Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
File:                     3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier:          JeA8tNnq52g+siWz2Xjv02XBG+9YjyQg5PiUYmPSfPw=
Subject key identifier:   C0:FB:56:D2:F6:E5:53:93:2C:38:5C:24:12:11:B9:46:CC:92:89:C2
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       1AC4987B63A6F4B03318A84B772E8D457DF78F4E
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
Signing time:             Thu 25 Sep 2025 13:04:16 +0000
ROA not before:           Thu 25 Sep 2025 12:59:16 +0000
ROA not after:            Thu 24 Sep 2026 13:04:16 +0000
asID:                     270793
IP address blocks:        201.159.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c4:98:7b:63:a6:f4:b0:33:18:a8:4b:77:2e:8d:45:7d:f7:8f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Sep 25 12:59:16 2025 GMT
            Not After : Sep 24 13:04:16 2026 GMT
        Subject: CN=C0FB56D2F6E553932C385C241211B946CC9289C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:9b:20:a0:4d:75:d0:b3:cf:7a:bb:a8:b6:
                    5b:5c:d0:cf:e9:4d:71:6e:93:38:a4:af:bd:65:1e:
                    8a:57:0e:2c:fb:63:88:73:26:e0:80:11:04:c6:ce:
                    82:70:d5:d0:02:e5:cf:83:f7:23:c8:32:ed:4d:6e:
                    23:07:03:d7:d1:c3:4e:16:ef:f6:f8:a2:63:60:9a:
                    7e:9b:0b:aa:96:9b:2c:a2:29:c7:82:b3:8e:c7:53:
                    11:e0:78:08:22:3c:2a:97:f4:1e:e2:5a:f2:4e:bf:
                    c6:84:67:a5:3c:a4:0f:34:d9:02:a9:d7:03:94:c8:
                    d6:07:6a:3b:9b:e1:30:e0:34:8c:3e:c8:67:78:a4:
                    21:01:de:d8:c3:1b:a1:92:4e:6e:f0:25:c1:6a:07:
                    2a:86:62:a9:a0:2a:39:79:64:85:00:d2:13:e0:bf:
                    8d:b3:ff:bc:d4:26:fe:0e:f5:8f:9f:9d:1b:cc:4c:
                    25:fb:de:65:9d:07:3e:cd:fc:1e:c0:e9:f9:9a:b0:
                    2f:9b:4b:42:3a:ca:93:a0:c8:d8:ce:2d:1f:b3:da:
                    b5:32:21:0d:f8:0c:be:8b:99:4f:6a:6b:d2:84:49:
                    eb:ea:f8:e3:bb:97:86:37:ae:04:19:f5:af:60:47:
                    20:36:3e:b1:07:a5:62:f7:9e:06:9e:41:53:10:55:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FB:56:D2:F6:E5:53:93:2C:38:5C:24:12:11:B9:46:CC:92:89:C2
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:43:b6:c3:eb:ce:5d:2e:26:87:92:ba:c3:91:2b:53:cb:68:
         01:9e:80:05:9a:2c:ff:23:3c:78:53:cc:fc:9b:9e:c6:b7:e8:
         7f:ad:a8:33:a4:e3:1b:7f:36:80:ff:9f:fb:18:d3:bd:4a:76:
         67:77:7a:04:e3:3f:5e:f5:95:2e:d4:ba:c0:e0:37:42:09:99:
         c8:c1:ed:93:69:58:63:b3:ce:e5:5c:6a:69:9d:54:36:60:d9:
         dd:12:08:aa:db:9a:3d:b2:4a:3d:84:a7:4c:d4:0f:50:e3:e0:
         d1:39:3e:df:7a:c5:cf:31:ee:9f:59:bb:36:10:2b:3f:38:f9:
         51:85:5d:df:12:e4:f5:c2:57:0b:55:35:6a:d0:c0:d4:05:c0:
         f7:d1:9e:11:62:46:f5:aa:bc:32:71:da:44:b9:b8:10:e9:48:
         e4:a2:70:25:6f:f1:ec:2c:e7:d8:9d:56:25:81:ea:93:8c:53:
         f0:fb:5b:ad:a8:56:4c:53:0d:6a:d7:85:d6:bd:b7:de:23:93:
         ad:3b:67:5d:75:5f:1f:19:0f:8d:24:be:20:b5:4c:7a:e6:1a:
         ee:0c:7d:0d:f2:9c:75:3c:0f:93:92:a3:62:34:70:38:38:27:
         03:cd:bb:af:08:07:a7:27:85:da:bf:43:42:eb:74:aa:af:ac:
         f0:42:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:24 2025 by rpki-client