Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35322e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35322e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          lYGRCZXxb99ekawuNxRWD5MXxa71ltIsW6yru7fvKLQ=
Subject key identifier:   98:61:D9:5E:85:27:BA:BD:E3:52:2A:D2:48:2D:CC:CB:0B:F3:EA:DF
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7C5D4414D8BC6091A34EAD951CD22CEAECF38B89
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35322e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:29 +0000
ROA not before:           Fri 03 Jul 2026 18:39:29 +0000
ROA not after:            Fri 02 Jul 2027 18:44:29 +0000
asID:                     272710
IP address blocks:        201.23.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5d:44:14:d8:bc:60:91:a3:4e:ad:95:1c:d2:2c:ea:ec:f3:8b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:29 2026 GMT
            Not After : Jul  2 18:44:29 2027 GMT
        Subject: CN=9861D95E8527BABDE3522AD2482DCCCB0BF3EADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:e7:92:e8:0a:3b:a7:85:04:dc:da:89:2b:
                    69:d8:16:32:7f:1d:44:36:82:08:be:8f:03:db:9a:
                    28:c3:df:77:55:4d:1a:19:1a:1f:16:73:af:ca:d2:
                    c7:6a:98:0f:31:d0:7e:d0:a8:0e:a3:6f:df:b2:20:
                    04:98:b0:fe:cf:f7:2c:5e:da:ce:ee:39:11:62:0a:
                    b0:26:26:e9:a1:c2:de:d7:d0:33:b6:75:f0:a0:a6:
                    d3:c8:08:17:bc:74:7a:99:74:e4:b5:39:2f:78:a3:
                    75:64:a6:0b:a7:c9:f3:c1:a2:f4:52:b5:5a:7e:f4:
                    db:9c:8f:d7:dd:15:72:cb:50:2d:98:75:10:2d:d2:
                    62:18:bd:68:c0:da:00:7f:31:8a:c2:7b:80:09:b5:
                    d8:12:eb:6e:25:de:0f:90:8d:81:3e:47:69:96:2e:
                    6e:f6:68:d8:e9:97:27:0f:3f:78:21:2f:2d:f2:c4:
                    0b:28:b9:0b:92:f3:c1:48:cb:7c:e0:e6:04:fd:12:
                    b8:f2:ca:d9:a1:a7:7a:52:cc:81:92:50:69:4f:ee:
                    4e:de:e6:f1:7a:52:ba:98:27:78:c6:d5:10:ed:49:
                    10:5c:5f:f3:2f:7a:1a:99:ab:71:50:5f:1a:7d:43:
                    87:bc:04:25:80:4f:02:bd:61:15:b9:9e:52:a4:8d:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:61:D9:5E:85:27:BA:BD:E3:52:2A:D2:48:2D:CC:CB:0B:F3:EA:DF
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35322e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:95:2e:c5:d4:fe:3f:ab:65:26:75:d4:f7:46:4a:08:ba:07:
         60:1b:23:db:fd:0c:da:30:9c:f9:f7:23:24:94:56:48:40:ff:
         6e:a4:ac:07:47:59:bc:24:71:79:ec:92:bd:63:6d:8a:90:bf:
         d1:63:b6:19:c4:18:ab:7c:61:7c:b9:a6:5b:8e:5f:f9:08:85:
         9b:3b:2f:de:1f:a8:ba:17:a8:ac:5f:bb:e5:9d:8d:3a:42:89:
         fb:b6:60:aa:3b:c6:3a:1a:68:25:27:74:43:19:68:c3:44:45:
         1f:0c:9a:d2:7c:3c:4b:55:d1:8e:96:1c:39:c0:4d:78:ac:4a:
         99:0d:e6:04:b6:c5:01:9f:c8:7b:c4:68:fb:70:8d:41:ef:86:
         76:5e:bc:a2:f1:4e:68:5a:33:06:a2:3b:ef:32:74:b3:c3:0d:
         5f:3b:db:c9:de:9e:97:90:cf:5d:b5:96:b9:c4:ed:e7:94:b7:
         d2:ef:d1:bc:68:99:e5:31:17:ae:a1:b0:39:a5:91:dc:af:24:
         75:d4:cd:28:f3:4e:22:0e:4f:75:46:99:23:d0:3a:70:df:ff:
         2d:3b:4a:fc:dd:d7:3e:7b:34:3b:7e:54:40:c4:14:d8:0c:94:
         0b:9e:21:76:41:54:63:53:c9:9e:c9:09:0b:88:4b:9c:43:12:
         6d:60:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:38 2026 by rpki-client