Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa
File:                     3230312e32332e3136302e302f31392d3234203d3e203232303835.roa (raw, json)
Hash identifier:          zNN0KX8bCPz322w8MwbhK4KjLWvviytbVhsIxAZu/Dg=
Subject key identifier:   F7:6C:6C:3C:5A:0F:2C:B6:40:76:6A:0E:13:92:CB:98:29:AD:2F:18
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       0BAD5CA18124E18E59767FFE730321B242820AC5
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa
Signing time:             Tue 17 Jun 2025 15:00:00 +0000
ROA not before:           Tue 17 Jun 2025 14:55:00 +0000
ROA not after:            Tue 16 Jun 2026 15:00:00 +0000
asID:                     22085
IP address blocks:        201.23.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ad:5c:a1:81:24:e1:8e:59:76:7f:fe:73:03:21:b2:42:82:0a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jun 17 14:55:00 2025 GMT
            Not After : Jun 16 15:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:dd:b5:66:a5:5d:ee:c4:a9:21:40:48:1f:
                    08:5d:e0:c2:8b:1d:56:c0:94:fe:76:af:14:3c:13:
                    60:8f:26:7e:ff:5a:c4:63:f7:af:0f:dc:b8:92:94:
                    66:29:c4:c2:ef:8f:4a:ca:3b:79:14:4e:30:d8:7d:
                    f3:f9:00:42:8a:98:4f:48:13:8c:7e:77:92:c0:d9:
                    6f:06:84:e8:88:5a:df:e8:06:26:27:65:83:3f:0a:
                    04:f7:c7:af:bd:1b:82:19:5c:67:36:cc:61:06:bf:
                    82:0d:24:e8:b9:27:b3:74:2a:07:f9:27:3b:25:d9:
                    8c:39:9d:92:d7:6b:7b:2e:5c:91:1b:8c:2e:1e:27:
                    d9:16:f5:12:16:42:c8:74:bb:aa:9e:19:00:3d:f3:
                    0b:9d:86:65:b7:73:16:03:bd:42:1f:32:f9:27:04:
                    ea:23:a3:67:8c:8d:f7:c4:ca:5e:09:15:ec:1d:1d:
                    7d:ef:e8:c2:cc:4c:b9:11:4e:77:7a:8c:ad:b7:e9:
                    c5:80:c5:dc:0e:03:dd:48:0c:28:38:45:2f:cb:86:
                    be:fa:a3:12:98:c5:0e:0f:a3:ac:c7:09:d5:3a:da:
                    63:56:1b:f2:0c:6b:9f:30:aa:a2:94:4a:c0:e3:3b:
                    ce:f1:28:bc:d7:73:c0:a0:f5:ed:81:bd:01:cf:79:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:6C:3C:5A:0F:2C:B6:40:76:6A:0E:13:92:CB:98:29:AD:2F:18
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3230312e32332e3136302e302f31392d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:f9:d5:03:c0:a1:9a:a6:84:68:a7:98:44:ff:ca:1d:2e:98:
         06:ce:45:22:b0:0b:e9:77:13:96:a3:de:0a:78:eb:af:53:93:
         72:dd:6b:6a:1b:04:f9:36:32:94:25:1e:76:57:1f:d1:98:18:
         b1:e6:50:f8:b6:89:87:97:04:30:8f:c2:f9:67:c4:80:18:15:
         9d:11:43:d3:24:36:6a:e6:00:8c:e4:a0:20:58:56:b0:37:80:
         03:51:ad:9f:9e:10:62:ce:7d:9f:53:f1:28:81:91:80:c5:2e:
         75:ed:2d:de:03:a8:26:3a:56:83:90:1a:1c:3e:48:11:48:17:
         40:f0:e7:41:57:9a:a7:c1:d2:60:11:86:77:10:5d:31:9d:60:
         fc:26:9a:37:06:32:9d:61:4f:20:da:e3:02:9a:30:e2:17:0f:
         0f:93:b3:61:39:0c:d4:5b:ed:9f:d3:50:69:8e:3a:93:21:66:
         7c:fa:30:dd:10:d2:c9:7b:1a:e2:ae:5f:81:8e:a9:03:33:58:
         b5:56:5d:30:56:b8:9e:43:eb:48:68:76:6f:fe:3c:08:97:be:
         57:43:fb:78:a2:ce:7b:08:99:44:d5:fa:43:b6:4a:3d:77:ff:
         bd:2d:7c:8c:8a:e8:89:e2:ec:c9:9f:f6:8e:7d:71:a6:2f:0c:
         ff:28:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:12:35 2025 by rpki-client