Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          IxB2gz3D00/xYQFENAeaJUQNnn3LCHCvkEig+AzkzkY=
Subject key identifier:   16:6E:12:BB:7F:09:99:57:B2:D0:39:10:69:C9:1E:5E:CE:C0:25:D7
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       14C4308404AA7FE28F626564D1B1D48B16C3C5DB
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa
Signing time:             Wed 01 Oct 2025 17:58:42 +0000
ROA not before:           Wed 01 Oct 2025 17:53:42 +0000
ROA not after:            Wed 30 Sep 2026 17:58:42 +0000
asID:                     28589
IP address blocks:        200.152.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c4:30:84:04:aa:7f:e2:8f:62:65:64:d1:b1:d4:8b:16:c3:c5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: Oct  1 17:53:42 2025 GMT
            Not After : Sep 30 17:58:42 2026 GMT
        Subject: CN=166E12BB7F099957B2D0391069C91E5ECEC025D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:d6:54:4f:1a:7f:39:39:ee:da:00:48:53:
                    0c:aa:18:10:17:b7:8f:6a:3f:f3:83:a9:77:06:73:
                    65:20:0f:7b:36:15:74:31:5c:4c:31:59:5f:66:de:
                    77:98:cb:58:1f:b6:61:ba:9e:e5:56:8d:06:1b:b0:
                    4b:b1:aa:e4:9b:40:13:ae:5d:95:40:3e:70:f9:e4:
                    0a:c9:9c:ee:e0:92:0c:b2:01:04:4b:a3:20:e7:51:
                    b2:3a:c3:68:9e:cf:03:8b:a2:3d:a5:82:d8:b6:d2:
                    29:4b:72:ef:bd:84:dc:30:1a:66:e1:f4:9a:00:43:
                    eb:a6:71:ab:8e:9c:23:64:17:4c:4d:27:18:f4:77:
                    ed:2b:e9:68:5a:7d:86:f9:69:5d:ef:1d:12:d5:88:
                    3e:54:74:c1:6b:27:0c:ec:08:76:a6:ba:03:95:ae:
                    c0:ae:d5:95:47:09:cb:7b:5b:12:82:20:69:0b:91:
                    3a:a6:c6:42:57:d6:db:31:d1:ac:7d:52:62:d0:98:
                    03:27:c2:1d:8e:26:a5:8a:03:23:59:df:92:7c:14:
                    6d:60:2a:18:04:3f:51:47:95:54:b8:90:cb:a9:d0:
                    c7:56:5d:c9:f1:e1:bc:1c:4e:59:44:ef:5c:2b:ad:
                    bb:22:50:14:df:5f:ec:86:11:20:12:b0:21:6f:7f:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6E:12:BB:7F:09:99:57:B2:D0:39:10:69:C9:1E:5E:CE:C0:25:D7
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138322e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:fa:70:57:cd:8e:64:9a:ec:a6:70:ae:41:c4:9a:28:bc:d4:
         3a:0f:c8:69:4c:f3:ca:67:85:57:12:a9:4a:a2:5b:78:a1:a7:
         50:ec:05:04:c7:00:79:2a:de:8c:c7:5c:1e:81:c9:64:17:cd:
         a9:2b:51:a0:99:93:b2:af:72:54:d8:32:ec:a9:06:a0:25:8d:
         47:82:74:22:61:a1:38:cc:a1:84:87:68:dd:6b:2f:14:6a:7b:
         f9:86:d8:88:84:f3:45:d1:5e:b8:97:87:25:75:cc:6b:d2:62:
         ad:f5:ee:df:a8:11:82:dc:87:25:e3:96:39:ec:4f:f0:65:52:
         93:1f:e7:6a:5c:8c:69:06:4d:c3:f8:e4:f9:fd:e8:31:f1:1c:
         1c:e0:c7:4b:c4:7f:eb:4b:b8:c9:59:7d:ac:5b:f3:03:ba:1f:
         b7:06:24:06:62:c8:cc:d0:ba:ac:03:c8:85:09:38:d9:98:6f:
         55:f4:53:cd:e7:5b:a0:74:93:2c:8a:b2:b7:ff:2e:07:78:1b:
         54:69:af:fc:96:91:78:ad:de:b5:cd:aa:ef:ec:83:54:fe:77:
         8d:bb:4e:1e:56:f7:65:a6:8a:87:b7:ba:b1:12:46:3e:71:e0:
         1e:85:51:b6:d2:2f:63:b1:18:32:73:7a:42:0f:c1:72:22:5d:
         8b:6c:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:12:12 2025 by rpki-client