Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36322e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e36322e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          wNNCQtndFBcx/csTZ3XMZwuwrfni0I71qG2gUVTIF8o=
Subject key identifier:   6A:02:BD:C5:B6:2A:79:5E:33:EF:53:14:77:19:1C:EC:9F:DD:1C:69
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6A0240DE484939A02405521BB5CCEC6B8E5488BB
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36322e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 01 Aug 2025 18:06:29 +0000
ROA not before:           Fri 01 Aug 2025 18:01:29 +0000
ROA not after:            Fri 31 Jul 2026 18:06:29 +0000
asID:                     272710
IP address blocks:        201.23.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 13:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:02:40:de:48:49:39:a0:24:05:52:1b:b5:cc:ec:6b:8e:54:88:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug  1 18:01:29 2025 GMT
            Not After : Jul 31 18:06:29 2026 GMT
        Subject: CN=6A02BDC5B62A795E33EF531477191CEC9FDD1C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:4e:4e:9b:e6:48:c5:5f:86:26:39:aa:32:
                    2d:94:2a:4a:50:f3:22:64:b7:ef:ed:57:01:7b:0e:
                    5b:d6:22:1c:4b:32:65:6a:bc:08:e6:30:13:a9:db:
                    13:d8:7b:1a:30:cc:62:68:bd:13:25:a4:9f:80:81:
                    6d:23:92:1e:43:60:b1:af:43:bf:15:f7:90:0c:65:
                    9f:0b:df:96:7f:dd:b7:63:76:ad:c6:e2:5f:fa:05:
                    76:6c:9d:fd:a6:24:c3:28:a1:c2:77:46:ab:3d:e9:
                    26:6f:21:bc:8b:9f:75:e4:ac:8d:2b:ec:c1:f8:3e:
                    ed:52:be:f9:26:87:b9:24:8e:d1:c5:d4:7f:41:d8:
                    8a:99:4c:56:62:13:ae:2c:8e:92:fc:00:9b:72:ff:
                    fd:e1:0e:cd:c5:14:34:71:53:b6:a5:1c:1c:a0:92:
                    48:b5:11:8a:fa:c4:0f:93:72:72:bd:be:b7:8b:a1:
                    96:f8:c5:fc:22:98:31:cc:c2:44:a8:65:4e:b4:21:
                    51:0e:bb:cb:90:28:65:2d:c7:4f:6f:06:c3:82:32:
                    22:a3:7d:b2:8a:7a:9e:54:18:07:47:dd:e7:f3:8e:
                    94:a1:27:b9:b7:07:9e:7b:45:51:d3:c4:03:bd:ef:
                    3b:55:21:f0:18:93:3a:ca:87:32:70:f9:6d:52:cc:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:BD:C5:B6:2A:79:5E:33:EF:53:14:77:19:1C:EC:9F:DD:1C:69
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36322e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:4f:bd:b6:13:6b:c4:36:49:cf:6a:c8:0b:76:54:ea:65:
         e9:8d:3e:1f:7e:a2:01:8d:7a:64:db:a3:f5:c8:00:d6:c8:e2:
         96:8e:bc:ac:87:4b:26:3b:f5:a1:06:ca:16:ca:11:5c:2a:e2:
         85:fd:5a:35:9d:c4:68:3d:9c:7b:93:a8:42:89:4e:2b:cf:9a:
         60:08:d5:b1:dd:4f:3c:47:4a:db:19:7a:2c:5a:9a:3b:b3:4f:
         85:aa:29:84:8a:a6:e9:89:88:7f:86:90:12:f4:1c:4e:b4:7c:
         ce:33:50:b9:da:3a:55:11:5c:2f:1b:b8:7b:8c:5a:25:c3:f2:
         5d:3b:66:e5:8a:67:58:28:05:8c:1b:2b:ff:7f:f1:e4:dc:52:
         04:e9:88:f7:99:ca:3a:e2:e4:96:72:50:44:0f:c9:25:48:21:
         ce:27:b0:55:ea:fc:ed:93:ea:82:58:80:d9:ad:4b:f7:87:c9:
         9e:bf:80:8f:f5:ff:a2:db:d9:ff:14:eb:2d:4d:82:55:5f:ad:
         2d:70:04:f2:79:f2:6b:70:a2:b9:1c:4a:b5:97:60:ff:df:40:
         4d:d6:76:f6:b8:73:64:ec:08:49:98:3c:81:2a:8e:8e:d0:af:
         65:b0:f0:6a:16:9f:7c:e0:b3:3c:5c:f9:96:da:5b:c4:de:fb:
         d0:ab:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:33 2025 by rpki-client