Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35382e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          eUwZipNT3S1+E67HsdJRZVYIZawopCSe5BogmFQewL8=
Subject key identifier:   17:65:31:3B:E7:B0:88:EC:1A:48:C7:20:15:A5:88:10:4D:30:DF:0B
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       6E6244A5F57BF66AB769DCCD5920A1D87105D7EE
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:29 +0000
ROA not before:           Fri 03 Jul 2026 18:39:29 +0000
ROA not after:            Fri 02 Jul 2027 18:44:29 +0000
asID:                     272710
IP address blocks:        201.23.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:62:44:a5:f5:7b:f6:6a:b7:69:dc:cd:59:20:a1:d8:71:05:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:29 2026 GMT
            Not After : Jul  2 18:44:29 2027 GMT
        Subject: CN=1765313BE7B088EC1A48C72015A588104D30DF0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5d:43:87:c7:3b:50:be:ba:37:71:81:2d:4b:
                    17:a2:76:2a:3e:bf:17:3d:d9:3a:c0:1d:2d:4a:4c:
                    22:e8:6e:0e:13:a1:39:49:ae:c7:ce:4a:06:c1:0c:
                    8b:65:cb:77:d4:22:aa:1b:f0:8f:d3:ea:10:f7:bc:
                    ee:4b:9c:23:cd:3a:98:10:c6:ab:d7:f0:46:b7:8a:
                    95:45:93:3d:db:37:ca:70:d8:9d:1c:86:fe:e0:6c:
                    7b:36:00:c8:fa:20:f0:d5:76:45:d1:81:ba:a8:bb:
                    f1:72:c7:2b:7a:5d:dd:7c:c4:02:8a:24:ab:06:de:
                    5f:55:42:8b:33:d4:6c:77:55:b6:62:2d:df:07:24:
                    42:bf:cc:cf:85:17:0b:43:42:85:cf:79:e2:23:90:
                    8d:45:b3:91:93:62:8f:a1:c1:f4:b6:8e:03:b0:f2:
                    aa:8b:99:a0:55:43:aa:e3:bf:49:fe:8a:74:0b:c4:
                    f2:80:c8:4d:ae:b6:af:cc:1c:9a:ff:b7:f3:32:c5:
                    72:32:be:92:98:3d:e3:00:4a:53:53:0a:51:df:94:
                    73:19:05:e0:5f:aa:c5:fa:8b:af:43:b5:f0:69:74:
                    0d:36:5a:96:9e:5d:2e:4b:03:7e:1d:88:79:5e:01:
                    c8:f8:8f:c3:20:7f:4f:3b:20:5b:00:2e:be:d5:59:
                    1a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:65:31:3B:E7:B0:88:EC:1A:48:C7:20:15:A5:88:10:4D:30:DF:0B
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35382e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:42:d3:12:af:a9:78:70:04:7d:75:31:be:86:91:31:50:b0:
         05:4c:6a:d6:f6:fe:5e:51:6e:fc:55:b5:2a:66:18:5a:e6:3f:
         e7:5c:0f:1e:62:c9:4c:c6:48:3e:90:49:8f:62:fe:28:9b:b2:
         1c:31:39:92:5b:99:51:ed:54:b2:85:04:37:18:97:cf:69:ca:
         15:c9:e2:68:39:20:2f:41:12:d7:fb:17:0a:be:af:67:00:85:
         a6:98:dd:a3:e6:27:b0:0a:d5:77:b8:59:55:dc:c7:29:c4:96:
         e5:e1:7d:99:a3:03:42:dc:4d:76:da:a2:40:1d:9e:cf:39:de:
         91:fe:f1:b3:10:0d:be:de:c3:61:02:89:61:55:93:5d:75:28:
         ce:27:6d:cb:19:2a:c2:df:72:13:f7:a5:a5:71:91:9b:e5:7e:
         57:44:12:72:0c:9b:bd:50:db:4d:f0:5c:88:90:c7:c5:86:ae:
         f6:b9:8e:81:94:da:b1:68:52:53:17:ee:7a:2b:f9:06:d3:59:
         27:24:82:7b:7f:20:74:c2:98:bd:74:07:da:78:0b:0b:56:8b:
         67:e9:08:35:66:59:24:44:a0:9e:fd:72:03:1e:19:6e:18:d8:
         64:e1:6f:a6:03:a9:d7:40:d1:25:bb:3b:a2:0a:9c:aa:7e:47:
         04:a8:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:02 2026 by rpki-client