Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e36322e34382e302f32302d3234203d3e20323632373835.roa
File:                     3230312e36322e34382e302f32302d3234203d3e20323632373835.roa (raw, json)
Hash identifier:          RySfvrOWmVJc8PdCmFefcFGWaA/dyPQ3iV+iN8pO2+8=
Subject key identifier:   04:4A:20:9E:9F:7F:7C:E1:81:C5:5D:E9:A3:54:93:6F:CA:A3:8C:E9
Certificate issuer:       /CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
Certificate serial:       3399FD425B3EF470D36332E08C702E4F68485645
Authority key identifier: 46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e36322e34382e302f32302d3234203d3e20323632373835.roa
Signing time:             Mon 18 Aug 2025 00:08:03 +0000
ROA not before:           Mon 18 Aug 2025 00:03:03 +0000
ROA not after:            Mon 17 Aug 2026 00:08:03 +0000
asID:                     262785
IP address blocks:        201.62.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl
                          rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:99:fd:42:5b:3e:f4:70:d3:63:32:e0:8c:70:2e:4f:68:48:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461D92A9E8A42D313AC69764D8DC730E87AAEC4F
        Validity
            Not Before: Aug 18 00:03:03 2025 GMT
            Not After : Aug 17 00:08:03 2026 GMT
        Subject: CN=044A209E9F7F7CE181C55DE9A354936FCAA38CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:3a:b6:c3:ed:cc:4f:e6:6a:a1:d6:83:32:
                    98:94:c4:84:61:4e:d5:bd:11:69:56:1c:a4:a1:ac:
                    11:2a:1a:9c:a7:86:31:0a:ee:53:e1:79:7b:4c:a4:
                    c4:53:d8:92:40:ed:e8:2a:09:c7:13:9d:a2:d3:b0:
                    48:e8:d9:e0:b0:9a:0e:44:66:a5:db:11:51:c5:99:
                    16:ea:99:a0:e5:0e:70:45:3a:fd:71:f0:b3:a2:b0:
                    d6:ae:da:e9:7c:05:21:48:2b:bf:19:f5:f1:00:4e:
                    88:a6:a8:a7:4b:83:b5:0c:cb:e1:22:29:ae:54:79:
                    03:2a:dd:16:82:57:4e:02:7a:52:60:19:86:64:15:
                    92:39:4c:91:c4:cb:35:aa:81:04:34:7f:db:ff:7e:
                    45:4e:81:dc:a8:a1:2e:f3:32:f4:5c:a6:96:63:a6:
                    95:f7:1c:a5:f7:9a:08:36:64:01:c0:b6:cf:03:30:
                    3c:64:d7:bd:fb:b7:b2:14:13:19:15:a4:8b:ff:4a:
                    16:45:01:ac:a8:f4:84:93:b6:6d:93:8b:85:fa:36:
                    f5:39:1f:3e:3e:7a:d4:7f:61:2f:ed:8e:1a:72:b5:
                    2e:22:3a:b3:82:8f:67:32:7a:91:69:41:ce:9e:c2:
                    e5:c6:e6:a5:91:23:60:be:4c:ad:ee:cc:93:20:cb:
                    08:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:20:9E:9F:7F:7C:E1:81:C5:5D:E9:A3:54:93:6F:CA:A3:8C:E9
            X509v3 Authority Key Identifier:
                keyid:46:1D:92:A9:E8:A4:2D:31:3A:C6:97:64:D8:DC:73:0E:87:AA:EC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/461D92A9E8A42D313AC69764D8DC730E87AAEC4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPUDDij6NEPYDDoGhUMiosZdXqTayX5MBFcnZDQDiqn8/0/3230312e36322e34382e302f32302d3234203d3e20323632373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:85:1a:00:e2:8a:f0:7d:08:7e:bd:e3:38:92:ea:c0:aa:4f:
         ca:07:c2:1a:c2:5a:0f:43:d1:08:02:47:f6:50:00:ed:3d:d8:
         36:7f:81:6e:9a:de:1c:9e:26:27:55:0e:0c:aa:8a:18:79:b9:
         ff:a0:c1:53:7f:23:17:81:83:a9:cc:99:2b:50:c5:85:1f:e3:
         c9:32:3e:c3:d3:e2:43:64:d0:0a:6b:d3:c7:a7:b4:76:8e:c9:
         3d:a4:f6:51:f4:ac:e6:95:aa:b2:b5:38:fd:3a:58:4a:6b:99:
         23:a1:62:bc:47:a9:30:e6:b8:9b:1f:11:f9:79:64:63:54:14:
         5a:dc:02:7f:2c:34:3b:f9:44:e9:52:ec:43:d8:53:57:83:86:
         08:56:f0:91:68:0e:f4:a9:ad:3c:f5:6c:00:89:cf:17:08:26:
         b8:32:4f:fc:8d:c2:ff:b4:86:a7:e6:7e:e9:f2:cc:4c:d5:6e:
         10:42:dd:51:f4:ca:90:a3:f6:4c:a7:62:2a:db:62:0d:8f:c3:
         2c:27:22:f6:4c:9d:a9:39:f3:da:fd:21:ee:e9:ec:f9:19:4a:
         bb:9f:dd:74:8d:03:48:ac:7d:31:a5:b5:48:f8:48:6f:d0:78:
         80:64:76:63:64:a3:13:d1:1e:e1:31:55:93:49:e7:bd:bf:02:
         32:02:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:34:26 2025 by rpki-client