Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35302e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          JchB3OuqtG9wELuKlvHtthMhPzad34NVCsR0tVukebQ=
Subject key identifier:   8F:DB:9B:72:33:30:1B:06:4F:B2:53:76:3A:ED:A1:E5:E2:00:5E:16
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       5C9C7CBE39014B2A3DEC60581E839238966BD822
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 02:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:7c:be:39:01:4b:2a:3d:ec:60:58:1e:83:92:38:96:6b:d8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=8FDB9B7233301B064FB253763AEDA1E5E2005E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:8e:28:a8:70:72:01:c9:fd:c5:a3:83:35:
                    86:7e:56:2d:e2:7e:8a:9c:f1:2e:d4:a1:28:88:d8:
                    7d:1e:14:c6:f2:e7:9f:62:cd:94:c9:6a:4c:42:88:
                    5e:16:32:0e:4d:41:8e:ec:05:35:f8:b9:b7:ae:ba:
                    0e:d6:13:5f:4f:63:29:3d:58:24:0d:e4:29:b1:84:
                    6a:ea:da:5c:09:5e:04:93:dc:83:65:67:3d:03:5c:
                    6d:af:81:21:5e:96:9c:50:52:70:87:19:22:75:c3:
                    9e:85:66:d6:87:31:52:d8:8a:af:22:d3:79:17:97:
                    ae:fd:f1:e0:49:f5:c2:4b:d3:e8:4a:8e:60:d0:95:
                    c7:dc:be:79:b4:08:05:16:76:c2:4e:b1:54:bb:d7:
                    cd:b1:e8:a3:7b:cf:48:f3:a4:6b:3a:72:bc:1e:11:
                    9b:0c:f2:92:8a:13:58:e3:49:da:9f:a5:8f:f4:64:
                    33:7b:a1:8e:d0:ff:0b:17:78:f1:d8:15:95:b0:05:
                    e2:63:02:3f:a7:01:2f:fd:f1:7d:25:43:9b:15:3c:
                    2d:92:79:c4:40:19:08:8e:62:f4:00:7c:ea:6a:62:
                    fa:09:c1:c3:04:85:8d:3b:82:76:33:95:2f:cd:a9:
                    0d:59:0b:82:a8:35:b4:23:85:40:df:d0:76:7d:3b:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:9B:72:33:30:1B:06:4F:B2:53:76:3A:ED:A1:E5:E2:00:5E:16
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35302e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:96:77:45:ce:97:44:2a:e1:2a:b7:f9:03:4d:4e:f7:7a:fe:
         ad:5d:8a:52:00:59:29:ba:6d:8e:c8:cd:8b:9d:ef:27:76:8a:
         27:8f:eb:ae:ae:eb:4a:fd:09:91:c9:c4:ac:42:10:a8:02:df:
         34:69:ce:42:f1:9c:2d:87:ab:51:18:12:89:d4:e3:cb:12:a3:
         97:2b:d9:e9:ad:99:f9:36:70:26:96:ee:72:83:84:ca:f7:90:
         54:0f:71:1a:6e:1a:28:11:3d:cb:93:cb:f8:13:2c:97:af:d3:
         75:dd:6c:a2:a1:34:0b:79:3a:c9:85:6f:41:34:8b:f2:e2:d1:
         83:bd:88:8b:84:59:67:c0:a5:8b:46:d5:76:5b:08:af:79:fd:
         a4:35:ae:a2:24:72:7f:00:4c:47:ed:79:6a:2d:79:0f:05:72:
         b3:6d:fe:bb:0d:56:96:21:19:4d:3d:e5:1c:fd:4f:1d:50:20:
         de:74:76:c2:6b:e6:54:e9:cc:07:33:31:fd:52:97:a4:a1:08:
         f2:05:3b:ab:89:2e:91:a7:71:f6:46:d4:f4:cb:9b:9e:d4:ae:
         04:6d:f6:e1:26:a7:be:a2:18:de:99:c9:a0:49:7c:43:67:43:
         3e:58:f8:ef:b9:3e:25:f6:4c:73:25:20:ba:da:d6:07:89:b7:
         5e:5b:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:44 2025 by rpki-client