Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa
File:                     3230312e33332e36342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          cArT77+mgdCkUvLiarC5oGxhGPFH5s9U1fkJKL4rXbY=
Subject key identifier:   1F:86:5B:30:74:8A:F0:EC:82:9A:61:CA:1D:60:4A:46:9D:75:8C:23
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       59D42EA740E96076A15C59EF057B123E083F4898
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 15 Aug 2025 20:31:17 +0000
ROA not before:           Fri 15 Aug 2025 20:26:17 +0000
ROA not after:            Fri 14 Aug 2026 20:31:17 +0000
asID:                     28649
IP address blocks:        201.33.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 08:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d4:2e:a7:40:e9:60:76:a1:5c:59:ef:05:7b:12:3e:08:3f:48:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Aug 15 20:26:17 2025 GMT
            Not After : Aug 14 20:31:17 2026 GMT
        Subject: CN=1F865B30748AF0EC829A61CA1D604A469D758C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:17:75:11:2c:bd:e2:8b:d5:c3:62:01:44:
                    ca:52:dc:17:9f:12:1e:a0:11:fe:85:89:74:43:0f:
                    2d:91:31:dd:70:90:cd:62:f2:22:ef:d0:11:18:77:
                    0f:6d:be:48:e6:8a:c9:d1:7b:7d:28:51:f3:69:a3:
                    51:dc:27:26:ca:fe:3e:d3:92:27:56:4a:11:6e:c9:
                    e7:96:2c:4a:d9:da:9e:6b:55:ed:0c:41:09:c9:04:
                    95:91:fe:a7:53:b7:49:81:7a:5e:b8:97:82:bb:fb:
                    8a:7d:65:4c:cc:fb:0c:5c:49:80:fd:99:eb:97:64:
                    f2:f9:48:9b:6c:cc:70:3e:92:81:ce:3d:ca:c4:81:
                    c1:c2:72:8b:ac:56:cb:a1:e7:e7:2f:7b:b0:ea:0e:
                    32:75:52:f0:24:a9:f5:b0:ee:95:42:43:cc:71:9e:
                    55:73:0e:99:9f:0c:6a:bb:20:f7:61:b5:36:19:92:
                    57:be:7b:00:23:40:8e:7e:dc:dd:6f:10:f9:43:62:
                    09:f2:e1:6d:89:b8:4c:16:08:83:ba:b2:b7:00:a4:
                    45:71:b4:f8:2e:b3:3f:20:56:f5:94:ea:2b:a5:aa:
                    67:14:e7:75:de:8a:f4:e3:24:7e:e6:4d:7e:78:4e:
                    8f:f1:72:32:b2:05:a6:9b:17:cd:ee:33:8c:04:ed:
                    65:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:5B:30:74:8A:F0:EC:82:9A:61:CA:1D:60:4A:46:9D:75:8C:23
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:4c:05:56:99:3d:37:28:5a:69:3f:dc:25:93:4f:7f:c4:
         fe:f5:0f:38:f5:78:47:6e:5a:63:cc:df:38:59:4e:92:d2:bb:
         dc:b5:d3:03:95:2f:8c:81:f3:53:a8:0f:80:aa:9e:e4:5b:88:
         f5:7b:3c:6d:c3:fa:05:f1:7f:dd:c4:4b:12:b5:bc:60:a2:95:
         af:f4:77:70:37:f9:46:8a:9b:be:85:f9:d3:61:55:a6:76:48:
         20:ad:ca:3a:aa:03:73:50:ba:80:e0:53:11:f4:0f:f4:13:15:
         e1:b5:b3:e3:30:bc:d8:9f:ec:0f:b9:42:84:78:a3:1c:85:09:
         38:02:1b:cc:59:fd:21:7f:73:f1:29:da:7e:b0:39:c1:d1:b6:
         ae:31:f7:bd:a6:b2:bb:60:7c:aa:15:00:ce:1e:26:ee:49:51:
         99:66:e2:62:5e:d0:5c:4b:e1:47:e8:ca:b1:66:be:bc:0c:0f:
         bd:4c:7c:d9:6c:5d:8e:04:2d:17:10:7e:72:a7:90:25:a6:52:
         62:57:1c:cd:92:d7:f1:b4:3c:5b:57:46:ab:9d:f5:5b:f2:01:
         a0:bc:bf:3d:ab:21:37:17:f6:74:77:35:6a:ec:07:30:a8:4b:
         41:35:72:d0:36:7e:69:b5:25:b5:75:14:cc:ce:6d:12:3c:57:
         77:8b:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:33 2025 by rpki-client