Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36332e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e36332e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          6aOpul01YdoRPeIZpv8+CF+RSdx4ZH5WcHr5p+YQJXs=
Subject key identifier:   1F:D6:0D:4E:73:EB:97:A5:A9:6F:58:3D:93:C7:41:DC:7F:F2:A6:47
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       10A8BE213F1ADFD0569F2FAAFD9E92AAA6B15157
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36332e302f32342d3234203d3e20323732373130.roa
Signing time:             Fri 03 Jul 2026 18:44:28 +0000
ROA not before:           Fri 03 Jul 2026 18:39:28 +0000
ROA not after:            Fri 02 Jul 2027 18:44:28 +0000
asID:                     272710
IP address blocks:        201.23.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a8:be:21:3f:1a:df:d0:56:9f:2f:aa:fd:9e:92:aa:a6:b1:51:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Jul  3 18:39:28 2026 GMT
            Not After : Jul  2 18:44:28 2027 GMT
        Subject: CN=1FD60D4E73EB97A5A96F583D93C741DC7FF2A647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:da:9d:1f:43:31:5c:70:74:b4:fa:e2:a7:
                    b9:55:4b:f3:f7:aa:e7:15:fd:2a:10:27:20:33:33:
                    b9:0b:88:d2:29:5f:4b:13:37:67:35:f2:aa:6b:6a:
                    1f:12:18:53:89:b5:1f:b8:2d:03:c6:8f:5a:8d:00:
                    75:92:fa:11:74:5a:63:25:0d:23:1e:8b:f9:95:e8:
                    7d:60:b0:6c:51:bc:f4:85:eb:79:7a:75:5b:e7:43:
                    f2:e9:dd:7d:af:a3:81:10:99:c2:fe:1b:39:62:a9:
                    b4:49:01:6a:f6:9f:57:67:2b:f7:84:4d:e7:a8:6d:
                    e7:19:b2:ce:24:05:4c:7d:7b:62:c5:33:ed:18:71:
                    b1:18:e8:eb:95:51:cc:43:b9:8e:dd:c7:53:33:69:
                    58:43:65:9d:ce:7f:fb:05:44:47:4a:85:92:d0:bb:
                    68:8a:59:b1:a2:a5:f2:fa:a3:24:a8:07:5b:0e:47:
                    84:bc:03:8a:7c:98:bd:74:e4:0e:e1:83:89:7e:7a:
                    89:53:47:6f:77:02:ba:34:08:a0:35:19:fe:fa:e1:
                    f8:7f:92:78:d6:fe:cc:c2:59:c7:46:36:00:25:9c:
                    fd:0b:79:77:76:c2:04:a0:0b:98:0d:27:08:45:b7:
                    c3:7a:44:76:d0:9a:a7:83:af:6e:42:49:fe:91:be:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D6:0D:4E:73:EB:97:A5:A9:6F:58:3D:93:C7:41:DC:7F:F2:A6:47
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e36332e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:fb:78:47:a4:9d:24:09:05:ff:dc:21:3a:a3:d4:fb:e7:0e:
         74:e0:e2:5a:c3:50:81:5a:0a:2b:2e:ab:a6:90:6b:a1:9e:a5:
         6f:fe:35:8a:4e:1f:82:fa:b1:9a:8c:5f:65:fd:16:fa:7a:2b:
         9d:51:55:8c:c3:fc:43:8d:c9:c4:c4:95:e2:f3:40:b2:5b:19:
         4d:50:94:3c:45:87:65:12:ad:45:3c:61:dd:4b:46:d8:d6:85:
         d6:e3:d7:de:1c:81:3f:4b:9d:ca:13:80:31:d2:bf:32:6b:87:
         e7:5d:9b:2c:98:53:c8:64:80:7c:bb:32:7d:20:41:72:33:93:
         fd:51:db:bf:39:ab:73:a5:84:ab:2d:26:48:bb:fc:62:e8:15:
         56:28:98:63:bf:1a:5b:ee:2a:5f:08:5f:e6:28:c3:5c:fb:72:
         b5:23:a3:da:5b:96:b5:45:96:4f:42:ac:4b:58:5e:53:97:bc:
         75:35:96:26:50:88:4a:68:ff:70:7e:52:07:cb:71:7f:3d:43:
         cd:76:6e:ed:56:8b:e3:f4:05:23:48:99:59:cd:19:d0:18:b6:
         55:8a:c6:bd:f1:b3:bf:06:3a:98:f3:22:ba:ae:b6:5c:3b:2a:
         b1:61:62:36:89:ba:8e:4b:ce:aa:9f:b1:4d:91:c2:b9:cf:77:
         45:f2:21:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:52:00 2026 by rpki-client