Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          KTmZ1lBoJw6zx1UFcwMpoNCD3GmgB2DENnWUqm4ZmQE=
Subject key identifier:   B3:8F:5D:7D:A0:3E:9A:E5:3A:B2:34:DB:82:3B:2C:76:C2:80:3C:EB
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       28265590ED3ED2BCB84B34E989BEF176388244F7
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa
Signing time:             Thu 25 Sep 2025 13:04:14 +0000
ROA not before:           Thu 25 Sep 2025 12:59:14 +0000
ROA not after:            Thu 24 Sep 2026 13:04:14 +0000
asID:                     270793
IP address blocks:        201.159.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:26:55:90:ed:3e:d2:bc:b8:4b:34:e9:89:be:f1:76:38:82:44:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Sep 25 12:59:14 2025 GMT
            Not After : Sep 24 13:04:14 2026 GMT
        Subject: CN=B38F5D7DA03E9AE53AB234DB823B2C76C2803CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:89:97:73:b6:da:ba:01:6d:57:68:23:92:
                    65:f7:ae:7d:04:36:64:2e:e5:f4:91:5a:c1:5c:ab:
                    e9:e7:b9:04:fa:5e:6f:47:ce:a0:2b:ae:ff:f6:de:
                    20:bf:52:d8:ee:17:c6:b6:64:9d:c8:76:65:7d:99:
                    d9:4f:e3:f9:66:fb:1b:df:2d:18:5a:84:1b:8f:9b:
                    6b:29:a7:68:96:87:8c:38:1a:25:d4:b8:64:5e:96:
                    a1:59:82:f7:db:88:1e:32:ab:1b:7b:24:61:45:fe:
                    12:5b:91:7c:86:2c:94:d3:8d:db:b2:d1:04:7f:c0:
                    98:b1:a4:c3:39:9c:d0:c9:1e:29:47:eb:a1:c8:36:
                    4d:1f:a0:2d:96:e3:41:02:7d:9b:af:9b:c1:9c:ea:
                    8b:e4:c7:2c:76:43:d0:3d:76:c0:db:b2:f8:28:f9:
                    38:9c:e9:3f:4d:01:51:96:9f:f7:cc:97:a1:f6:95:
                    99:a6:82:9f:34:d2:d0:81:2b:08:4b:1f:1b:b9:8f:
                    d8:65:60:98:9a:12:15:b5:ca:12:32:f3:2e:19:e9:
                    d6:bc:fe:8f:88:0d:f5:3c:7a:40:dc:e8:41:64:34:
                    62:2b:b3:74:b5:3e:c9:ec:15:92:ed:e2:76:19:e1:
                    27:88:97:ec:fe:25:a0:9e:e9:dd:34:5f:1f:9f:3e:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8F:5D:7D:A0:3E:9A:E5:3A:B2:34:DB:82:3B:2C:76:C2:80:3C:EB
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136322e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:15:de:82:fa:77:ff:49:97:b2:fc:ab:d7:22:7e:5b:5e:
         a2:ab:22:84:94:a4:4d:31:db:6d:91:2f:61:33:38:64:87:47:
         31:30:77:69:e4:ad:1f:70:e8:28:6b:26:93:d2:2e:5a:01:89:
         58:99:16:7a:31:8a:ee:69:be:18:8f:fd:64:79:49:24:a8:c7:
         1c:6c:b0:dd:a7:e8:66:09:77:98:b0:c6:ec:30:89:00:94:bd:
         9c:12:1e:22:ce:1d:2f:d4:b6:4e:34:12:e9:fc:59:5c:b4:40:
         1a:e8:29:63:9e:46:c9:8d:27:fa:08:97:2a:b0:47:d3:e3:e8:
         fd:fc:7f:be:23:62:e6:e3:66:f3:5e:c7:e7:a3:6a:bb:3f:0d:
         e2:b9:fd:42:f6:fc:ec:b0:28:2b:90:2f:10:4b:b3:0a:e7:f3:
         90:c5:c5:7d:78:bc:17:8b:04:31:67:2e:17:6e:b4:26:0d:42:
         9a:0d:b4:22:96:f0:c9:a6:d5:6c:6b:dc:e8:04:12:4c:36:cb:
         09:86:b3:1d:4f:17:af:03:55:b7:c1:43:00:bc:a4:06:ac:b0:
         00:ec:66:a3:35:fc:5f:01:52:f1:be:05:e0:37:cf:d8:0a:75:
         6b:69:07:14:1d:f0:d6:25:e9:6e:01:01:3a:c0:51:c1:08:33:
         2f:cc:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:27 2025 by rpki-client