Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
File:                     3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier:          H48nLTfxKa99sfiEWkmGtbp5kmxluUxoB04RqUtTl5c=
Subject key identifier:   D3:B8:70:CB:A2:97:F4:0E:3F:72:96:0F:9C:A7:50:D2:02:F7:95:62
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       798DC8D7EF26916FDFF5E6BE65499CC15E2A74FE
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:17 +0000
ROA not before:           Wed 30 Apr 2025 18:20:17 +0000
ROA not after:            Wed 29 Apr 2026 18:25:17 +0000
asID:                     270793
IP address blocks:        201.159.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8d:c8:d7:ef:26:91:6f:df:f5:e6:be:65:49:9c:c1:5e:2a:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:17 2025 GMT
            Not After : Apr 29 18:25:17 2026 GMT
        Subject: CN=D3B870CBA297F40E3F72960F9CA750D202F79562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:7f:9b:59:67:1d:38:87:a2:4f:4c:a2:99:
                    cb:82:46:fd:b4:9b:22:93:ff:8a:bc:70:cb:a8:97:
                    d0:d4:bf:89:01:8c:76:a6:ce:76:14:75:41:53:76:
                    88:72:4d:71:0e:b0:1b:19:fe:73:b3:27:8e:a9:d5:
                    99:15:6e:f1:9d:4f:b4:aa:56:ea:58:73:ad:9c:ff:
                    2a:67:cd:06:02:c1:dc:d6:58:b4:11:c9:57:c9:4d:
                    39:f1:4d:d3:c0:3b:94:bd:74:b4:9a:78:9a:6a:63:
                    a9:d9:de:c0:e9:40:5a:80:c6:0f:92:1b:31:b8:d9:
                    9d:34:d4:d7:0c:9d:db:8d:f7:f0:fd:d1:e6:96:9b:
                    f0:65:f2:35:82:06:30:b8:f9:e8:78:93:42:34:10:
                    ff:46:9d:da:15:fd:ef:80:28:ec:37:cb:f9:a5:d7:
                    d0:ea:31:f8:a2:46:4b:f7:81:e8:cf:2c:86:d3:6a:
                    8b:cf:08:6a:b9:e7:9a:f5:eb:91:72:31:1b:22:99:
                    e0:5f:74:b8:d6:92:e0:cf:4d:aa:69:94:cf:cf:7b:
                    52:d6:e3:b1:26:6d:49:62:ee:0e:4c:ba:7f:d4:8f:
                    d8:6a:da:94:00:1e:4a:21:a2:3c:8e:86:b8:f7:72:
                    54:87:1e:e6:dc:7a:27:11:42:3c:57:fa:0a:1a:87:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:70:CB:A2:97:F4:0E:3F:72:96:0F:9C:A7:50:D2:02:F7:95:62
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32332d3233203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:81:c6:4a:b1:39:50:ef:ef:d6:a1:39:7c:78:8a:8e:ec:
         fa:b5:ac:0b:a8:43:21:fa:1f:c0:a0:c6:f2:ec:da:da:2e:14:
         f4:10:71:23:b5:3a:b7:ac:43:01:ad:55:91:fb:10:c7:9a:4b:
         b2:89:c4:a1:a2:60:a3:aa:e8:f6:dc:06:8d:7f:31:d9:15:c1:
         2a:8f:c6:ad:cb:d6:55:80:69:89:27:25:37:f7:26:8a:7f:22:
         15:47:68:3c:a5:a9:f7:8c:0a:43:cf:c7:a2:b3:ec:fe:a3:14:
         21:60:82:78:3a:d9:ce:60:9e:b2:e8:53:c1:d2:bb:5d:31:9c:
         34:6e:0a:fd:44:6e:f9:51:db:2a:e0:20:d5:86:fe:56:d2:ee:
         73:85:96:64:36:54:75:96:bd:a3:c1:80:9d:77:ea:df:e4:ea:
         ef:ec:4d:5f:55:d5:7e:4a:00:79:c8:37:51:24:2d:52:6c:d5:
         00:a3:d3:45:68:88:98:45:a9:bc:64:2b:08:42:b0:a9:64:4e:
         b4:13:ec:a5:9d:2e:99:c8:a7:82:d3:c7:e0:af:e4:ea:9f:5b:
         15:5b:1a:f2:3c:9f:ea:f6:ba:bd:57:8a:56:99:ab:89:70:a5:
         1e:3a:d5:50:32:8e:28:8f:ae:07:ea:d8:b0:64:ae:7e:6d:b6:
         14:ed:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:57:12 2025 by rpki-client