Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323632353335.roa
File:                     3230312e3135392e3131362e302f32322d3232203d3e20323632353335.roa (raw, json)
Hash identifier:          pEaLUr5bE1jH/D46oIlVlBg0BxIYTtOq2l3+iP7wGj4=
Subject key identifier:   0D:6A:9A:3D:F8:B2:06:A8:06:7A:13:9A:44:5A:5A:23:7F:E8:F0:21
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       34274F36C01F778DA571D4183E2F4BA5AE8A5C5C
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323632353335.roa
Signing time:             Mon 23 Jun 2025 13:53:39 +0000
ROA not before:           Mon 23 Jun 2025 13:48:39 +0000
ROA not after:            Mon 22 Jun 2026 13:53:39 +0000
asID:                     262535
IP address blocks:        201.159.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 20:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:27:4f:36:c0:1f:77:8d:a5:71:d4:18:3e:2f:4b:a5:ae:8a:5c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Jun 23 13:48:39 2025 GMT
            Not After : Jun 22 13:53:39 2026 GMT
        Subject: CN=0D6A9A3DF8B206A8067A139A445A5A237FE8F021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:72:91:f6:6b:8c:66:07:c7:c5:5f:63:6b:
                    ee:dd:ea:0e:99:ad:2e:6a:19:29:7e:1f:cf:9f:b3:
                    36:d3:c9:46:42:9f:68:2a:93:a3:08:b2:97:c3:46:
                    ce:7c:c7:c2:bf:fa:84:e7:bf:24:c9:55:8f:fb:a7:
                    76:24:fc:87:17:a8:74:67:e7:b6:32:ec:b0:5a:a4:
                    e5:fc:27:df:86:d0:f1:7e:53:78:83:89:52:54:c9:
                    32:86:52:5c:1c:eb:c6:80:72:84:7b:cd:98:b6:07:
                    63:8b:02:03:54:1c:64:34:e7:32:55:9f:bc:1c:99:
                    3d:2f:0b:91:73:47:d1:df:8f:71:7a:fd:fe:5d:30:
                    05:6a:64:27:af:0f:c6:6a:d7:71:4f:44:62:81:7d:
                    52:b0:61:57:1f:10:36:53:bb:8f:74:0c:9e:16:f2:
                    1e:ad:14:7f:b9:38:cd:a9:d1:0e:92:b5:e7:ed:bb:
                    18:73:a6:83:d4:a0:4f:58:0a:6c:0c:d7:91:0b:33:
                    50:f4:93:f5:ae:07:4a:bd:a8:ef:69:d6:a3:e0:c0:
                    19:d9:76:30:df:7a:ad:5b:55:dd:6a:8c:d3:c8:50:
                    7f:84:9d:d4:ff:ba:c1:be:93:57:6c:00:7e:44:35:
                    20:62:97:36:8e:10:6a:00:0a:2c:be:be:69:eb:34:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6A:9A:3D:F8:B2:06:A8:06:7A:13:9A:44:5A:5A:23:7F:E8:F0:21
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3230312e3135392e3131362e302f32322d3232203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:51:b6:8c:10:cf:46:ad:3c:ed:bd:a1:00:de:70:cd:87:84:
         c9:00:88:81:5f:13:5c:3c:ea:dd:5b:cf:3c:0b:46:5e:90:28:
         2c:38:5b:73:50:ac:26:1f:12:02:55:79:73:54:62:0a:b5:ec:
         46:bf:41:6f:9c:0c:49:de:de:ae:aa:78:b5:b1:ef:e7:49:c9:
         71:79:17:4d:82:b5:ff:21:36:25:f0:7f:0a:07:43:b5:97:ec:
         c6:64:a6:9a:90:e6:ae:8d:b2:81:01:11:8b:15:e3:35:d4:0e:
         13:84:01:d6:af:a3:97:41:9f:f1:a9:93:8e:aa:2b:5b:68:2f:
         5f:09:60:d6:05:67:80:e4:98:18:45:d3:1c:85:a7:35:2b:6f:
         95:51:66:7b:68:a7:b0:d0:c7:ed:19:41:e1:0f:cf:e6:c6:6b:
         49:fa:e5:52:80:dd:57:2e:84:aa:67:56:2b:c0:d8:c2:9a:6d:
         41:db:79:c0:da:94:bf:84:87:7e:7b:33:b4:00:c8:d1:cc:3e:
         f1:f6:58:5b:b2:55:2e:0d:5a:fc:93:d6:36:c4:f1:61:6f:7a:
         e8:2f:a9:c6:d9:c7:be:4a:dc:d0:37:cb:c0:af:ac:df:a6:49:
         e2:52:31:7d:8e:66:58:2d:69:8a:6b:ef:0b:f3:11:1f:5d:26:
         00:f4:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:04:05 2025 by rpki-client