Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36302e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e36302e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          0G8skWjidmZZaGHCIdfoUzZKlZ+IkfWdE8mkj6fwtuU=
Subject key identifier:   01:AD:B5:80:19:A0:3A:27:84:5C:02:25:BB:A9:69:B1:F5:25:C4:C1
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       377D9CDB8D3AD27F16468FDBC008193FE51F49BE
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36302e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:28 +0000
ROA not before:           Fri 03 Jul 2026 18:39:28 +0000
ROA not after:            Fri 02 Jul 2027 18:44:28 +0000
asID:                     272710
IP address blocks:        201.23.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:9c:db:8d:3a:d2:7f:16:46:8f:db:c0:08:19:3f:e5:1f:49:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:28 2026 GMT
            Not After : Jul  2 18:44:28 2027 GMT
        Subject: CN=01ADB58019A03A27845C0225BBA969B1F525C4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:7f:32:b6:35:44:88:2b:0e:47:55:53:57:
                    88:8b:2f:39:2e:07:06:56:53:d8:98:3d:50:3a:ca:
                    dd:1f:8f:b0:44:dd:9e:21:03:e4:90:5b:1f:1d:29:
                    42:fa:b8:b0:24:30:78:48:d7:f6:01:da:b0:4f:d8:
                    8e:d2:df:9a:04:b2:a3:3a:0c:f9:21:8e:d0:3f:e5:
                    10:fa:14:58:e3:8c:87:4c:b2:e7:d9:17:c5:67:92:
                    74:f9:d9:cd:73:b6:c2:f5:5a:8e:d1:74:cd:f1:96:
                    a2:22:ee:ef:95:21:a4:d8:dd:06:5a:37:d8:b0:68:
                    3c:f1:1a:f9:87:ec:5e:39:93:83:fe:53:63:bb:04:
                    a6:b5:5a:71:65:42:9d:87:cb:f7:54:38:94:ab:6f:
                    d0:29:69:a1:6b:19:1e:a4:2b:94:35:e2:0d:b9:f3:
                    09:31:11:3d:fc:6e:6a:dc:17:b1:a4:fe:de:e8:4a:
                    a9:4b:61:e9:c7:5a:f6:cf:e0:fe:ff:fb:6a:f1:4c:
                    3b:c6:a0:48:36:7d:20:03:fc:96:e4:af:c8:ae:4b:
                    ec:de:b1:2f:40:3f:50:ca:53:84:6e:fb:a2:ad:82:
                    ff:35:e1:a5:ee:94:1c:b8:0c:b7:54:02:ad:df:72:
                    0f:af:e7:94:ab:9b:cb:41:ef:01:48:cc:d7:f0:a5:
                    95:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AD:B5:80:19:A0:3A:27:84:5C:02:25:BB:A9:69:B1:F5:25:C4:C1
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36302e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:24:e7:21:72:06:de:81:01:7a:cb:7e:87:13:0a:14:9c:b3:
         9a:fe:5a:c4:d1:bb:9b:f3:4d:4d:35:9c:31:ea:11:ef:c2:0a:
         ae:d3:4b:bb:fb:e2:da:1b:94:44:41:69:3d:68:1d:46:e6:26:
         8c:e3:f8:1d:3b:b4:1a:b1:86:c2:22:93:3e:4c:f9:b3:8b:96:
         5c:81:cb:fc:b6:b5:b7:85:e9:78:52:52:68:4d:26:1a:e4:f1:
         6d:ff:8e:c2:92:29:08:2e:f1:90:16:00:e6:a1:11:13:96:67:
         1f:8e:6e:46:49:30:29:cb:5d:98:3e:f2:ba:01:de:c9:e0:0d:
         3d:35:bf:6e:6a:1e:70:d2:29:d4:91:b0:50:76:a4:ba:ff:71:
         d1:f6:93:77:99:d1:7c:37:c2:29:8e:7f:e8:68:42:a8:57:2e:
         65:78:9f:40:93:4c:87:01:1d:68:93:67:a7:76:46:35:7a:78:
         b8:7b:ba:5d:d6:dd:b3:0e:10:ba:f1:2d:e3:c7:ae:ac:c3:67:
         b6:86:3b:ca:a7:17:e5:a1:96:f9:f5:1b:e0:a6:5a:3b:ad:f7:
         76:8e:58:2c:c1:61:b8:c6:61:52:6d:af:6c:f3:32:3a:f9:51:
         a3:d1:e3:88:6f:51:e9:09:f1:38:de:e7:4d:14:92:f1:b8:7c:
         69:e0:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:31 2026 by rpki-client