Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35382e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          bLcI88TLEUjpLAvB79IboV7I2xuT9Jvm4fJLaekaS/o=
Subject key identifier:   27:6D:56:C7:F8:53:AA:0F:CB:F3:1A:9B:3D:88:1A:98:31:8B:3F:DD
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4D876AFADF0EC790E78C4E1BDDA027E05253B98A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:87:6a:fa:df:0e:c7:90:e7:8c:4e:1b:dd:a0:27:e0:52:53:b9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=276D56C7F853AA0FCBF31A9B3D881A98318B3FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:b2:e3:cf:35:27:45:40:1b:d8:fb:91:42:
                    bd:be:13:12:38:4b:78:24:cd:2f:3a:0f:6b:66:c5:
                    2d:ee:15:bb:80:35:4c:7d:e7:be:be:5c:15:92:46:
                    0b:b6:77:43:e7:98:a8:c5:51:f7:b0:30:be:0a:e9:
                    1a:90:6b:3b:1d:47:cb:94:ee:da:57:e3:10:0b:d7:
                    e9:fd:83:16:bb:8d:67:c3:4e:4a:16:ab:6d:8b:ce:
                    5e:59:74:03:17:8c:be:a9:9e:a9:86:4c:01:66:c3:
                    9a:01:d7:6f:6d:3b:2b:82:65:f9:f1:2f:45:30:4b:
                    55:6c:44:66:57:82:06:9c:2b:0a:36:90:7a:bf:fd:
                    88:9f:2a:0c:fb:91:cc:6e:47:9b:68:74:08:5c:cf:
                    64:87:d5:00:4c:d4:51:3d:0f:81:2a:f6:bf:c5:c5:
                    da:68:0d:39:3f:27:ad:f1:56:68:d6:88:ac:94:8d:
                    0e:92:ad:36:68:62:c1:f1:f0:91:02:eb:e2:b2:89:
                    ee:99:e9:c2:cf:d9:97:30:54:c3:bd:1c:a1:50:ff:
                    87:7b:62:40:40:78:4c:d2:6f:8d:80:2b:b1:05:6d:
                    4c:3a:85:dc:32:8f:d5:a6:ee:7c:3d:3b:d3:39:1b:
                    9c:03:06:d3:70:32:55:b6:63:6d:3e:e4:5c:b9:48:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:56:C7:F8:53:AA:0F:CB:F3:1A:9B:3D:88:1A:98:31:8B:3F:DD
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:b1:b3:0d:df:50:f3:eb:06:7e:ff:9e:72:8a:9a:09:d5:
         59:90:2d:d2:fb:ea:30:b4:57:ab:cd:12:93:0a:67:eb:6d:09:
         c7:1e:c6:a2:3b:e4:9b:35:87:fd:3d:99:ce:15:ff:6f:c7:e0:
         c0:14:94:29:9b:55:16:28:03:74:b4:87:36:44:1c:8c:11:08:
         44:dd:f4:e7:55:de:69:90:58:8f:6d:e0:36:c9:d9:37:e5:e7:
         cd:62:64:82:cf:07:58:05:2b:db:21:7a:c3:ed:98:36:6b:2a:
         d8:da:f3:cf:a9:98:84:b7:05:6e:7d:8b:ff:a1:a7:c0:fa:76:
         15:95:37:7d:14:b0:d3:ec:f9:2a:0b:82:2c:c4:e5:03:af:74:
         26:b4:d5:04:b1:6d:8c:08:99:11:01:21:c0:1a:a9:0f:b6:f3:
         84:0a:fc:ae:28:0e:92:e6:5d:f9:e8:16:3a:51:94:5b:f4:4b:
         0a:23:76:b7:1f:6a:32:89:7c:e3:c3:83:a8:3e:24:0a:f2:e4:
         cc:51:ac:f4:25:49:66:a8:19:6a:b4:08:8c:9a:7a:4f:1c:8a:
         bf:2e:62:fd:0c:59:11:5f:f6:9f:20:de:e4:27:a8:ce:ef:d8:
         c8:50:8f:dc:33:f4:10:ac:76:a0:79:27:51:6d:57:19:44:53:
         56:f2:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:41:58 2025 by rpki-client