Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          x9ggGp8jo8UJH1JB/oIEGS2WWdtQBKQue/xC4k+fthU=
Subject key identifier:   C9:FD:E1:2B:39:98:98:55:2A:F4:3B:AB:F2:27:C1:44:5F:C4:63:32
Certificate issuer:       /CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
Certificate serial:       6BF11BB0DDF2A3B07EA54591D9AA3624CD146492
Authority key identifier: 68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
Signing time:             Mon 30 Jun 2025 01:10:20 +0000
ROA not before:           Mon 30 Jun 2025 01:05:20 +0000
ROA not after:            Mon 29 Jun 2026 01:10:20 +0000
asID:                     271420
IP address blocks:        181.233.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f1:1b:b0:dd:f2:a3:b0:7e:a5:45:91:d9:aa:36:24:cd:14:64:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F
        Validity
            Not Before: Jun 30 01:05:20 2025 GMT
            Not After : Jun 29 01:10:20 2026 GMT
        Subject: CN=C9FDE12B399898552AF43BABF227C1445FC46332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:b1:13:53:4c:9e:29:39:3b:04:f6:cd:41:
                    78:ca:9d:65:75:ec:c8:49:17:aa:94:28:ca:bb:45:
                    d2:35:4b:1b:42:2f:5e:a2:82:ba:1e:91:e5:e8:81:
                    e8:a7:09:b8:bb:7e:d2:e3:5e:27:0c:40:6e:e8:66:
                    b5:4b:df:7d:a1:ec:cb:b2:18:66:1e:4d:77:51:26:
                    93:f8:48:d3:01:1a:35:6c:1c:c4:35:bd:0e:c2:9b:
                    b1:6c:05:fe:5a:f7:26:53:81:f1:ae:17:0f:ca:38:
                    d4:cb:ce:8e:d4:9e:4f:36:07:eb:81:51:33:65:6b:
                    d0:3a:cd:e6:9d:31:44:8c:78:f1:51:63:99:6f:c0:
                    80:21:6c:d3:0a:e2:7d:dd:f4:b8:25:ea:e1:4f:bc:
                    46:3c:47:99:e8:b8:88:e5:6e:cd:ab:9e:0b:98:09:
                    24:31:58:55:1c:0a:ad:67:c7:23:73:cf:74:4b:e5:
                    99:fc:0a:4a:57:12:a5:78:18:4f:69:98:b5:88:37:
                    cc:6d:9f:a9:21:0b:3c:0c:a8:0a:b6:aa:e6:c2:b3:
                    8c:e2:ea:28:52:b1:e1:f9:11:7f:68:08:9e:f4:13:
                    63:a2:d8:01:87:7b:66:1a:b3:80:d7:6a:f3:a0:e7:
                    50:82:4c:51:05:8d:66:16:bc:f7:48:54:f9:ba:db:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:E1:2B:39:98:98:55:2A:F4:3B:AB:F2:27:C1:44:5F:C4:63:32
            X509v3 Authority Key Identifier:
                keyid:68:D2:D3:D7:C2:F7:A7:3F:8D:5D:22:BC:53:0D:02:F8:A3:64:46:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68D2D3D7C2F7A73F8D5D22BC530D02F8A364461F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:2c:47:6b:8d:07:8b:40:82:cd:33:3e:a2:e7:13:49:fe:
         f5:b1:19:96:12:4c:02:79:69:82:4e:fe:ef:07:fa:1e:c2:b7:
         0b:4a:3e:90:8e:f6:ad:ec:d6:3b:8f:b6:ab:21:4d:5f:52:2b:
         3f:2d:51:aa:d6:49:95:02:94:52:28:af:0b:4b:12:4e:b7:e9:
         5f:36:48:77:fa:52:92:0c:57:65:91:46:de:88:70:91:1c:44:
         bf:15:39:c3:14:54:96:ad:c5:b1:b6:c5:d7:ca:10:a2:e4:c0:
         70:57:3d:b5:55:c6:b0:91:60:8a:82:5e:58:f6:f0:bd:62:90:
         58:ca:d3:7b:49:89:ae:90:ed:18:5b:92:e4:e9:42:1a:e7:ca:
         39:0e:36:ad:a4:9b:81:7b:a4:f4:a9:91:16:ff:61:25:ef:d9:
         96:b2:b6:a0:64:3c:69:fb:18:10:a1:e7:85:bc:c0:2a:4c:5d:
         4a:d6:2f:04:46:ad:56:18:9f:6b:0e:53:6d:12:c5:8f:b1:61:
         0a:f3:2e:7f:42:f8:0f:b5:cb:4c:e2:4a:36:29:50:7c:2a:f0:
         b7:e2:71:2f:a2:2e:4a:4a:85:51:2b:8b:30:27:48:8f:4d:a2:
         52:81:64:4c:97:eb:77:1e:70:0f:02:0b:99:3b:17:4e:60:ff:
         a9:2f:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:58:50 2025 by rpki-client