Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e33392e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          JLdOfF0jvvOGSOQJ700suGfz5J2TWBF4LetWyWkBUow=
Subject key identifier:   25:38:6E:42:C4:70:11:1B:D9:5F:7A:E8:E3:89:BB:52:3B:18:A9:8C
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       774D502B57D7C6CFEF6A829D6096A310DAB55EAB
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:29 +0000
ROA not before:           Fri 03 Jul 2026 18:39:29 +0000
ROA not after:            Fri 02 Jul 2027 18:44:29 +0000
asID:                     272710
IP address blocks:        201.23.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 00:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4d:50:2b:57:d7:c6:cf:ef:6a:82:9d:60:96:a3:10:da:b5:5e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:29 2026 GMT
            Not After : Jul  2 18:44:29 2027 GMT
        Subject: CN=25386E42C470111BD95F7AE8E389BB523B18A98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:fb:3c:5f:4a:74:3d:95:9f:ac:cc:35:88:
                    49:77:c6:86:0c:f4:c4:d3:55:45:cd:ab:ba:96:30:
                    d1:5b:70:b3:7d:af:b7:90:e4:99:1e:9d:7e:50:11:
                    33:23:f1:63:3a:a9:e6:57:f0:26:27:c0:1e:13:47:
                    6b:c3:a3:f1:d5:2e:99:5a:30:6a:05:46:6e:40:ed:
                    51:46:65:bd:f7:a5:47:d3:21:8c:b9:c7:df:8f:d3:
                    ef:d5:0d:42:bf:80:db:5c:b3:24:21:73:fa:6c:bc:
                    53:36:ab:1d:ce:6f:a6:e9:5b:e8:fc:f0:93:cc:46:
                    df:c9:25:b2:7b:2b:aa:41:e0:28:40:1e:f1:41:b7:
                    b8:d3:ee:97:6c:e3:1e:38:85:f3:a7:e0:8f:e0:7d:
                    43:c5:13:c8:de:1f:d3:3e:08:19:e0:25:f1:17:db:
                    cb:45:46:1c:bd:46:89:4a:38:a8:13:78:35:94:e5:
                    0e:6e:d4:b6:27:86:0d:6a:9b:69:af:e9:52:75:29:
                    6e:1f:d2:38:6b:49:fd:04:39:8e:09:ed:6b:ef:be:
                    b4:df:8d:55:46:48:a4:ee:22:8a:ad:96:16:91:bd:
                    53:61:70:ab:4b:26:9d:4b:74:93:25:58:6e:de:75:
                    6d:d1:03:7b:87:69:2b:28:99:5f:ae:57:45:6b:1e:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:6E:42:C4:70:11:1B:D9:5F:7A:E8:E3:89:BB:52:3B:18:A9:8C
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e33392e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:2d:a7:3a:23:f7:5c:7d:62:50:e1:f7:40:e0:63:d7:ec:
         9a:98:f7:8b:c3:c5:a3:bf:32:f1:c5:72:ce:36:4a:65:04:87:
         71:f5:5c:fb:ba:d6:92:c5:76:d6:bc:55:78:37:a8:d6:6a:8f:
         c0:5c:73:0f:bc:35:93:f7:0c:76:be:b1:37:4e:59:38:20:fa:
         91:53:b9:88:48:4f:b5:b6:42:3f:14:27:a9:17:61:ae:12:57:
         10:fb:15:b3:f1:a2:51:d6:0b:b0:35:06:b5:08:bd:a6:f1:ad:
         37:24:00:5f:e6:d0:05:30:f4:24:50:19:0b:b2:c6:a3:cc:95:
         d8:c0:99:f8:24:a8:63:41:a0:3a:6e:4d:ff:80:da:a5:9c:93:
         a9:ac:b1:81:d4:65:77:07:ff:82:e0:e9:67:2d:f1:c4:b9:be:
         f3:5a:fc:5b:ab:92:21:8f:6e:3c:0a:1b:1e:73:bb:fa:ba:45:
         d5:76:5d:d6:c4:37:4f:de:90:57:89:34:8a:3d:26:9f:47:5e:
         7e:e7:aa:5e:a8:05:8a:bb:73:cf:ff:6a:55:9e:5a:8f:e2:aa:
         c9:97:43:2f:15:bc:5d:f9:2c:99:93:c7:94:69:6b:1b:10:35:
         78:f2:6a:23:cc:f9:e5:da:c4:33:84:6c:8e:af:54:32:bf:d7:
         86:66:18:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:43:23 2026 by rpki-client