Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3234203d3e203532353332.roa
File:                     3230312e34392e3232382e302f32322d3234203d3e203532353332.roa (raw, json)
Hash identifier:          eXlDeqx/uIJYF2z6711Ka9h3ZAq+z/JbyUI6PROlpnk=
Subject key identifier:   48:06:7A:03:34:54:89:E9:54:AC:74:E3:95:82:25:D0:1F:22:67:44
Certificate issuer:       /CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
Certificate serial:       70ABEE970E3457360A1D05F25857B0BC4E5B32E1
Authority key identifier: 2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3234203d3e203532353332.roa
Signing time:             Fri 13 Jun 2025 12:52:01 +0000
ROA not before:           Fri 13 Jun 2025 12:47:01 +0000
ROA not after:            Fri 12 Jun 2026 12:52:01 +0000
asID:                     52532
IP address blocks:        201.49.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ab:ee:97:0e:34:57:36:0a:1d:05:f2:58:57:b0:bc:4e:5b:32:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C1CC943537E72AA599BC9B940FB180BA89C2D1A
        Validity
            Not Before: Jun 13 12:47:01 2025 GMT
            Not After : Jun 12 12:52:01 2026 GMT
        Subject: CN=48067A03345489E954AC74E3958225D01F226744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:8d:47:4a:bb:5b:d8:e6:4d:77:95:46:14:
                    36:38:01:d2:6a:84:75:50:b7:99:05:2a:01:d4:3b:
                    03:f5:7a:8a:ef:bd:bc:b7:7d:d3:59:34:7f:cd:be:
                    96:8e:68:89:01:54:02:0f:e9:d2:1e:5c:bc:ef:c1:
                    63:72:bc:ea:c6:d5:f2:09:e3:2f:f6:7f:cd:f5:51:
                    79:ab:91:28:25:dc:5d:1e:a0:d6:28:46:b0:25:81:
                    d2:89:22:53:1b:66:9d:57:94:b5:e2:00:e4:59:d6:
                    86:fe:eb:a5:e7:da:d5:27:5b:83:31:8d:b9:d0:c0:
                    8f:d1:ae:65:53:c9:14:e1:dc:65:5f:f2:a9:c4:7b:
                    fc:74:60:50:1a:a8:fa:e4:d7:91:3e:26:98:8d:75:
                    1f:8c:54:9d:7d:92:bb:af:67:ad:dc:13:dc:e6:3e:
                    63:39:a5:1a:56:e5:d0:df:d9:f2:e4:08:ff:ec:9d:
                    30:a6:d6:20:8e:5b:be:ea:fb:0a:58:c8:e1:4f:ec:
                    95:cb:f9:eb:bf:ef:e4:0f:5d:ff:5c:5f:0a:40:60:
                    ca:b2:f9:1a:fa:4a:56:1c:d3:d6:97:fa:37:8b:73:
                    e2:0f:38:be:ed:ba:cf:1c:17:25:ef:fb:07:77:eb:
                    7d:fa:e9:e5:3f:1a:23:7e:64:47:4c:1c:c2:6c:c8:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:7A:03:34:54:89:E9:54:AC:74:E3:95:82:25:D0:1F:22:67:44
            X509v3 Authority Key Identifier:
                keyid:2C:1C:C9:43:53:7E:72:AA:59:9B:C9:B9:40:FB:18:0B:A8:9C:2D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C1CC943537E72AA599BC9B940FB180BA89C2D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/1/3230312e34392e3232382e302f32322d3234203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:79:89:e0:75:54:11:ec:bd:f0:75:3b:57:9f:66:d6:43:aa:
         95:3b:64:86:34:ae:f7:d3:fe:19:cf:f5:45:2d:98:8b:5a:1c:
         23:32:a3:d4:50:f8:68:df:1e:d5:2d:c6:93:6f:5d:58:44:b6:
         50:7d:c4:bb:b4:c0:d0:56:ed:5d:05:38:1a:5f:bb:d0:15:e4:
         7b:cc:af:4e:1e:92:2d:99:d3:66:60:e5:0e:4a:62:87:a4:85:
         7e:63:a0:21:bf:25:8a:81:40:74:a6:13:a4:c5:c5:00:78:ce:
         b2:00:60:97:78:9d:21:f2:90:a3:61:a4:7b:78:11:ba:66:5d:
         eb:ab:2f:78:a5:41:c8:51:cc:89:24:44:f4:7f:b3:b4:0a:7b:
         8d:bb:ed:ec:d8:30:55:26:8f:ec:45:5d:af:31:a6:17:f5:1d:
         d7:cf:d3:1f:a2:80:0d:6d:c3:fb:ea:69:ed:0c:60:42:1c:8a:
         39:34:5b:2d:f1:07:02:57:cf:92:ca:44:c2:64:3e:7d:92:be:
         9b:d8:c8:f6:03:6e:50:90:07:d8:9d:d9:71:36:8f:b7:e4:1b:
         6a:32:1c:ee:fe:1f:18:70:03:a1:a6:cc:6b:7b:66:03:20:3e:
         b7:d4:83:f6:38:27:a6:cd:b0:91:78:73:5d:00:df:57:6d:12:
         ce:c3:2d:d4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcKvulw40VzYKHQXyWFewvE5bMuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJB
ODlDMkQxQTAeFw0yNTA2MTMxMjQ3MDFaFw0yNjA2MTIxMjUyMDFaMDMxMTAvBgNV
BAMTKDQ4MDY3QTAzMzQ1NDg5RTk1NEFDNzRFMzk1ODIyNUQwMUYyMjY3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2o1HSrtb2OZNd5VGFDY4AdJq
hHVQt5kFKgHUOwP1eorvvby3fdNZNH/NvpaOaIkBVAIP6dIeXLzvwWNyvOrG1fIJ
4y/2f831UXmrkSgl3F0eoNYoRrAlgdKJIlMbZp1XlLXiAORZ1ob+66Xn2tUnW4Mx
jbnQwI/RrmVTyRTh3GVf8qnEe/x0YFAaqPrk15E+JpiNdR+MVJ19kruvZ63cE9zm
PmM5pRpW5dDf2fLkCP/snTCm1iCOW77q+wpYyOFP7JXL+eu/7+QPXf9cXwpAYMqy
+Rr6SlYc09aX+jeLc+IPOL7tus8cFyXv+wd363366eU/GiN+ZEdMHMJsyBCNAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUSAZ6AzRUielUrHTjlYIl0B8iZ0QwHwYDVR0j
BBgwFoAULBzJQ1N+cqpZm8m5QPsYC6icLRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzEvMkMxQ0M5NDM1MzdFNzJBQTU5OUJDOUI5NDBGQjE4MEJBODlDMkQxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQzFDQzk0MzUzN0U3MkFBNTk5
QkM5Qjk0MEZCMTgwQkE4OUMyRDFBLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzEvMzIz
MDMxMmUzNDM5MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzUz
MzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCyTHkMA0GCSqGSIb3DQEBCwUAA4IBAQCueYngdVQR7L3w
dTtXn2bWQ6qVO2SGNK730/4Zz/VFLZiLWhwjMqPUUPho3x7VLcaTb11YRLZQfcS7
tMDQVu1dBTgaX7vQFeR7zK9OHpItmdNmYOUOSmKHpIV+Y6AhvyWKgUB0phOkxcUA
eM6yAGCXeJ0h8pCjYaR7eBG6Zl3rqy94pUHIUcyJJET0f7O0CnuNu+3s2DBVJo/s
RV2vMaYX9R3Xz9MfooANbcP76mntDGBCHIo5NFst8QcCV8+SykTCZD59kr6b2Mj2
A25QkAfYndlxNo+35BtqMhzu/h8YcAOhpsxre2YDID631IP2OCemzbCReHNdAN9X
bRLOwy3U
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:32:07 2025 by rpki-client