Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35352e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35352e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          po/UdCuqEiV5W3pNVCT88rGBpVJgL2v6kfhlixeZDSM=
Subject key identifier:   03:B9:5D:0E:C2:A6:4B:69:CF:E1:0A:04:61:D1:17:1F:A1:1E:49:7F
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4EB5FFF4B0CB1E3B19D6FDBC22CEE9E03565F9B0
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35352e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:28 +0000
ROA not before:           Fri 01 Aug 2025 18:01:28 +0000
ROA not after:            Fri 31 Jul 2026 18:06:28 +0000
asID:                     272710
IP address blocks:        201.23.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b5:ff:f4:b0:cb:1e:3b:19:d6:fd:bc:22:ce:e9:e0:35:65:f9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:28 2025 GMT
            Not After : Jul 31 18:06:28 2026 GMT
        Subject: CN=03B95D0EC2A64B69CFE10A0461D1171FA11E497F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b2:bd:fe:ea:9c:5d:bc:53:4b:a3:9e:47:fc:
                    13:e0:a3:7a:af:aa:8d:52:37:80:79:15:08:b4:15:
                    98:07:84:c7:23:f0:f8:7d:fd:04:e2:d6:9d:f3:fd:
                    2a:95:0b:7d:72:26:97:c3:8f:70:de:0b:cf:be:ac:
                    0d:52:d1:49:fa:82:ff:ca:32:c3:1a:db:f8:c9:4b:
                    66:c2:cd:f1:db:cd:4c:dd:19:10:06:91:13:df:ae:
                    1a:f9:3d:dc:bf:78:20:f2:d4:c5:27:40:ca:f3:8e:
                    67:e8:82:32:91:1a:3e:d5:d3:9c:ce:90:57:61:0a:
                    07:3d:76:9c:df:35:60:01:0a:32:84:53:71:b4:b3:
                    aa:3e:da:c8:8f:6c:d3:d3:67:8d:01:be:5b:5b:23:
                    8e:f1:42:f5:67:fd:14:dd:27:e0:a6:3b:0f:3c:d5:
                    46:58:09:2c:eb:7b:21:2e:b1:75:a1:e4:c1:d3:4b:
                    1d:15:fe:e4:d0:fc:01:3f:fa:b6:1f:0d:a3:1c:5d:
                    84:a6:b1:cc:ea:a6:54:5d:5f:ee:17:8a:1b:b2:83:
                    5c:50:30:53:48:2c:83:b8:f4:f2:e9:6b:47:47:37:
                    70:b3:b4:c1:df:42:b6:2b:6b:61:f5:73:87:68:b6:
                    6d:d8:fa:cc:f5:8e:a1:f1:6f:f9:de:a5:ef:4e:ed:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:5D:0E:C2:A6:4B:69:CF:E1:0A:04:61:D1:17:1F:A1:1E:49:7F
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35352e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:39:5e:23:d4:74:c3:3d:f0:04:d6:1c:97:ed:de:8e:6c:
         1d:7f:b2:21:79:92:5f:01:a5:64:0c:5c:76:57:e5:2a:e7:7c:
         57:53:c2:b7:ba:e8:d6:72:fa:42:1a:62:56:e5:e4:cb:fe:73:
         64:ce:4d:8b:6d:5a:5c:67:4b:c4:40:97:b5:a8:f1:08:2f:f3:
         3f:67:b1:c6:55:93:35:23:c4:1e:18:88:3f:1c:e2:3e:98:1e:
         9c:78:8d:50:19:9a:81:b2:6e:4d:8b:99:b9:61:f7:21:f9:b2:
         3d:88:59:35:da:1e:2c:06:b7:46:8e:6e:1f:73:86:21:3e:cf:
         f5:8c:10:22:74:7a:1c:9a:62:7e:30:50:a6:d3:ef:4c:73:f5:
         be:69:b7:43:20:37:ef:04:04:7c:34:ee:f2:a9:e0:25:40:ee:
         8f:4a:6d:db:19:6c:de:38:a5:ba:ab:6e:e3:7b:8e:32:cf:6b:
         fe:c2:c0:a4:7e:50:1f:25:2e:d6:d6:ea:ef:df:6a:e6:d5:86:
         09:0d:4d:9d:b9:2c:8a:e0:09:1f:57:dd:1c:43:e7:19:59:4e:
         39:77:c4:7d:b1:46:76:3e:e7:e0:a1:cc:55:9c:70:5d:37:3f:
         be:eb:48:56:6e:fb:c6:e8:de:c6:bb:4f:f0:40:af:c6:fe:8b:
         d9:4a:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:22 2025 by rpki-client