Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33392e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          uasCZ78CjIsG2VLQEIgSAFSJ3wDYMTkznDzvcTsjFD0=
Subject key identifier:   1D:51:12:68:9C:84:D8:5F:57:DA:60:31:31:E9:3D:13:26:AC:DB:E9
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       1E57D0D318158970A4913D00315985D26F9E95A5
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:d0:d3:18:15:89:70:a4:91:3d:00:31:59:85:d2:6f:9e:95:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=1D5112689C84D85F57DA603131E93D1326ACDBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:3f:b0:42:9a:71:18:32:de:51:06:91:9c:
                    cf:b6:bd:e4:a2:04:e0:be:2c:d4:eb:a9:9a:21:8f:
                    07:11:ac:cb:11:22:7e:80:a6:78:cd:df:18:4a:6b:
                    57:d3:a5:9b:bc:49:0d:c8:18:58:74:cd:c0:f3:6b:
                    10:52:b2:b0:33:be:97:35:77:fb:c8:0a:39:f8:df:
                    8d:3e:8f:0f:c4:78:03:04:10:95:6a:bf:51:cf:39:
                    f2:47:fc:e6:b4:18:ea:70:67:be:ed:76:ef:0e:49:
                    7b:f6:39:41:f1:ab:50:0c:8e:74:0f:3f:c8:69:f6:
                    b8:f8:08:84:1c:ea:51:e0:af:ab:ee:bf:01:2b:e0:
                    1b:57:8f:b5:0a:3a:d1:f1:f6:43:2c:7a:3b:6f:4d:
                    9f:63:80:2d:7a:ea:5b:0e:ae:c5:c6:a8:af:99:1d:
                    f7:79:d4:12:4d:34:d1:ff:76:83:fe:84:98:0f:cd:
                    5b:a7:74:ec:cc:7e:27:c6:42:67:80:d9:82:20:cd:
                    56:e7:3a:23:90:7f:22:0f:91:e1:bd:87:e6:06:d4:
                    f9:e2:d3:11:e3:0e:ff:df:8a:b6:3e:2d:ae:cb:c2:
                    e0:90:6e:de:9c:ee:63:62:f6:17:1d:07:c3:6f:2c:
                    5d:c0:fa:c6:58:89:d8:e4:6d:cd:1b:45:b4:fb:8f:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:51:12:68:9C:84:D8:5F:57:DA:60:31:31:E9:3D:13:26:AC:DB:E9
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:04:8c:24:e0:c1:2a:bb:33:a9:36:a1:ca:11:11:02:83:e0:
         aa:48:b0:e6:9b:a1:58:7f:3c:70:e1:46:95:4d:1b:03:90:8c:
         1f:c0:da:28:ab:2d:62:3f:0b:4f:96:43:74:9b:50:b7:e2:04:
         3e:46:d5:e2:7c:39:29:f3:c4:e3:7e:97:f1:2d:f9:45:d9:af:
         e1:1f:d4:3b:3f:f3:78:25:fb:92:d1:c3:bc:43:00:4c:f4:af:
         63:26:41:c1:12:d2:d3:71:43:25:64:0e:51:c4:6e:2e:88:a8:
         93:65:d2:b2:e1:b9:85:fe:bf:e5:77:1b:af:31:f7:c5:19:d2:
         d3:22:40:46:18:50:9e:92:0f:11:32:7e:e4:e3:81:cd:4c:4b:
         e6:a3:c3:b0:b8:f8:f8:ad:32:65:73:d4:47:62:48:32:42:eb:
         97:da:aa:5d:93:a0:76:a4:26:cf:1a:8d:8e:11:f1:ca:7c:2d:
         59:a9:c3:b3:8e:52:eb:36:ce:f6:0d:78:06:b3:6e:c6:7e:d6:
         b8:bd:df:35:c5:82:0e:bb:67:09:45:e5:70:19:3c:c2:67:95:
         ed:90:b5:b4:20:c4:54:df:fd:5c:fb:7b:3d:c4:ed:42:d5:0b:
         26:8c:2c:e6:05:fa:b8:c3:e4:dd:3a:65:67:c1:cf:d7:03:04:
         58:06:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:56 2025 by rpki-client