Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
File:                     3230312e32302e3134342e302f32302d3234203d3e203238363035.roa (raw, json)
Hash identifier:          mgiFm+AQ1BARPvCimt0jOUhKbYnFekRlOF5rW1eyGgI=
Subject key identifier:   3A:40:F2:26:59:C5:50:AE:9C:28:22:05:23:97:E1:CF:09:CD:AC:ED
Certificate issuer:       /CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
Certificate serial:       7CE53947180AA420D196AB4775142873B5F82323
Authority key identifier: 5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa
Signing time:             Tue 08 Apr 2025 19:21:09 +0000
ROA not before:           Tue 08 Apr 2025 19:16:09 +0000
ROA not after:            Tue 07 Apr 2026 19:21:09 +0000
asID:                     28605
IP address blocks:        201.20.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl
                          rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e5:39:47:18:0a:a4:20:d1:96:ab:47:75:14:28:73:b5:f8:23:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A97D9AB7EB0B4A37A687DF48243A86F6FED596D
        Validity
            Not Before: Apr  8 19:16:09 2025 GMT
            Not After : Apr  7 19:21:09 2026 GMT
        Subject: CN=3A40F22659C550AE9C2822052397E1CF09CDACED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:7f:2b:ff:a1:ef:2a:c6:ec:0e:ca:b2:5a:
                    c0:c5:b2:79:03:64:08:97:c2:ac:00:42:49:09:d5:
                    3f:f4:b5:74:27:4f:5a:97:54:68:a4:83:5a:a4:66:
                    a3:4e:0e:aa:39:8a:ca:a4:d0:09:67:1d:c8:b1:a7:
                    d1:c1:7a:4a:54:08:8c:e2:bc:c2:c8:cc:d7:df:aa:
                    f5:6e:29:73:60:62:a8:27:45:ab:aa:ee:e6:ea:c0:
                    e4:cd:58:10:64:9e:e0:59:7b:0b:ff:f9:84:5a:98:
                    70:1a:a8:23:75:fd:24:c7:c9:03:d0:7b:d6:18:19:
                    15:44:79:b8:42:88:98:23:3f:91:85:36:3e:08:49:
                    f1:1a:96:d2:91:25:17:37:d1:00:04:5b:3c:9a:4d:
                    15:55:c0:0c:b7:9a:7e:57:47:0b:a1:fb:23:ae:a2:
                    f2:99:09:ff:e0:8d:f2:90:86:3d:45:20:d2:58:db:
                    f6:98:be:b8:52:1e:4b:72:21:da:c3:61:27:c1:32:
                    9e:c9:8b:e6:b3:a6:37:b4:70:c6:a8:8f:5e:8f:4c:
                    31:00:fb:81:8e:06:67:8f:25:24:55:79:aa:f5:e9:
                    5e:c8:a1:4f:41:bd:28:42:d7:4d:8a:16:58:3c:c2:
                    46:e7:e3:15:d6:e2:cd:e3:5a:0a:ba:3f:d8:cb:69:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:F2:26:59:C5:50:AE:9C:28:22:05:23:97:E1:CF:09:CD:AC:ED
            X509v3 Authority Key Identifier:
                keyid:5A:97:D9:AB:7E:B0:B4:A3:7A:68:7D:F4:82:43:A8:6F:6F:ED:59:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A97D9AB7EB0B4A37A687DF48243A86F6FED596D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3230312e32302e3134342e302f32302d3234203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         db:97:ad:31:34:11:af:8b:d0:0f:d6:09:67:de:9c:79:99:02:
         13:10:ea:17:f3:e5:71:c3:1c:a5:1b:d7:a6:40:54:85:52:69:
         43:d0:ad:28:f4:e3:94:83:4d:b4:e0:02:65:b6:69:65:be:43:
         0e:aa:e0:0b:9e:ea:5d:f4:8c:42:1c:d5:55:53:86:30:7a:2e:
         a2:c8:73:46:00:1d:01:9d:90:b2:92:38:39:49:7d:ba:1f:21:
         61:41:4f:b8:77:1d:6a:29:fd:d5:22:db:77:50:20:b3:8e:65:
         39:21:f7:cf:2c:4b:28:f5:08:33:70:7d:df:c4:f8:64:90:06:
         6f:8c:39:82:dc:06:a0:bd:ab:10:4e:82:62:74:3c:a3:0a:39:
         c8:84:74:10:ec:d6:90:71:5f:ae:ac:0b:e5:6c:c5:bb:82:02:
         19:64:b3:fc:11:d5:20:fd:bd:5e:8d:a1:65:58:e5:0e:20:c7:
         bf:40:18:88:21:0e:5c:17:9e:9b:1b:de:db:0a:e1:85:c9:19:
         06:2a:df:ee:0b:72:10:4d:b9:77:1b:25:9e:f7:05:fb:aa:b7:
         d1:56:f7:d9:80:68:88:45:9b:53:d8:e6:fe:2a:af:51:13:c6:
         e7:b4:6e:b2:d9:9f:f1:c4:44:07:12:e7:a7:04:dd:a9:7f:a4:
         1d:22:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:24:27 2025 by rpki-client