Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa
File:                     3230312e32332e33322e302f32332d3233203d3e20323732373130.roa (raw, json)
Hash identifier:          BLqMLgkBBCMjlrUK+Os45/niVXdE7nMvOiTaptZZbwo=
Subject key identifier:   EF:7F:78:FC:DF:F4:2B:68:0C:AB:B9:66:CE:94:39:E3:57:56:A2:2B
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       45A9BE65A177779FB08BF33C02B9AB5CDA63113A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a9:be:65:a1:77:77:9f:b0:8b:f3:3c:02:b9:ab:5c:da:63:11:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=EF7F78FCDFF42B680CABB966CE9439E35756A22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:e8:33:2e:3d:07:0f:86:38:6d:ea:98:76:
                    76:d6:36:db:6b:7a:16:c7:d4:51:7d:73:35:27:c3:
                    15:1e:26:98:13:87:45:b2:ae:ec:d7:ab:38:6f:4f:
                    f3:23:22:00:e2:96:08:99:e5:3f:2d:8f:d4:99:55:
                    05:61:97:5b:18:34:69:7d:11:c2:be:67:a0:7a:ab:
                    2c:0d:95:87:2a:52:a1:58:b9:d6:42:55:82:09:42:
                    4d:fb:86:5a:6f:65:43:d2:be:6d:94:07:cd:7c:ff:
                    7e:e5:dc:07:0d:f2:7b:ed:9d:bf:08:92:3c:51:6f:
                    86:35:c8:d3:82:99:f0:1d:c0:9d:54:8f:d2:25:b1:
                    bf:e7:9a:76:29:d6:c8:97:0a:d8:af:6d:f2:9f:c2:
                    7f:80:8c:5d:7e:5e:93:b4:fd:b3:8d:0e:c1:fc:41:
                    f6:d7:e2:e7:ec:32:cc:27:54:4f:f8:c6:c3:5f:0d:
                    45:ba:35:e1:d8:ee:22:bd:4c:5c:98:e1:d0:2d:5d:
                    e2:f7:c2:a4:45:52:86:eb:a5:05:8b:2b:73:60:50:
                    a6:17:d8:44:38:92:fe:d5:6b:e0:69:f9:84:eb:9f:
                    c1:be:b2:4b:34:31:6d:a0:99:ff:fd:e8:08:16:d3:
                    a5:e2:0c:c5:ce:cf:26:ec:1f:69:01:f5:e2:58:02:
                    12:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:78:FC:DF:F4:2B:68:0C:AB:B9:66:CE:94:39:E3:57:56:A2:2B
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33322e302f32332d3233203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:ab:9a:31:94:ef:c3:3b:b0:a7:14:a9:90:b0:8f:0a:c7:
         34:2e:40:b7:41:32:37:72:53:11:78:e2:18:3e:9d:1d:f4:6e:
         66:cf:e2:26:20:c0:ac:30:be:4f:00:4f:da:99:a1:2e:36:72:
         a7:85:ac:bb:2c:2f:08:84:7f:5c:1c:a1:03:b6:b0:7d:62:06:
         5b:d8:92:b8:e2:d6:b3:dd:bb:56:4b:59:c2:f3:c2:67:60:0b:
         21:9f:cc:dd:01:97:7d:d9:77:16:d4:08:9f:3e:05:7a:72:63:
         df:00:02:7a:37:29:9b:9d:63:cb:58:3c:63:39:44:eb:74:d1:
         29:b2:56:5e:38:34:ca:91:76:9f:04:93:3d:ee:15:8f:8e:7a:
         9e:df:bf:e0:f8:ba:2d:01:74:18:05:bc:d1:41:b5:c0:22:fa:
         5e:33:6a:8f:04:32:8a:a7:48:b0:0e:7b:49:59:c0:00:10:25:
         44:fa:df:38:f2:65:3c:c1:8e:44:12:b6:fc:16:b1:c5:c5:04:
         cd:ae:c0:0b:88:9f:b3:96:9a:b3:b2:86:b5:09:12:6c:98:03:
         da:df:a1:32:76:c4:9b:83:05:f0:0c:5b:16:0f:a6:99:2c:f9:
         17:c2:8f:a4:94:9b:22:5e:0e:e6:a2:01:a6:80:bd:2d:96:85:
         1c:ac:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:27 2025 by rpki-client