Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa
File:                     3230312e32302e3136302e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          15AExHLJbYfnkP2MaQjFBIzIC7WAATi3NwRP07bUBdE=
Subject key identifier:   E0:5E:58:83:D0:86:CE:86:40:B7:9E:48:5F:44:F7:17:C9:D5:F8:44
Certificate issuer:       /CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
Certificate serial:       3BE7326C71F4A8FDB88132F031FBCF73CD710174
Authority key identifier: AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa
Signing time:             Thu 01 May 2025 15:48:08 +0000
ROA not before:           Thu 01 May 2025 15:43:08 +0000
ROA not after:            Thu 30 Apr 2026 15:48:08 +0000
asID:                     28606
IP address blocks:        201.20.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 09:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e7:32:6c:71:f4:a8:fd:b8:81:32:f0:31:fb:cf:73:cd:71:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1
        Validity
            Not Before: May  1 15:43:08 2025 GMT
            Not After : Apr 30 15:48:08 2026 GMT
        Subject: CN=E05E5883D086CE8640B79E485F44F717C9D5F844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:0f:62:f8:55:8a:20:e1:ac:72:a6:c4:53:
                    82:13:c3:4b:49:fb:fd:3e:93:fc:cf:e7:d8:79:97:
                    99:99:d4:25:21:e9:3f:f8:05:90:1d:92:29:55:74:
                    3a:0b:4b:7e:2d:76:80:4e:91:63:c5:64:76:a7:22:
                    cb:0c:16:e9:60:c0:7f:38:24:3a:45:55:78:30:fb:
                    58:77:a9:a9:f5:cd:c5:40:ef:c0:cc:2f:fb:20:8b:
                    71:39:8c:08:db:10:7e:6c:13:1d:57:59:da:ba:0b:
                    24:73:68:08:a9:04:04:00:12:8e:a1:5f:6f:e5:c8:
                    d6:11:4c:12:6c:63:fb:e9:56:11:96:b8:30:c3:ee:
                    12:b3:68:38:5b:4f:39:14:83:3c:1b:e7:7a:66:0b:
                    6b:09:19:06:58:ba:44:c6:40:b1:da:62:ab:76:ec:
                    bc:ae:5d:94:a5:ac:b8:ce:b3:f7:bb:11:ae:9b:d6:
                    df:7f:89:e8:d3:a7:da:ec:a6:59:c1:86:5b:c5:e4:
                    cc:91:5c:a8:86:7c:99:f3:ec:14:b6:72:76:ad:d1:
                    f1:7d:44:86:c6:08:65:b0:be:7e:75:89:ee:d8:74:
                    4e:1a:1b:90:62:ea:8a:2d:f0:c5:e3:f6:09:ec:59:
                    ba:e5:5e:c2:b8:4a:65:5c:a4:43:11:f6:f2:b0:59:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:58:83:D0:86:CE:86:40:B7:9E:48:5F:44:F7:17:C9:D5:F8:44
            X509v3 Authority Key Identifier:
                keyid:AA:C9:16:B9:D4:E8:FD:37:6A:0B:24:2F:7B:7D:C7:C5:E4:E9:BD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC916B9D4E8FD376A0B242F7B7DC7C5E4E9BDD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/1/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:59:5f:0c:ae:ba:96:e5:69:f8:f1:56:53:fd:d1:b9:c0:eb:
         bf:93:09:b7:70:79:94:be:95:f0:41:4c:39:89:64:3b:ad:c8:
         72:61:41:91:24:f6:1b:29:c8:10:4f:e0:07:75:0e:d3:5d:7f:
         b0:54:0f:27:59:66:a1:d4:19:ca:26:b6:9a:d9:55:04:e8:d3:
         c7:58:4a:cd:4e:94:60:dc:49:7e:b5:83:f9:bd:aa:68:ae:74:
         9c:5b:bc:a1:ae:32:51:d1:a9:b5:41:64:dc:49:ba:8f:46:6b:
         d4:b1:f5:18:85:51:80:97:6a:15:44:f0:b2:40:9e:0f:ad:b4:
         d3:4b:63:14:21:33:29:ec:be:8f:54:c6:50:a3:fa:63:47:53:
         a1:54:62:82:30:c8:f7:45:85:16:06:e9:c1:4f:fd:19:f0:77:
         6f:56:82:34:06:b7:eb:5c:94:fc:95:7d:85:f7:6e:d4:a9:45:
         df:3e:12:cc:d6:15:48:13:43:e1:be:5b:84:8a:9f:f5:3e:18:
         0b:97:d7:b7:62:db:5f:72:c4:dd:84:14:fa:a5:2d:a1:3e:87:
         d2:ad:62:9f:4f:00:30:84:10:12:5c:fd:5c:2c:1e:5c:3c:07:
         04:9b:75:a7:a8:8f:9d:3f:b5:0d:bc:63:dd:0d:31:9f:5d:d1:
         d8:74:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:50:39 2025 by rpki-client