Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33362e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33362e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          iDs0YK8UeptQQ4wNFJn3PUplIYjSVIQwFEtvL83LOf8=
Subject key identifier:   D7:5E:48:7D:67:AA:D8:D6:4C:BA:F5:78:A7:12:36:A1:2F:F5:DD:DC
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3BE739E8B0E66D6320026C34FC02F0932216DA31
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33362e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e7:39:e8:b0:e6:6d:63:20:02:6c:34:fc:02:f0:93:22:16:da:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=D75E487D67AAD8D64CBAF578A71236A12FF5DDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:b5:14:ec:74:1d:91:6d:40:b5:a2:82:04:
                    57:12:d4:d1:88:f7:0f:35:09:02:4b:35:56:26:8f:
                    05:2b:4c:7d:f7:df:21:dd:1e:75:dd:9a:b2:ea:38:
                    3a:07:df:a2:3e:58:25:51:5a:95:00:75:81:76:a3:
                    36:eb:6e:99:1b:61:cd:21:3a:c5:7b:29:10:e4:90:
                    60:bb:42:90:8e:9d:b2:ee:12:f5:b6:97:ee:16:3b:
                    d9:aa:89:ff:da:7b:d9:1d:8c:f7:37:2f:1f:91:3f:
                    89:25:c8:0e:d6:c2:74:b6:a9:57:23:b7:ab:40:50:
                    0e:47:bd:aa:ed:75:11:73:96:ef:c1:e7:f1:85:b0:
                    d5:1d:6d:56:97:95:2d:12:13:04:35:9c:fe:6e:db:
                    f9:69:16:5a:09:05:63:92:4e:aa:43:04:ac:56:a6:
                    3d:a5:04:3b:fa:76:4c:ce:27:4c:99:d9:8b:2b:b9:
                    62:b7:1f:e5:09:bc:3d:11:1d:15:97:1d:fb:e0:b9:
                    db:af:ae:b2:66:8e:6c:3f:7c:5c:f6:a5:dd:c1:66:
                    ec:cd:f5:f0:7c:c6:58:93:d8:d9:38:2c:29:e6:01:
                    b3:c5:a7:19:42:2f:57:db:ec:d5:f4:34:27:a9:92:
                    b6:54:00:ec:12:1d:31:98:a1:12:16:f1:94:26:78:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:48:7D:67:AA:D8:D6:4C:BA:F5:78:A7:12:36:A1:2F:F5:DD:DC
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33362e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:de:aa:bf:ae:92:75:28:85:92:93:79:8f:06:be:a5:59:2a:
         f1:40:17:a7:0d:c7:d4:ea:ce:8a:4e:55:60:4a:05:0d:13:8a:
         72:f9:4a:fe:7d:75:98:06:3d:6a:70:f8:5b:d3:d7:94:cb:8e:
         ba:da:72:f8:4b:d9:45:bb:b8:cd:bd:2a:d7:57:d1:d8:b4:88:
         1c:33:a7:2d:cc:71:f0:ed:c6:26:12:8b:15:62:11:cb:8c:68:
         ef:38:0d:3c:86:aa:d2:81:4b:31:0e:34:56:25:c4:db:d2:cd:
         89:ab:9b:8b:ab:ea:68:45:20:17:a5:42:9f:48:62:63:3d:ac:
         07:f2:27:0e:3c:f4:ac:f4:88:7d:a8:95:9c:da:30:ad:11:96:
         ff:09:c8:c6:dc:17:5a:14:83:0c:39:35:5d:b7:cf:cc:56:b4:
         62:f9:dd:85:a1:6e:a1:31:58:cb:92:92:be:e2:9b:44:40:2a:
         3a:03:43:d5:81:85:10:e3:4b:c4:ea:d0:2a:b2:46:3d:5b:2e:
         ad:30:64:d6:db:1e:b4:0b:f7:fe:7e:de:a4:f9:ca:cb:81:ee:
         dc:15:0f:85:5a:2d:5e:17:6a:db:cd:d1:09:63:6e:f8:6f:4d:
         42:27:be:3c:97:df:a6:83:a5:f0:c5:43:73:18:30:e9:1b:38:
         19:2f:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:04 2025 by rpki-client