Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa
File:                     3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa (raw, json)
Hash identifier:          qrrQQPAmrbXv0WBE9xtoHoKBeLqUXodpmZjSti9EBaI=
Subject key identifier:   94:3E:B0:A2:AA:20:43:3C:21:83:78:3C:8D:29:DA:06:38:12:7E:24
Certificate issuer:       /CN=CAAC943455AAA15F91CE50FF2493F762682C2729
Certificate serial:       58FA10FA09EBDAFDCD14FA4DA8386BDA8A1200AC
Authority key identifier: CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa
Signing time:             Wed 23 Apr 2025 12:31:06 +0000
ROA not before:           Wed 23 Apr 2025 12:26:06 +0000
ROA not after:            Wed 22 Apr 2026 12:31:06 +0000
asID:                     262437
IP address blocks:        201.175.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl
                          rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 03:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:10:fa:09:eb:da:fd:cd:14:fa:4d:a8:38:6b:da:8a:12:00:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC943455AAA15F91CE50FF2493F762682C2729
        Validity
            Not Before: Apr 23 12:26:06 2025 GMT
            Not After : Apr 22 12:31:06 2026 GMT
        Subject: CN=943EB0A2AA20433C2183783C8D29DA0638127E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:41:80:2b:66:76:57:bd:47:13:95:21:a0:fc:
                    9a:77:13:af:33:bd:c7:1e:cc:94:18:4d:8c:f2:26:
                    dc:f5:7d:da:fc:10:64:19:79:87:41:6e:b6:46:fb:
                    e5:81:ff:f0:70:f0:dc:96:3f:1d:af:36:43:4b:03:
                    0e:9c:22:e5:8c:c6:1a:8c:2a:a3:c4:23:e1:e0:72:
                    0f:99:ed:d5:9b:34:a6:db:eb:3b:b3:45:0c:16:88:
                    64:b8:c5:4d:ee:69:9c:4f:d9:10:94:6a:32:cd:29:
                    08:b9:f1:93:28:4c:44:83:d2:51:d1:de:0a:e9:a1:
                    9a:72:69:b1:5e:02:d1:37:f7:3c:40:c3:b4:01:69:
                    ba:72:60:7c:2d:20:21:13:66:cf:54:5b:40:d4:f4:
                    09:6a:f2:3d:2f:5d:6c:c6:b5:94:2c:2e:46:9f:dc:
                    bc:79:2a:35:4b:01:33:53:6b:9a:74:a9:a9:b5:e7:
                    31:94:2e:6a:9c:65:b0:5a:e3:7b:9b:8a:39:5e:c5:
                    26:2b:80:7a:27:66:4c:58:d9:f9:dc:05:06:66:bb:
                    6e:97:ec:af:57:4e:5f:de:71:64:31:ae:9b:e3:85:
                    08:19:50:0d:1e:7c:59:59:7c:7c:f3:3e:e5:b0:33:
                    f6:34:98:81:84:76:43:1e:4b:39:1b:cd:d9:43:01:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:B0:A2:AA:20:43:3C:21:83:78:3C:8D:29:DA:06:38:12:7E:24
            X509v3 Authority Key Identifier:
                keyid:CA:AC:94:34:55:AA:A1:5F:91:CE:50:FF:24:93:F7:62:68:2C:27:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAAC943455AAA15F91CE50FF2493F762682C2729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAC943455AAA15F91CE50FF2493F762682C2729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3234203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:c5:47:94:b5:82:0b:fe:5f:ca:80:a2:c1:5d:9c:02:bb:
         4e:f4:38:bb:cc:c8:3e:6c:c4:96:e0:14:0f:fd:ba:5e:ce:1c:
         01:30:2a:c8:03:87:18:5d:b6:31:32:89:94:48:b1:2f:16:b6:
         c0:e7:94:ec:bd:d9:11:66:d3:02:92:ff:0d:e7:4a:fd:b5:ea:
         85:ba:9b:a9:76:d0:8f:a6:17:12:cf:95:0c:3c:6a:a7:46:ac:
         b9:e7:16:cb:60:4f:29:38:78:c0:3a:46:81:46:b0:bf:0d:fe:
         b0:7b:9d:0a:c6:82:cd:59:4b:b6:e1:21:c2:01:3b:d7:5f:41:
         29:1a:c5:6d:27:2b:0c:83:5b:af:0a:f5:c2:c4:32:c2:68:1d:
         5e:12:33:5f:33:dc:2d:33:18:94:ed:36:cd:cb:91:36:e3:13:
         15:5f:87:7f:0f:60:66:2f:65:67:c6:5c:1c:8b:bf:f7:95:fe:
         11:35:c6:2b:54:1e:03:4b:87:6b:8b:a7:38:85:2f:46:54:d5:
         68:c3:eb:21:01:88:7d:ef:24:88:26:88:ba:b1:fa:d3:6d:d1:
         e9:82:86:fa:df:58:25:39:b3:ae:be:70:b4:9e:77:e1:50:de:
         de:18:c4:55:c1:5e:00:b5:86:a2:f5:24:80:1a:fd:74:25:ae:
         c1:8b:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:39 2025 by rpki-client on console.sobornost.net