Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34362e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          3V4pYyCDGUJP100+htvjAWy36UQo4vP258ijHYsGEAQ=
Subject key identifier:   6E:B2:E9:66:DF:2B:AA:AC:1C:B8:A1:35:DE:03:FB:21:BA:70:28:4B
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       6F9A5A4FE49DD9FA589FD672BBA380CAC9871A3E
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32342d3234203d3e20323731343230.roa
Signing time:             Mon 30 Jun 2025 01:10:22 +0000
ROA not before:           Mon 30 Jun 2025 01:05:22 +0000
ROA not after:            Mon 29 Jun 2026 01:10:22 +0000
asID:                     271420
IP address blocks:        181.233.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9a:5a:4f:e4:9d:d9:fa:58:9f:d6:72:bb:a3:80:ca:c9:87:1a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:22 2025 GMT
            Not After : Jun 29 01:10:22 2026 GMT
        Subject: CN=6EB2E966DF2BAAAC1CB8A135DE03FB21BA70284B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:87:26:39:a9:e1:fe:48:10:fb:91:c4:d8:a9:
                    c7:2c:0c:4f:51:83:ec:ac:20:d4:f2:52:94:36:b1:
                    ac:11:70:9d:44:02:9f:ff:3d:ac:da:36:72:5d:03:
                    68:ca:0a:cf:95:ac:43:91:b0:f3:d4:10:5a:39:fa:
                    46:a5:bd:0e:7b:26:7a:be:4e:48:19:38:8f:94:d9:
                    a5:72:b7:9a:89:32:ca:48:a1:1b:2e:a6:5c:fc:71:
                    4e:50:d6:56:47:74:1f:9b:5c:3b:7e:c0:5b:e2:c0:
                    ec:df:82:f1:a4:15:5f:f1:7c:16:bd:c3:8d:d0:86:
                    0c:4d:de:37:01:2d:70:60:53:01:57:04:f7:83:77:
                    48:ba:0b:44:9c:da:26:16:69:2f:af:44:e5:10:0d:
                    1e:82:24:77:85:c5:dc:99:02:76:19:8f:9a:c8:41:
                    73:46:45:b5:3f:14:43:13:23:97:c7:91:54:c6:49:
                    fd:0c:54:e9:ec:c6:24:77:be:a1:38:2b:72:af:f3:
                    3e:fd:a8:0c:34:84:d9:e3:fa:f8:78:84:66:96:13:
                    f5:6f:11:00:3b:5f:1b:82:91:a4:5d:59:50:aa:3c:
                    31:90:49:01:e0:ef:6c:48:c1:40:9c:69:ed:57:82:
                    d4:5a:74:83:ea:6f:72:62:62:93:7a:0f:a3:74:af:
                    42:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:E9:66:DF:2B:AA:AC:1C:B8:A1:35:DE:03:FB:21:BA:70:28:4B
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34362e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:09:1e:19:1e:d1:f9:0f:75:31:93:e1:f2:1b:cb:31:92:d4:
         83:f9:19:24:39:72:9b:b6:8a:51:db:78:82:46:86:e5:52:3c:
         c1:51:e1:4c:ee:fb:17:62:5b:b3:be:8c:04:1c:d2:85:32:b7:
         ca:19:f7:8c:2c:93:15:26:06:54:85:a1:69:c6:99:d8:1f:08:
         4d:be:76:47:34:5c:51:d4:e8:ba:05:32:0a:18:ad:fa:dc:f8:
         b4:bc:16:70:64:7f:e3:a7:f2:15:a6:32:9d:ae:67:c6:fb:74:
         e6:24:87:2a:5d:bb:e2:38:c8:e4:10:65:1d:93:d4:0a:93:13:
         ae:6a:a3:b2:61:1c:cb:13:4c:dd:bb:d7:53:55:c2:4d:6d:18:
         c6:10:bd:b7:c9:99:9f:e7:ea:46:11:bd:e2:b8:e9:37:e8:5d:
         0a:5e:e4:6b:32:dd:2e:98:79:84:84:b8:ab:20:0e:47:97:4e:
         0c:6b:94:b9:5f:81:bc:41:8d:79:ee:f7:6c:41:1b:92:9e:df:
         5c:f8:56:e1:c2:f7:78:e8:63:f6:17:10:4a:c0:6c:7d:11:25:
         11:0f:5c:19:b6:5f:ae:ee:e5:f9:7c:bd:bb:f2:80:57:1a:27:
         0c:0e:98:7e:2b:56:d8:8f:94:35:ff:84:db:4d:8d:e0:9b:c4:
         e9:59:cb:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb5paT+Sd2fpYn9Zyu6OAysmHGj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhEMkQzRDdDMkY3QTczRjhENUQyMkJDNTMwRDAyRjhB
MzY0NDYxRjAeFw0yNTA2MzAwMTA1MjJaFw0yNjA2MjkwMTEwMjJaMDMxMTAvBgNV
BAMTKDZFQjJFOTY2REYyQkFBQUMxQ0I4QTEzNURFMDNGQjIxQkE3MDI4NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7hyY5qeH+SBD7kcTYqccsDE9R
g+ysINTyUpQ2sawRcJ1EAp//PazaNnJdA2jKCs+VrEORsPPUEFo5+kalvQ57Jnq+
TkgZOI+U2aVyt5qJMspIoRsuplz8cU5Q1lZHdB+bXDt+wFviwOzfgvGkFV/xfBa9
w43QhgxN3jcBLXBgUwFXBPeDd0i6C0Sc2iYWaS+vROUQDR6CJHeFxdyZAnYZj5rI
QXNGRbU/FEMTI5fHkVTGSf0MVOnsxiR3vqE4K3Kv8z79qAw0hNnj+vh4hGaWE/Vv
EQA7XxuCkaRdWVCqPDGQSQHg72xIwUCcae1XgtRadIPqb3JiYpN6D6N0r0LPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbrLpZt8rqqwcuKE13gP7IbpwKEswHwYDVR0j
BBgwFoAUaNLT18L3pz+NXSK8Uw0C+KNkRh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC82OEQyRDNEN0MyRjdBNzNGOEQ1RDIyQkM1MzBEMDJGOEEzNjQ0NjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4RDJEM0Q3QzJGN0E3M0Y4
RDVEMjJCQzUzMEQwMkY4QTM2NDQ2MUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzODMxMmUzMjMzMzMyZTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16S4wDQYJKoZIhvcNAQELBQADggEBAMcJHhke
0fkPdTGT4fIbyzGS1IP5GSQ5cpu2ilHbeIJGhuVSPMFR4Uzu+xdiW7O+jAQc0oUy
t8oZ94wskxUmBlSFoWnGmdgfCE2+dkc0XFHU6LoFMgoYrfrc+LS8FnBkf+On8hWm
Mp2uZ8b7dOYkhypdu+I4yOQQZR2T1AqTE65qo7JhHMsTTN2711NVwk1tGMYQvbfJ
mZ/n6kYRveK46TfoXQpe5Gsy3S6YeYSEuKsgDkeXTgxrlLlfgbxBjXnu92xBG5Ke
31z4VuHC93joY/YXEErAbH0RJREPXBm2X67u5fl8vbvygFcaJwwOmH4rVtiPlDX/
hNtNjeCbxOlZy0A=
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:03:23 2025 by rpki-client