Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
File:                     3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (raw, json)
Hash identifier:          OYkZaqMENKP00equsGdoZF12c0MG+kKBGIQQnIxrdFI=
Subject key identifier:   28:08:51:85:31:86:60:F4:99:CF:03:01:0D:12:54:12:A0:44:98:FA
Certificate issuer:       /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial:       3762C7F353E455BC4FEE1E750B2502E2D957A5EF
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa
Signing time:             Thu 13 Mar 2025 12:15:25 +0000
ROA not before:           Thu 13 Mar 2025 12:10:25 +0000
ROA not after:            Thu 12 Mar 2026 12:15:25 +0000
asID:                     61834
IP address blocks:        201.150.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
                          rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 11:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:62:c7:f3:53:e4:55:bc:4f:ee:1e:75:0b:25:02:e2:d9:57:a5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
        Validity
            Not Before: Mar 13 12:10:25 2025 GMT
            Not After : Mar 12 12:15:25 2026 GMT
        Subject: CN=28085185318660F499CF03010D125412A04498FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:e8:9b:cd:4e:2b:37:5e:fd:a8:e2:8f:02:
                    7e:58:4b:92:0e:d3:9b:33:d7:d6:22:6d:da:97:48:
                    f5:8e:50:ce:3b:ad:8b:66:0c:fc:e5:97:03:30:8d:
                    24:c1:0c:34:ff:30:59:f9:da:72:47:88:e1:88:a8:
                    2a:15:75:ac:3b:38:dd:0e:4c:4b:69:e0:84:2d:ca:
                    78:91:f3:10:70:05:a2:99:c6:8b:25:a6:58:20:d2:
                    2a:f8:93:81:07:f3:91:53:c7:d5:f6:5a:fe:9d:99:
                    06:f9:db:25:79:07:bb:33:9b:13:93:c0:3d:0e:96:
                    52:5f:8d:ad:72:64:de:94:8d:6e:32:22:ef:f8:e1:
                    d2:fd:61:f3:54:3c:da:84:c1:bb:f2:e6:50:df:b1:
                    02:1a:81:6d:40:75:5a:c6:e5:5f:27:d6:2e:2c:87:
                    ff:f3:8f:24:e7:27:ed:51:d3:d8:28:ad:2c:ef:3f:
                    e7:22:1f:c8:32:c2:09:18:c0:4e:24:4f:1e:40:11:
                    a1:03:f3:b6:09:a1:85:c3:23:6c:ae:94:16:91:c8:
                    73:dc:1c:d0:7a:b7:a1:a4:bd:65:e5:c6:9f:c7:96:
                    05:8a:26:56:f1:f2:74:c8:b6:71:b2:24:2d:d9:bb:
                    da:20:23:c5:4d:69:31:66:d2:2b:76:fe:27:e2:a5:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:51:85:31:86:60:F4:99:CF:03:01:0D:12:54:12:A0:44:98:FA
            X509v3 Authority Key Identifier:
                keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d6:b3:fd:a9:6e:af:d3:78:d2:b8:d3:13:c0:e5:bd:6a:30:
         87:a6:8d:e6:af:f7:60:2f:f2:1a:f1:9f:ae:09:4c:ee:19:52:
         48:95:c5:71:47:d4:c6:13:86:96:16:ad:e4:7c:66:8c:6f:1d:
         67:aa:fc:90:3e:05:67:91:6a:3c:ad:86:74:6f:24:11:7c:fa:
         1a:14:10:db:dc:3b:af:8d:0a:b7:e7:f3:6c:a9:29:3c:92:d0:
         3e:e4:02:8d:97:5f:b8:7c:e5:08:fd:25:67:4a:dd:77:94:c5:
         dc:0f:5e:19:12:e0:1e:b8:70:2b:aa:2e:c6:54:41:07:78:ef:
         3e:4a:3c:37:80:23:75:cf:d5:9c:b2:df:48:cb:b1:d2:4d:d1:
         65:7d:74:d2:41:8f:73:ec:18:0d:40:57:f0:e6:ef:a3:a2:0c:
         ce:d1:50:f3:bc:0e:a6:65:28:59:6d:1b:96:30:fd:40:93:97:
         3d:74:cc:61:1a:d4:93:51:1a:12:bb:6c:70:c4:22:47:5c:57:
         20:8c:2d:dd:49:37:fd:d7:c4:ea:46:d1:1e:ba:fa:0c:92:fb:
         5f:1f:97:8e:3b:23:7e:30:ef:f3:17:f6:d7:9a:73:e4:12:d7:
         d0:10:0e:bc:bb:d1:e7:b1:29:bb:60:49:ae:a6:cf:3f:0e:6a:
         13:84:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:34:01 2025 by rpki-client