2f:18:d6:92:
         4b:2a:b5:1f:81:01:67:ff:86:ef:18:a8:64:2f:47:0d:f3:d5:
         7e:40:75:4d:b6:0e:da:e1:c2:33:de:b2:da:52:23:60:37:57:
         d2:2d:f6:60:53:0f:88:98:cd:dc:aa:c2:34:61:27:ff:93:d1:
         15:a8:c9:ac:83:e5:ef:2e:79:16:cf:a5:a5:c7:c8:35:b4:31:
         c0:f2:d0:8d:dd:bf:73:23:a6:d6:2b:ac:07:a2:a1:25:cf:67:
         5d:82:28:63:b7:cb:de:5e:86:2a:95:b1:f7:57:17:67:e7:e0:
         97:c9:e1:5a:94:44:86:f9:35:77:e5:84:37:42:24:ed:99:39:
         1a:f6:19:53:7e:1f:28:14:cc:bf:0a:7b:ec:1b:6f:df:67:1b:
         ca:b6:24:d1:e2:23:9b:ec:84:bb:5a:c9:86:69:44:a8:d3:b4:
         6f:2e:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:19:52 2025 by rpki-client