Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          MAn0pgwYTRCEeQgx0upHTQ5ZaYSRGI8m5fRs+OtpOMM=
Subject key identifier:   49:8C:57:1C:CD:B6:78:55:BD:12:B5:0B:0C:D0:DE:0A:03:E9:4B:B2
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       22B076C3725B83682FCD131A9E93E6FE84B10DC9
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa
Signing time:             Wed 01 Oct 2025 17:58:42 +0000
ROA not before:           Wed 01 Oct 2025 17:53:42 +0000
ROA not after:            Wed 30 Sep 2026 17:58:42 +0000
asID:                     28589
IP address blocks:        200.152.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:76:c3:72:5b:83:68:2f:cd:13:1a:9e:93:e6:fe:84:b1:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Oct  1 17:53:42 2025 GMT
            Not After : Sep 30 17:58:42 2026 GMT
        Subject: CN=498C571CCDB67855BD12B50B0CD0DE0A03E94BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:52:d2:85:99:f5:33:b0:9c:97:d9:41:8e:
                    9d:c0:09:00:7c:e7:24:b2:b7:22:3e:66:87:a7:9c:
                    8d:3f:a3:7e:c4:dc:19:8d:66:0d:c3:76:52:9f:59:
                    31:b5:b6:50:62:d4:a2:e0:70:3d:62:c8:ca:1a:17:
                    46:3c:b6:5b:6e:56:6e:69:04:be:dc:2b:39:1c:f5:
                    81:62:4f:41:be:7d:80:34:29:97:23:9a:4f:7c:e8:
                    ba:1e:a3:7b:9b:b0:40:7d:de:d5:3d:ac:99:11:26:
                    15:72:75:ff:c8:cf:43:ab:7b:cf:ef:8a:b4:00:9b:
                    64:af:7a:ec:01:f0:db:ff:f4:b4:47:75:5b:f6:06:
                    49:e6:ab:02:48:f9:8b:b6:12:da:d3:55:cd:c4:2a:
                    35:82:fe:cd:de:f4:a4:af:53:42:73:fe:da:d8:bb:
                    39:81:26:d5:b0:7f:81:c8:95:09:ad:f0:d8:3a:21:
                    c5:25:97:c6:94:11:84:e1:25:82:73:88:cb:eb:e5:
                    00:2a:5f:fe:56:86:16:b3:13:13:c3:78:ff:84:13:
                    2b:07:66:9b:c2:b8:aa:9e:26:1f:4c:f7:62:e0:8d:
                    61:de:b4:53:b5:7c:a1:4f:6b:3b:1f:be:3c:72:df:
                    9b:a5:87:c9:de:1c:dd:29:8e:d9:61:16:b7:3c:29:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:57:1C:CD:B6:78:55:BD:12:B5:0B:0C:D0:DE:0A:03:E9:4B:B2
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3137392e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:2a:39:a9:6f:00:6a:93:5d:ef:75:fe:86:32:fd:bf:d6:
         3b:f4:34:7f:48:fd:6b:a3:e9:f0:2a:ec:6a:b9:72:7d:a5:0d:
         0d:ee:0b:75:44:e6:6c:1f:41:f9:da:77:01:4a:5e:d3:d8:e0:
         85:ca:ee:e9:a9:87:52:0b:33:b9:11:aa:fe:08:0e:d6:b5:b0:
         50:00:2d:68:f3:aa:ce:f2:9e:76:56:07:db:a3:64:71:66:55:
         d7:0c:59:f1:0f:48:65:26:59:e3:1c:89:a2:38:12:39:34:08:
         15:5f:a4:66:f6:9d:9f:11:68:55:3c:09:3d:f4:67:76:cf:9b:
         93:7a:8d:e7:f7:5f:c2:d5:de:56:fc:b8:5a:46:b4:cc:ec:39:
         fc:a7:d4:e9:8c:37:09:f7:32:64:86:09:c0:43:56:e5:12:68:
         97:dc:6d:6d:88:13:00:77:5d:94:62:d3:9b:53:f0:6d:d3:1e:
         1a:0e:72:8c:8c:53:75:89:55:a9:cc:9b:bf:64:76:19:5d:8a:
         dd:8a:54:3d:de:db:6a:02:1f:e9:aa:8d:46:3f:8c:a7:9d:0e:
         93:a8:13:41:ad:07:7d:ee:11:f2:4f:ee:0c:e7:84:f8:19:3d:
         50:04:37:f7:f6:37:39:00:91:e9:21:a9:5a:78:47:36:54:38:
         34:bf:3f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:56 2025 by rpki-client