Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa
File:                     3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa (raw, json)
Hash identifier:          4bXTdnrqtSaXPdJ+nYkBWs8VZ5lXIjS+zjH/PF6kbAo=
Subject key identifier:   65:DA:B6:57:77:A7:72:86:A9:E4:C6:9B:47:91:85:0B:98:62:49:16
Certificate issuer:       /CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
Certificate serial:       32D9819E036C4D40B1F16200112B556D7101E6E5
Authority key identifier: 6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa
Signing time:             Tue 08 Jul 2025 01:50:17 +0000
ROA not before:           Tue 08 Jul 2025 01:45:17 +0000
ROA not after:            Tue 07 Jul 2026 01:50:17 +0000
asID:                     271137
IP address blocks:        201.54.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d9:81:9e:03:6c:4d:40:b1:f1:62:00:11:2b:55:6d:71:01:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
        Validity
            Not Before: Jul  8 01:45:17 2025 GMT
            Not After : Jul  7 01:50:17 2026 GMT
        Subject: CN=65DAB65777A77286A9E4C69B4791850B98624916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:99:91:b3:f9:d4:04:c1:5c:d9:ee:46:5a:
                    fc:de:ba:1d:b9:69:82:9a:24:0d:70:e5:61:fc:92:
                    7f:74:1d:b3:39:49:75:1f:f8:06:f3:5d:d2:e3:90:
                    1a:7a:13:42:df:99:94:de:ca:30:aa:d8:c0:41:e3:
                    d1:47:f3:54:8b:1c:5d:2c:35:ac:41:f6:b0:45:2f:
                    a1:c9:df:3d:2c:53:cb:a8:52:18:2e:7c:02:cd:f9:
                    84:dd:1d:cb:6f:bd:7e:f7:73:48:88:28:ad:55:fd:
                    8f:71:a6:8e:53:9a:ab:3c:05:f0:de:6f:27:63:55:
                    e5:e9:6d:c5:ee:75:15:46:2d:25:02:3f:e3:4c:6e:
                    6d:68:a1:6a:43:0a:34:e9:09:0e:be:72:ca:17:e3:
                    bc:5a:14:84:8d:01:03:26:1f:ad:c5:89:e3:f4:f5:
                    56:f4:f1:c3:dd:67:00:7d:cf:35:82:7f:dd:e2:0d:
                    1c:5c:e0:10:8b:32:f7:82:94:08:f0:43:6b:b7:99:
                    1e:4e:eb:a4:88:3d:9d:9b:0a:2c:59:55:97:15:51:
                    b1:ed:e3:13:19:43:9f:04:59:09:00:87:1a:9b:92:
                    95:66:ef:7a:09:d5:39:58:dd:44:b6:69:8a:48:1a:
                    ab:b7:bc:69:e8:ca:0a:25:44:fc:49:4c:7f:82:1b:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:B6:57:77:A7:72:86:A9:E4:C6:9B:47:91:85:0B:98:62:49:16
            X509v3 Authority Key Identifier:
                keyid:6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138382e302f32342d3234203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a2:fe:84:a8:db:36:04:d6:5a:db:18:73:18:53:d4:70:6c:
         68:a2:39:89:cc:73:a8:82:0e:e5:82:f0:56:c0:dc:83:72:93:
         59:3f:dd:ec:27:90:98:5e:f0:14:2a:45:ca:89:65:0b:8f:ce:
         25:36:b3:3d:7b:df:d7:68:c6:00:58:c5:06:04:c3:58:da:78:
         8d:23:eb:b1:ee:0f:46:60:ed:d4:b3:98:14:5c:1b:bc:be:8b:
         55:f9:03:aa:bb:5c:b4:93:b4:27:12:d1:98:10:1a:6b:25:19:
         ee:ba:50:1f:d3:c2:5e:de:15:6f:0d:16:d9:8b:4c:8e:1e:52:
         fc:df:90:fa:7b:e9:e3:77:e0:7d:1d:da:f3:ee:2f:02:a3:1f:
         53:68:7b:21:53:e8:cf:f0:b3:21:23:c7:52:60:2c:d7:40:9c:
         3c:62:6b:c4:ea:6b:2e:c8:21:80:59:c2:9c:c9:f0:0b:f5:48:
         37:5b:ee:4d:d6:2c:ba:ce:0a:3c:d6:26:f8:31:3f:21:0c:0e:
         5a:93:9e:ce:c1:9d:b5:87:98:fc:b8:8d:eb:a8:f0:16:7d:5c:
         6b:62:8b:20:0e:4a:ed:37:86:21:ad:9e:10:f4:40:db:20:89:
         13:dc:35:b1:37:14:d2:d4:ca:78:46:1c:b3:7f:d7:69:52:10:
         ef:23:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:10:36 2025 by rpki-client