Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa
File:                     3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa (raw, json)
Hash identifier:          bTWOO4wMvbqej9v9hS54DGbiTULpIB10RJoQ2OsKGbM=
Subject key identifier:   50:40:AC:66:8A:99:89:DD:E9:D0:CA:6B:A3:7C:EE:8B:90:79:76:DE
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       789A0E973F8329783F16810A03DB8CE3E86AA8E2
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:06 +0000
ROA not before:           Thu 26 Jun 2025 18:15:06 +0000
ROA not after:            Thu 25 Jun 2026 18:20:06 +0000
asID:                     266651
IP address blocks:        128.201.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9a:0e:97:3f:83:29:78:3f:16:81:0a:03:db:8c:e3:e8:6a:a8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:06 2025 GMT
            Not After : Jun 25 18:20:06 2026 GMT
        Subject: CN=5040AC668A9989DDE9D0CA6BA37CEE8B907976DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:8e:1a:0d:6a:9d:84:cb:d7:56:d0:3e:2e:
                    70:8b:2b:3e:64:aa:a4:b1:77:52:8f:d1:c2:72:a1:
                    6b:84:09:5a:51:26:bd:57:e1:78:79:20:e6:36:57:
                    06:85:86:8b:e1:da:49:87:66:00:38:20:4f:69:50:
                    38:6f:1c:0c:ae:38:ca:7d:27:8c:58:38:0b:69:aa:
                    b5:b0:f7:59:e9:d5:e0:3a:b9:77:ea:0c:ab:27:93:
                    22:91:6c:87:65:f2:d2:7c:7b:91:b5:22:6e:7f:cb:
                    b9:b9:ba:09:da:01:5a:e5:41:ba:80:bc:5b:12:6c:
                    df:e3:76:17:27:c6:03:1f:fb:97:0d:d0:b6:9a:98:
                    0a:7e:fe:67:ba:7a:d1:06:98:33:41:fa:ad:67:dd:
                    3e:3c:cc:e7:10:48:e9:df:4c:9b:b2:02:1e:01:59:
                    1a:2e:46:4e:46:d9:5f:f8:ad:cf:ce:b7:ab:e2:17:
                    da:ae:e2:b5:81:34:03:8e:f8:f8:b2:0b:59:f8:a3:
                    88:b2:5c:78:8b:4c:1b:c4:e7:2a:f4:22:b1:41:63:
                    69:64:d5:e4:d7:a6:5b:0c:52:55:18:f1:bd:c4:2d:
                    7b:d6:b6:38:de:26:3d:6a:b9:70:b9:c1:b6:46:40:
                    79:b8:cb:df:60:d4:92:5a:39:cb:6e:f2:13:4d:03:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:40:AC:66:8A:99:89:DD:E9:D0:CA:6B:A3:7C:EE:8B:90:79:76:DE
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:a3:7a:7d:cf:91:0c:ea:cb:b8:fa:f0:94:b6:2e:41:da:5d:
         2e:32:3e:6e:94:24:13:5d:e7:29:b5:8a:94:57:1e:62:df:8c:
         e3:71:41:7c:cc:fa:dc:cf:f4:d6:35:02:f9:67:e6:e9:f8:80:
         d6:60:55:a7:97:3c:2c:d5:75:b2:90:f9:07:00:9d:27:e3:c1:
         22:4d:93:d4:22:eb:64:13:c3:c1:a8:a5:01:d3:f2:2b:0e:3a:
         9d:55:65:35:d7:6f:1b:2d:67:85:0f:e2:26:9b:97:4d:7d:d9:
         ef:c8:56:68:2d:60:bd:f7:94:a5:09:0c:8f:0f:be:82:7f:70:
         e6:ac:c3:a1:b7:bb:52:b7:dc:31:10:02:ed:2e:b9:84:24:9e:
         57:8e:20:bd:e8:e3:92:61:f9:76:ad:a2:2c:10:a2:ae:fa:20:
         54:d2:23:d7:c1:3c:b0:5b:25:6f:5d:06:f6:aa:cf:58:df:36:
         77:9e:df:34:c4:cf:4b:fc:dd:a7:7a:2d:f6:e4:41:a3:73:50:
         a5:4f:a1:9e:bb:ef:41:39:17:87:0f:83:2b:40:84:52:49:cc:
         74:8d:fc:b3:cb:e0:6a:5b:1f:82:b9:3a:0b:74:66:99:7e:4a:
         63:1b:48:82:4e:11:81:31:d9:54:f3:4b:50:65:90:42:79:db:
         6d:39:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:53:58 2025 by rpki-client