Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33342e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33342e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          d4k3AYgj7pb2aKV2o2zuJw6WG5emIFB5hNTciglnMwc=
Subject key identifier:   69:C5:B1:88:EA:4A:6D:EA:13:BB:7F:23:DE:63:D8:7B:EA:4E:DC:00
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       0935A1327843793820437EB31AA1553D74A9A637
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33342e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:30 +0000
ROA not before:           Fri 03 Jul 2026 18:39:30 +0000
ROA not after:            Fri 02 Jul 2027 18:44:30 +0000
asID:                     272710
IP address blocks:        201.23.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:a1:32:78:43:79:38:20:43:7e:b3:1a:a1:55:3d:74:a9:a6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:30 2026 GMT
            Not After : Jul  2 18:44:30 2027 GMT
        Subject: CN=69C5B188EA4A6DEA13BB7F23DE63D87BEA4EDC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:3d:29:c2:2f:22:7c:54:bb:24:60:a2:2e:
                    3e:ee:61:f2:43:8f:ce:1b:9f:db:a1:3c:de:a9:cb:
                    dc:a5:2e:5e:c4:0a:57:11:70:86:90:f9:03:8d:d8:
                    89:65:49:fc:25:8f:cb:dd:69:ca:5e:db:41:66:5c:
                    e1:c1:70:c5:24:5f:93:24:bd:12:11:5d:92:14:b6:
                    97:68:90:d4:f4:62:5c:ba:ef:2a:d2:7e:aa:7e:6c:
                    25:e6:ed:8b:1a:b1:9c:e5:32:cc:29:d0:0e:cb:fb:
                    b0:4e:13:c0:4e:3e:93:3d:78:fe:b8:bc:c6:17:7f:
                    19:d6:db:fd:98:5c:33:8f:33:cd:79:3a:5d:5c:25:
                    cb:42:1e:de:7d:19:fe:e7:83:63:1f:be:48:16:51:
                    9f:1b:92:83:75:fa:42:c9:39:0b:04:60:ca:9f:7c:
                    d8:cf:b6:d5:c7:45:6c:b8:6d:3c:8a:93:e1:47:7d:
                    9e:d3:d0:5b:88:f6:db:db:48:b7:f0:ec:7b:ec:5f:
                    5d:4a:15:c9:d7:f0:61:8e:3c:03:5d:e2:55:d3:ce:
                    5d:27:0a:31:c9:d8:47:b1:18:a2:cf:4f:4d:75:b9:
                    f7:4b:79:7c:cb:b4:55:d5:83:de:4d:0d:01:16:5f:
                    18:e7:b6:79:ab:b2:11:aa:0b:1e:f0:d0:f4:2d:ed:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:B1:88:EA:4A:6D:EA:13:BB:7F:23:DE:63:D8:7B:EA:4E:DC:00
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33342e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:07:08:9a:a0:81:98:ca:81:b0:55:28:57:d9:5c:88:5b:
         b2:a7:93:22:1e:77:00:1e:d7:eb:87:7d:96:87:6a:48:23:97:
         8d:0a:c9:e3:75:5b:30:10:37:f7:71:eb:db:22:e6:6c:16:92:
         1e:54:2b:ba:97:dc:fd:f6:b0:22:04:20:8c:90:8a:4a:a3:5d:
         07:49:c2:08:c9:68:ff:c3:59:11:6c:21:54:77:ba:7e:f7:9c:
         48:6c:92:0f:5d:11:80:b3:62:79:1d:a8:b4:98:76:df:ac:fe:
         c4:60:f1:87:94:f5:c6:42:0a:d0:57:ac:bf:7c:5e:e7:f1:71:
         a0:f9:10:b4:7f:97:67:f8:59:8b:52:86:9f:86:ed:8b:d8:c2:
         fc:fb:f3:be:0f:5c:98:2f:a0:b9:28:f0:ad:cc:18:2b:98:b8:
         1f:ae:ce:b6:90:d4:f0:29:f5:a6:8b:51:97:38:94:3c:27:6c:
         d7:7c:01:ad:01:35:dd:a3:e0:b8:74:1b:2d:9c:f7:bc:3b:5f:
         7a:2a:32:85:6e:d0:f5:da:bb:86:b1:3a:95:66:f9:a7:4e:46:
         79:25:79:93:4c:f2:b9:5c:44:7b:f3:a1:a5:cd:9b:a7:97:69:
         48:52:a5:e4:04:ba:f9:52:63:84:ab:86:45:39:44:83:a1:88:
         a0:1b:f4:75
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCTWhMnhDeTggQ36zGqFVPXSppjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNjA3MDMxODM5MzBaFw0yNzA3MDIxODQ0MzBaMDMxMTAvBgNV
BAMTKDY5QzVCMTg4RUE0QTZERUExM0JCN0YyM0RFNjNEODdCRUE0RURDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBT0pwi8ifFS7JGCiLj7uYfJD
j84bn9uhPN6py9ylLl7EClcRcIaQ+QON2IllSfwlj8vdacpe20FmXOHBcMUkX5Mk
vRIRXZIUtpdokNT0Yly67yrSfqp+bCXm7YsasZzlMswp0A7L+7BOE8BOPpM9eP64
vMYXfxnW2/2YXDOPM815Ol1cJctCHt59Gf7ng2MfvkgWUZ8bkoN1+kLJOQsEYMqf
fNjPttXHRWy4bTyKk+FHfZ7T0FuI9tvbSLfw7HvsX11KFcnX8GGOPANd4lXTzl0n
CjHJ2EexGKLPT011ufdLeXzLtFXVg95NDQEWXxjntnmrshGqCx7w0PQt7UXJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUacWxiOpKbeoTu38j3mPYe+pO3AAwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzIzMDMxMmUzMjMzMmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyRciMA0GCSqGSIb3DQEBCwUAA4IBAQB9XQcImqCB
mMqBsFUoV9lciFuyp5MiHncAHtfrh32Wh2pII5eNCsnjdVswEDf3cevbIuZsFpIe
VCu6l9z99rAiBCCMkIpKo10HScIIyWj/w1kRbCFUd7p+95xIbJIPXRGAs2J5Hai0
mHbfrP7EYPGHlPXGQgrQV6y/fF7n8XGg+RC0f5dn+FmLUoafhu2L2ML8+/O+D1yY
L6C5KPCtzBgrmLgfrs62kNTwKfWmi1GXOJQ8J2zXfAGtATXdo+C4dBstnPe8O196
KjKFbtD12ruGsTqVZvmnTkZ5JXmTTPK5XER786GlzZunl2lIUqXkBLr5UmOEq4ZF
OUSDoYigG/R1
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:33 2026 by rpki-client