Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa
File:                     3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          bhplePJxjIi8RpWfI8p4XNH0ydZJSCFY1bBCDKAiwJQ=
Subject key identifier:   D4:C9:CC:C6:36:E1:37:2F:AB:8F:FD:47:CD:55:D4:0F:62:90:14:F9
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       6BDFBD664FE81E109EF142E4B90D088A86E117CA
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        201.158.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:bd:66:4f:e8:1e:10:9e:f1:42:e4:b9:0d:08:8a:86:e1:17:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=D4C9CCC636E1372FAB8FFD47CD55D40F629014F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:f6:63:a0:60:6e:21:b2:0a:bf:59:7c:61:
                    3d:1f:38:9e:91:6e:82:53:bc:73:ee:d0:59:e5:ce:
                    40:57:7c:a3:d5:de:71:6d:85:b1:a9:28:8e:95:c8:
                    f0:8f:a0:1f:85:c1:ff:ca:8b:c4:02:a6:9b:5f:f8:
                    94:15:ae:50:96:31:e4:51:40:cf:33:b7:2e:14:47:
                    2d:ac:82:36:aa:99:de:8d:a9:5e:2b:09:35:21:a2:
                    11:4a:58:95:83:d8:4a:85:88:4e:66:36:cd:29:a5:
                    a5:d9:4c:6f:06:0b:5b:81:e4:d1:fa:1b:2a:22:3b:
                    2b:99:d2:85:6c:6e:7c:7b:2b:46:94:3b:e2:10:4e:
                    b0:2d:9f:5f:b2:d1:47:8f:a3:eb:1c:0f:1c:b4:81:
                    89:99:86:30:97:2c:67:e5:28:e1:c9:e0:b5:2d:e8:
                    ed:28:c9:1d:61:66:a8:1e:ac:58:05:81:0d:c5:eb:
                    e5:a0:ba:dd:9e:6b:89:84:8d:76:92:7e:75:26:43:
                    4d:75:bd:2a:dc:ad:39:cd:36:1a:2e:b1:59:f0:45:
                    a8:8d:c7:b6:30:2d:1d:a8:6c:e5:88:df:11:7d:b4:
                    7b:f9:66:c2:c7:0b:36:86:ed:da:81:76:2b:c1:c9:
                    a0:0e:11:a8:89:46:96:55:8f:af:c2:ed:25:94:88:
                    12:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C9:CC:C6:36:E1:37:2F:AB:8F:FD:47:CD:55:D4:0F:62:90:14:F9
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3230312e3135382e32342e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:d8:fa:6d:25:c4:d3:bd:41:9b:8a:ca:49:aa:79:cf:39:3e:
         b6:d5:06:e7:2f:ff:84:2c:a9:9a:68:c9:42:79:b5:4a:da:ef:
         b4:55:db:bc:06:73:3b:69:5c:5d:c8:ce:0b:13:be:c0:7d:f5:
         75:83:4a:34:63:78:51:c4:5f:bc:01:dd:e2:e4:fe:14:fd:f4:
         ef:20:7c:9d:05:65:da:ac:f1:50:4d:56:2d:8b:ed:03:44:3f:
         ce:f4:b0:57:ce:04:df:35:be:26:ad:ae:6f:c0:6c:57:d8:cc:
         81:cc:ac:21:b3:e6:83:7e:4d:94:53:c1:b0:8e:c1:79:3a:c4:
         ba:f1:4e:74:c2:b4:99:e0:b0:04:ba:11:d9:28:f1:90:f5:7c:
         32:22:09:33:46:68:65:47:4c:07:c3:af:f0:24:00:a7:8f:f4:
         5f:54:25:ac:b5:09:ef:ab:79:47:a1:4b:23:67:95:1f:44:fd:
         f9:e3:67:3f:93:0c:49:57:4b:bf:eb:cb:ea:f6:cf:06:57:59:
         81:5a:92:92:92:82:6d:65:53:5d:74:21:e5:02:aa:d5:7b:62:
         ba:3f:4e:55:fc:54:e5:b1:0f:f6:41:2b:c3:7e:15:c7:52:86:
         98:41:66:52:31:04:a3:b7:03:26:d1:86:8c:20:98:74:eb:df:
         bf:2c:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:24 2025 by rpki-client