Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131382e302f32332d3233203d3e20323633353336.roa
File:                     3230312e33332e3131382e302f32332d3233203d3e20323633353336.roa (raw, json)
Hash identifier:          RVtqKvqEwghnWQg+0dUylJSGBRhCfThv28Tx509VcA8=
Subject key identifier:   F6:CB:0B:ED:80:46:BA:D7:A7:72:A1:25:FB:91:0A:73:25:28:5A:07
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       3CCBDC17AD855E4E4754F7C6E478A46824DA8A90
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131382e302f32332d3233203d3e20323633353336.roa
Signing time:             Fri 19 Sep 2025 18:19:01 +0000
ROA not before:           Fri 19 Sep 2025 18:14:01 +0000
ROA not after:            Fri 18 Sep 2026 18:19:01 +0000
asID:                     263536
IP address blocks:        201.33.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:dc:17:ad:85:5e:4e:47:54:f7:c6:e4:78:a4:68:24:da:8a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Sep 19 18:14:01 2025 GMT
            Not After : Sep 18 18:19:01 2026 GMT
        Subject: CN=F6CB0BED8046BAD7A772A125FB910A7325285A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:82:72:60:a5:c7:15:8a:db:2a:d4:ba:02:ac:
                    23:62:94:36:64:d5:ea:93:b5:ef:f1:90:77:63:be:
                    bb:01:cc:90:b1:f0:f4:45:14:f2:5f:d3:89:29:a5:
                    a4:8c:0c:95:14:96:f7:b0:9e:15:cb:a7:f3:7e:ca:
                    ca:38:bc:b7:c3:53:e1:eb:14:71:7c:a2:57:fa:9b:
                    49:bc:d9:69:19:2b:d6:25:7c:da:a9:da:e0:e6:52:
                    65:bf:09:77:68:74:7a:ed:b8:bf:64:ae:f5:9d:5e:
                    3c:8d:81:ff:ba:e7:3f:2e:c3:68:53:7d:4d:06:25:
                    09:28:29:34:96:56:b3:97:c4:fc:52:51:eb:11:28:
                    40:e4:5b:2d:e2:5f:34:a8:fb:cc:e0:39:59:e0:2f:
                    8d:7f:19:52:2d:2a:61:9e:2b:41:12:9b:d4:55:94:
                    9a:2e:d1:82:06:4b:56:44:b6:c2:f7:ad:00:77:07:
                    37:9b:61:ee:9c:f3:bf:bb:48:cf:1e:aa:43:e2:5a:
                    17:05:d1:43:67:71:03:a3:aa:a0:94:78:4d:51:9a:
                    42:ca:ca:fe:56:e7:97:27:67:33:fb:1e:96:05:e5:
                    c7:9e:7a:ab:24:2c:0d:fc:68:56:0a:47:96:ed:de:
                    e9:03:a1:51:23:c2:7e:3f:55:da:97:6a:ca:90:2a:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CB:0B:ED:80:46:BA:D7:A7:72:A1:25:FB:91:0A:73:25:28:5A:07
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131382e302f32332d3233203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:f1:34:57:f2:52:0d:c7:7f:5a:c2:6d:42:ef:9c:7c:a5:
         c6:cf:49:45:98:80:cf:76:4e:4f:81:f4:2f:5a:2a:c8:45:73:
         2b:29:2e:a2:da:e7:df:69:91:16:82:f3:2f:fb:8c:9a:0b:95:
         46:b9:e0:4f:45:36:9c:c6:08:6e:1a:a9:88:6f:f9:a3:67:e0:
         ce:32:e4:fe:38:18:ba:df:3a:07:83:1b:4e:e2:14:92:65:67:
         f4:2b:ec:98:3a:57:cd:d6:16:41:3c:f0:63:ce:86:fb:a9:e6:
         f5:53:5e:af:ff:b2:3d:f3:19:8c:1c:ef:73:0c:49:89:59:a3:
         00:17:85:a7:82:fa:18:8a:90:c2:11:6f:94:ee:cf:7a:f7:54:
         53:5c:88:29:91:94:01:5f:32:9a:4e:64:cf:61:43:5e:8f:84:
         4e:60:b7:c8:1c:d0:98:f9:7b:5d:9f:8d:73:6a:01:3e:3a:b0:
         05:92:1c:5f:01:d0:aa:5f:a4:bf:8a:4d:ba:d7:8e:f0:34:4a:
         cf:d2:9a:89:4b:0f:fe:81:61:79:cd:eb:d4:2e:20:48:c0:05:
         8a:fc:7c:af:0d:79:19:ca:14:a5:ff:1a:5c:cc:97:0a:39:bf:
         b4:18:41:ac:03:30:a1:e4:18:49:dc:d0:08:e9:bd:e4:6a:5c:
         24:3e:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:53:39 2025 by rpki-client