Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa
File:                     3230312e33332e31332e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          7npF7uhtDnOWoA0B/9bWiAWF0EDIzvDNsXwKFJG4onI=
Subject key identifier:   6E:60:6C:DF:CC:88:DD:2E:31:24:B7:45:E9:FF:0F:0E:FB:BF:C3:44
Certificate issuer:       /CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6
Certificate serial:       634329F0D5260FBA08E2519DEA0A1DBAD380EA26
Authority key identifier: 5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa
Signing time:             Mon 21 Sep 2026 20:05:43 +0000
ROA not before:           Mon 21 Sep 2026 20:00:43 +0000
ROA not after:            Mon 20 Sep 2027 20:05:43 +0000
asID:                     28273
IP address blocks:        201.33.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 09:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:43:29:f0:d5:26:0f:ba:08:e2:51:9d:ea:0a:1d:ba:d3:80:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6
        Validity
            Not Before: Sep 21 20:00:43 2026 GMT
            Not After : Sep 20 20:05:43 2027 GMT
        Subject: CN=6E606CDFCC88DD2E3124B745E9FF0F0EFBBFC344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:85:5b:53:0e:e8:d1:a6:aa:55:85:50:fd:
                    c2:9c:0c:f4:dc:52:0a:da:ee:33:70:c4:29:59:4f:
                    37:48:31:97:c5:87:b3:b9:52:5b:66:0c:34:a7:3a:
                    b5:7c:a9:13:75:14:43:55:5f:e5:f0:9a:28:ea:02:
                    1a:47:d2:a2:a4:4e:9b:45:7a:8e:15:bf:91:61:0c:
                    ca:53:52:b4:e0:71:af:e2:dd:a1:87:17:07:40:3d:
                    a9:95:ec:61:8e:7e:af:dd:9b:25:cf:fb:3b:91:61:
                    6c:bb:02:49:87:d1:62:aa:c2:f2:a8:dd:4b:27:d8:
                    40:2d:cd:48:cf:49:0b:7a:5c:6c:ad:7f:2d:b9:bc:
                    d5:3a:82:98:8e:5e:90:6f:11:ce:e5:79:c5:18:1a:
                    5c:3a:6f:a8:3b:3d:39:34:b4:6e:aa:61:4a:70:60:
                    94:ac:b5:a5:29:23:c8:cb:07:40:9e:a3:97:4f:97:
                    f5:59:03:6e:1a:7f:f1:e4:b4:31:ae:b9:cc:a7:66:
                    45:06:39:44:ca:18:b9:80:02:6b:04:83:2f:20:2a:
                    41:3a:94:15:72:8b:f3:05:c9:2a:99:84:81:f3:6a:
                    10:36:92:ec:84:c1:74:75:c7:e9:e8:5e:58:da:a6:
                    4e:26:25:66:a1:b2:61:a4:6c:e7:f7:86:3a:f5:4b:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:60:6C:DF:CC:88:DD:2E:31:24:B7:45:E9:FF:0F:0E:FB:BF:C3:44
            X509v3 Authority Key Identifier:
                keyid:5A:64:76:DE:C0:67:7D:4C:36:85:AD:C9:AA:BB:E8:FC:2A:07:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A6476DEC0677D4C3685ADC9AABBE8FC2A079CA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31332e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:c6:7f:23:fd:08:bf:08:b7:a3:5a:f7:4f:2c:4d:15:f7:
         94:28:67:a6:20:c1:8d:96:44:23:b6:b3:1d:db:42:bb:50:c8:
         d4:8f:a5:d9:f2:32:f8:03:07:3b:12:aa:1d:08:8b:c1:a9:4e:
         35:b7:55:f5:45:60:1e:5b:dd:5b:0d:96:dc:f3:dc:02:7a:90:
         e7:29:1d:8e:0d:e8:89:b6:bc:3c:54:ea:ea:f3:e1:06:bd:60:
         4e:80:99:ec:6a:06:45:9a:40:d8:99:79:f8:9c:39:e7:9d:cf:
         21:e1:13:ec:82:ca:a6:b7:44:64:5e:1e:8e:d7:46:08:b0:4c:
         ff:26:ca:b9:0d:98:f3:8c:61:98:e5:df:da:37:1f:29:4f:ac:
         5a:40:aa:f8:c0:87:b1:c8:cc:ee:50:55:3c:7e:dd:1e:a6:11:
         c9:6e:0a:d8:c8:4d:1b:86:ee:64:96:48:41:2a:38:11:8b:c5:
         23:58:f2:bd:f7:e7:40:84:5f:9a:fb:d6:79:8f:c6:89:73:f5:
         18:01:0b:b2:86:da:c2:bc:e2:15:a3:75:9c:84:05:03:36:72:
         ca:8c:06:50:f3:f0:bb:a8:b3:6c:a5:4b:9b:d1:50:b8:80:f2:
         83:d9:cd:5f:01:c8:27:37:48:e7:20:f2:02:06:9e:c3:91:49:
         3e:e6:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:57:19 2026 by rpki-client