Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33372e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          B91PxMelvnBxU7QAnvalev6CKKs9L06Vc4rj80zkmLQ=
Subject key identifier:   C5:A6:99:78:8A:B0:69:03:22:FB:22:00:74:C7:AE:8B:F2:50:B4:72
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       3E8A4E1419FF7FBF7C4FBE7F4560E5952E5643FC
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:28 +0000
ROA not before:           Fri 01 Aug 2025 18:01:28 +0000
ROA not after:            Fri 31 Jul 2026 18:06:28 +0000
asID:                     272710
IP address blocks:        201.23.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:4e:14:19:ff:7f:bf:7c:4f:be:7f:45:60:e5:95:2e:56:43:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:28 2025 GMT
            Not After : Jul 31 18:06:28 2026 GMT
        Subject: CN=C5A699788AB0690322FB220074C7AE8BF250B472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:b3:96:a0:01:fb:55:99:2f:f3:fa:6b:35:
                    3f:7d:65:61:b2:59:2a:63:37:a5:9d:16:bf:d6:bb:
                    91:84:d6:c7:9a:ca:93:01:ff:e4:27:d4:62:a7:da:
                    49:c4:d3:84:a3:ca:c3:54:0e:f0:88:30:e7:ca:c9:
                    5b:08:3f:58:d8:86:d7:35:b8:5b:eb:b7:90:37:68:
                    93:9e:09:a3:15:44:c0:f6:76:9b:24:3c:51:f9:97:
                    65:c1:33:12:76:2b:3a:91:7d:76:41:31:36:c4:73:
                    c5:b0:9f:45:4f:03:94:2d:9c:8d:11:3f:f8:9c:10:
                    60:f5:47:8f:e2:bc:8a:e1:af:eb:c6:20:32:7f:8e:
                    d4:50:e4:ff:a1:c9:6a:b3:a3:cd:40:ea:e3:51:92:
                    db:f4:bd:1b:28:17:0b:05:59:b4:e6:f2:17:ac:cc:
                    0c:8b:74:cf:be:f3:b7:34:dd:a4:0c:b0:b5:70:70:
                    50:00:1c:a1:94:2d:05:a0:98:68:9d:c7:67:92:fe:
                    a7:ae:4c:81:8d:f0:a1:5f:9c:9b:4d:93:8f:90:43:
                    4b:af:78:8a:1d:9b:78:c2:02:b2:ca:1c:74:7b:ca:
                    e7:2a:9c:ab:a9:ed:0d:80:f9:55:7a:23:57:4a:48:
                    78:a8:d7:17:d2:09:97:d0:5c:1f:76:ad:e0:b4:96:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A6:99:78:8A:B0:69:03:22:FB:22:00:74:C7:AE:8B:F2:50:B4:72
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:1c:57:99:6f:66:88:26:c1:c4:d0:6d:c3:ca:fb:7f:12:
         04:36:46:93:c1:06:d9:cd:ad:a5:4e:30:b3:f4:30:0e:3c:29:
         54:27:6c:97:1f:56:c0:1d:bd:5d:85:43:52:65:2a:64:57:fc:
         de:ce:7a:d8:fd:e2:d8:dc:53:24:f1:64:dc:03:8f:4e:94:26:
         1b:cc:fa:4a:af:1d:59:5f:b8:6a:40:34:d1:0f:fd:80:3c:6d:
         61:45:8c:d3:62:72:f3:71:66:76:9c:21:f6:5f:5b:d7:2d:1f:
         08:0b:3e:53:a1:be:c8:51:f0:08:ef:02:69:62:02:7a:ab:a7:
         6e:a9:c6:dd:97:13:f1:fb:49:7b:76:f4:c1:db:f5:01:1d:b9:
         8d:c8:63:aa:99:79:c8:bc:ae:72:f9:8f:53:f7:6d:5b:b5:5d:
         be:f5:27:b0:c9:b1:12:0e:67:27:ae:46:f2:6c:47:be:16:12:
         0c:47:ce:85:34:ab:ca:93:3a:1d:01:74:93:98:0a:24:6c:56:
         1e:21:9b:14:05:2d:f4:ba:bd:44:bb:7f:4c:06:a4:21:89:fd:
         ac:70:f4:ef:67:29:7d:e0:cb:73:8e:1b:1b:92:17:27:ee:8a:
         b8:79:20:98:31:44:4e:bc:5a:87:75:a4:27:6d:aa:29:17:8e:
         1d:2b:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:52 2025 by rpki-client