Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa
File:                     3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa (raw, json)
Hash identifier:          EyaKfNszNHavsJyuqerPUX2W9LUCVQCYy8yCBUH6NwI=
Subject key identifier:   15:E9:A6:FC:AA:16:57:14:FD:11:E3:C5:D5:62:1D:95:09:71:89:D7
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       39CDA3DBE923E902B2607C70CCBEDCB6DBFC8812
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:08 +0000
ROA not before:           Thu 26 Jun 2025 18:15:08 +0000
ROA not after:            Thu 25 Jun 2026 18:20:08 +0000
asID:                     266651
IP address blocks:        128.201.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 02:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cd:a3:db:e9:23:e9:02:b2:60:7c:70:cc:be:dc:b6:db:fc:88:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:08 2025 GMT
            Not After : Jun 25 18:20:08 2026 GMT
        Subject: CN=15E9A6FCAA165714FD11E3C5D5621D95097189D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:cb:46:9e:c4:3c:97:87:be:3b:a5:19:6f:
                    ef:4c:f9:c2:c6:b3:84:c4:01:d1:b0:cc:55:71:1d:
                    f0:57:6c:aa:c2:e3:a5:f4:4d:44:1c:d5:6c:2d:ba:
                    03:26:31:c6:c5:4f:5b:70:36:03:d5:6b:bf:79:3d:
                    52:14:84:71:3e:03:01:8c:36:29:23:ef:7a:b7:ea:
                    11:46:39:6f:77:a9:68:f7:b6:25:5f:3e:5a:88:ec:
                    be:f3:f3:cd:60:9d:cc:2f:99:aa:08:f4:0e:39:95:
                    2a:d9:cf:54:11:73:a1:89:99:a0:fb:d9:d2:da:38:
                    f1:37:c2:04:84:8c:34:08:0c:dd:1a:7b:8a:fe:14:
                    1a:6a:37:b7:a4:fa:1e:a5:57:36:ac:5f:77:cd:96:
                    94:e1:20:62:ee:a2:0d:23:b0:17:e2:5a:26:32:fe:
                    0b:c6:12:21:e7:dd:7b:27:30:7e:b5:36:ef:8a:c4:
                    b0:ce:8f:a6:93:c9:a1:e6:e1:29:d3:d2:e2:bb:01:
                    c7:9d:75:6f:78:72:d2:96:31:4a:84:b4:56:c6:b2:
                    7b:af:c0:17:58:99:04:6c:26:00:58:35:1f:1b:f6:
                    d2:14:df:a2:bb:81:1e:2b:b3:08:67:07:40:13:b7:
                    77:0a:2b:88:8b:79:eb:77:8d:79:ba:7f:f9:7c:88:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:A6:FC:AA:16:57:14:FD:11:E3:C5:D5:62:1D:95:09:71:89:D7
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34332e302f32342d3234203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:1e:d4:4e:39:d4:3a:78:08:0d:3d:cd:0e:ec:79:4e:1e:
         9f:74:56:76:94:df:ab:31:dc:89:72:1c:68:d6:b8:e0:93:b9:
         8a:85:45:18:a1:b3:b7:a5:25:a3:3f:ff:6d:99:8c:ae:3c:d5:
         14:03:fd:3f:f0:f1:16:ba:e6:cc:3c:32:06:30:f3:b3:0b:b8:
         d3:05:15:5c:ce:f7:7a:bb:30:70:86:75:03:dd:15:a6:ce:44:
         6a:23:6d:10:49:72:a8:fd:0c:70:e3:e8:a7:bf:b3:41:77:4a:
         fe:de:1d:57:03:be:e7:9c:b1:1c:e6:57:e7:94:3a:21:e1:73:
         39:84:df:c9:87:91:1a:ab:f4:59:c9:5c:80:4b:e9:39:60:2d:
         33:8c:e3:e4:1f:24:6e:66:9b:65:52:92:f4:9b:23:52:49:e2:
         57:f9:88:64:78:b9:a0:5d:b0:45:86:de:50:ff:5f:80:e9:a3:
         b0:ca:30:3d:37:7f:69:4d:db:c9:8f:27:51:f0:a2:0d:62:bb:
         82:14:05:ae:20:e3:f3:38:11:4b:7f:0a:67:d7:02:ae:14:b3:
         b2:ea:87:6d:bf:3b:ff:ae:fc:05:5b:4a:c7:02:00:bb:96:2d:
         a7:aa:a9:86:28:4a:b0:45:33:84:bc:a3:4e:ae:dd:24:a5:0d:
         8e:b6:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:26:02 2025 by rpki-client