Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/3230312e33332e38302e302f32322d3234203d3e20323636393135.roa
File:                     3230312e33332e38302e302f32322d3234203d3e20323636393135.roa (raw, json)
Hash identifier:          COFawtHlxgsLuzIxg4Y+fEkYviL8DqN2g3FU6TusR9A=
Subject key identifier:   8D:60:03:ED:6F:51:44:53:27:1E:20:21:99:F2:E1:78:D5:A9:2A:D5
Certificate issuer:       /CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
Certificate serial:       172A0A9E8915788CA8E4CEAA85EB501E0496E92A
Authority key identifier: FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/3230312e33332e38302e302f32322d3234203d3e20323636393135.roa
Signing time:             Fri 18 Jul 2025 18:46:55 +0000
ROA not before:           Fri 18 Jul 2025 18:41:55 +0000
ROA not after:            Fri 17 Jul 2026 18:46:55 +0000
asID:                     266915
IP address blocks:        201.33.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl
                          rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2a:0a:9e:89:15:78:8c:a8:e4:ce:aa:85:eb:50:1e:04:96:e9:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB
        Validity
            Not Before: Jul 18 18:41:55 2025 GMT
            Not After : Jul 17 18:46:55 2026 GMT
        Subject: CN=8D6003ED6F514453271E202199F2E178D5A92AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:cb:83:43:c9:9a:e6:9b:e9:38:71:07:d4:
                    a3:21:4d:26:e6:a8:9a:8c:da:ea:f9:0e:07:ae:cd:
                    15:3d:5a:75:3e:6d:f7:5b:1c:40:7f:7f:b7:c7:28:
                    32:83:fa:c0:fe:d3:82:48:e6:70:3c:df:dc:05:cb:
                    21:d8:1d:61:b5:27:56:dd:1e:63:e5:1e:17:1a:03:
                    00:e1:17:db:7c:b0:50:62:b8:97:6f:7c:96:5c:87:
                    dc:37:8d:63:8b:53:30:3f:12:0f:12:a7:75:c6:75:
                    06:43:10:80:11:5f:a0:8e:18:f0:44:0a:74:32:bc:
                    23:1d:b2:9a:3e:05:94:4f:23:20:d8:f4:3a:e4:f3:
                    ea:e2:22:3e:fd:fc:7b:d6:0b:c2:b3:b4:2e:13:89:
                    84:a8:6c:7a:8a:d4:a1:ca:80:39:66:80:9a:11:11:
                    e8:0a:c6:3b:27:9f:82:56:e1:3a:68:17:e3:d2:cd:
                    9a:c2:44:a7:b2:87:50:aa:6c:22:92:0a:65:15:ad:
                    3e:ad:99:58:c7:20:a5:02:83:11:3d:9a:e3:d5:48:
                    89:7a:0e:2c:52:f3:0a:bb:88:00:44:d0:76:62:10:
                    80:d0:89:a9:b2:e1:b9:6d:d6:f5:87:e4:f9:7f:06:
                    85:a2:e6:48:0a:15:47:a4:00:5b:f2:e7:15:d1:38:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:03:ED:6F:51:44:53:27:1E:20:21:99:F2:E1:78:D5:A9:2A:D5
            X509v3 Authority Key Identifier:
                keyid:FC:73:A4:E3:1D:0C:1C:36:1F:3F:55:58:3E:97:E6:B1:BF:56:84:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC73A4E31D0C1C361F3F55583E97E6B1BF5684DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELoHNMKJLiPaz6tr74T1JMBJ1WX96cd58MNQduwscVmZ/1/3230312e33332e38302e302f32322d3234203d3e20323636393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:97:03:4f:b0:3f:f7:9a:58:24:3b:a9:ef:84:8a:03:13:
         50:7e:0b:fb:3a:72:c1:b1:80:14:5d:a2:7b:7f:91:51:de:25:
         c2:b2:6f:d2:f0:9e:61:2d:36:8d:fc:1a:2a:ce:f4:12:23:1b:
         f2:74:a4:da:bf:1f:51:44:0e:f3:40:c1:d5:e1:0f:2f:a3:b2:
         7e:fb:d4:e7:4f:2c:dc:07:81:c9:75:ac:8a:e8:61:45:0b:90:
         8f:b8:a6:6b:45:bb:a0:49:f5:91:d2:f5:64:2a:3a:d4:79:24:
         90:48:75:ae:a2:1d:99:a0:be:69:76:7f:d8:3f:d1:51:8b:0b:
         48:91:8a:58:49:dc:37:15:e4:39:4c:40:6c:30:60:44:fe:dd:
         6a:64:f3:da:86:a5:c9:15:d6:d7:03:bb:03:39:cd:2f:cc:e4:
         81:7e:52:15:1c:77:c4:cc:7c:69:95:f9:c8:8f:60:19:91:1e:
         f3:72:5b:8b:f5:b7:62:22:6e:06:73:2e:07:13:a9:f8:2b:2a:
         c5:4e:2a:1c:0e:f3:2d:94:0c:2e:52:b5:a9:3f:c6:9a:d4:39:
         cb:df:42:45:86:d1:5e:67:ce:64:89:b0:6a:7e:46:93:69:dc:
         c4:26:5f:1d:a6:9d:28:b3:3d:35:ad:76:5a:62:81:b1:92:df:
         f3:6f:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:28 2025 by rpki-client