Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33372e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          KDVU/NiTAzZsJ8o0/GMBLaCVX62jHXExq/CtUpyg6fI=
Subject key identifier:   7A:35:34:39:92:4F:78:03:53:70:38:5A:28:68:1C:BD:82:BD:FB:5C
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       218E6B7B8CFAEC57951D07830BF7F51CE36A74A7
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:29 +0000
ROA not before:           Fri 03 Jul 2026 18:39:29 +0000
ROA not after:            Fri 02 Jul 2027 18:44:29 +0000
asID:                     272710
IP address blocks:        201.23.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:6b:7b:8c:fa:ec:57:95:1d:07:83:0b:f7:f5:1c:e3:6a:74:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:29 2026 GMT
            Not After : Jul  2 18:44:29 2027 GMT
        Subject: CN=7A353439924F78035370385A28681CBD82BDFB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:75:4a:e0:66:ef:94:c6:95:65:72:0a:72:
                    87:fc:cc:f2:80:dc:44:5c:90:bf:10:d2:65:9b:15:
                    49:8d:ed:9a:05:9f:26:47:af:0d:e7:0e:53:92:cf:
                    09:c9:c8:bf:99:5c:62:b2:53:33:52:12:ff:90:10:
                    80:24:65:89:be:25:68:bf:6f:a9:a4:72:2d:97:55:
                    c8:ab:7f:b6:a2:13:62:14:c1:2e:1e:74:fd:82:cf:
                    94:a0:46:be:39:7f:25:94:f9:dd:2a:39:a4:0a:a0:
                    16:59:04:1b:57:a6:d1:66:d2:ad:ad:47:5a:3b:6d:
                    70:d0:9b:0f:13:26:85:22:8c:eb:fe:4b:13:1b:95:
                    6b:e3:3c:65:5b:26:c9:59:88:cb:94:c0:7c:f9:a0:
                    f4:a4:e6:ec:7c:75:14:a5:5b:36:6e:48:1e:f8:5f:
                    c8:a9:8d:95:92:ee:d6:1c:16:d6:d4:ac:90:d0:52:
                    9f:29:08:2a:5b:fc:4e:a7:c7:84:7b:ec:f3:7c:76:
                    47:31:e1:3c:c6:40:45:cf:98:39:7d:be:45:75:74:
                    b5:0c:f9:00:75:81:69:1c:1c:a3:42:a4:bd:36:89:
                    5d:8d:71:6d:a4:15:d0:62:0d:3f:6e:a3:32:5c:d3:
                    fe:eb:62:ac:1d:ee:62:80:40:f4:ec:4f:5c:df:60:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:34:39:92:4F:78:03:53:70:38:5A:28:68:1C:BD:82:BD:FB:5C
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33372e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:9e:bb:4c:cd:72:a5:1a:f7:b9:e7:74:14:69:f1:f3:13:
         fa:49:cb:61:23:01:70:5a:14:2e:94:79:f7:b7:e9:e1:55:9d:
         77:29:b6:94:02:a1:43:b3:8b:58:50:14:b0:ae:47:95:b2:fb:
         70:23:86:88:9c:65:3e:bf:9c:f2:58:02:bc:04:71:52:e7:fc:
         56:d5:e0:9e:ac:d3:18:8d:9a:5f:e5:0d:f6:eb:df:53:f3:18:
         59:b9:5c:ab:10:41:ac:fe:e2:43:13:65:e5:bd:83:01:1d:3a:
         ee:5e:dc:3a:98:06:17:a4:57:fa:70:78:13:87:eb:c4:1d:7a:
         00:59:76:1e:21:39:ad:89:b7:7c:f1:2f:e3:28:26:21:e3:40:
         9f:88:c0:cb:4e:94:15:b6:43:5b:a3:42:e1:8c:be:9e:eb:62:
         d2:8f:bc:a0:4e:8d:61:42:47:d0:35:57:e9:e2:4c:c1:3c:e1:
         69:09:69:2c:22:4c:a6:be:17:77:76:09:07:5b:1f:94:15:53:
         2e:1c:b5:4c:69:c9:74:bd:aa:6d:04:2d:11:57:02:3e:24:8e:
         53:b6:bd:03:35:ef:5e:c9:c4:0e:bd:6f:09:d7:a0:7a:a9:26:
         2d:c0:cd:b2:4c:74:b7:35:85:d5:59:3f:e7:3f:09:3f:80:5c:
         c4:72:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:43 2026 by rpki-client