Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138392e302f32342d3234203d3e20323731313337.roa
File:                     3230312e35342e3138392e302f32342d3234203d3e20323731313337.roa (raw, json)
Hash identifier:          zbrIIk03sGIm0J4hFAnnhhrAvoPDsVf/wrxCPdtY07Q=
Subject key identifier:   C2:83:59:37:2D:E2:84:B4:BF:2E:7A:51:3A:7E:2D:49:C1:87:BA:CC
Certificate issuer:       /CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
Certificate serial:       7A4F596B59CF2B0087663FEFFDB3723408401C81
Authority key identifier: 6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138392e302f32342d3234203d3e20323731313337.roa
Signing time:             Tue 08 Jul 2025 01:51:00 +0000
ROA not before:           Tue 08 Jul 2025 01:46:00 +0000
ROA not after:            Tue 07 Jul 2026 01:51:00 +0000
asID:                     271137
IP address blocks:        201.54.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 21:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4f:59:6b:59:cf:2b:00:87:66:3f:ef:fd:b3:72:34:08:40:1c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
        Validity
            Not Before: Jul  8 01:46:00 2025 GMT
            Not After : Jul  7 01:51:00 2026 GMT
        Subject: CN=C28359372DE284B4BF2E7A513A7E2D49C187BACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:0e:c9:6b:f8:e5:28:36:2f:dd:22:8e:a0:
                    23:c4:8e:99:43:72:4b:ee:0f:2d:40:cc:7f:df:a6:
                    4f:48:85:5e:a6:c8:c2:cf:1b:38:94:dd:75:b0:af:
                    5b:fe:80:56:06:82:22:08:69:96:36:1a:71:3d:8a:
                    78:08:ab:0b:9a:34:ed:2f:d5:22:20:04:97:67:0f:
                    cb:91:42:d3:23:54:77:dc:32:6c:f9:45:a8:e8:71:
                    e7:5c:65:98:a3:20:a1:5e:95:e2:64:58:b2:3f:58:
                    61:96:dd:54:8d:58:62:46:81:b0:ab:1b:79:d1:85:
                    c2:0e:f6:4c:7d:7d:5c:ec:42:c3:99:6a:c4:fb:8b:
                    47:bc:e9:d8:75:db:b6:ef:eb:68:99:79:ec:b2:99:
                    25:f2:e1:e2:ad:e9:ea:fc:42:5e:51:23:bd:d6:02:
                    7f:35:6f:8a:8f:1e:7c:05:9e:b7:01:7e:5f:6c:0d:
                    66:2f:7c:e3:cd:36:40:8a:41:a5:ca:aa:4d:44:3c:
                    18:d0:87:b2:4c:46:1e:b8:90:20:46:3c:a2:9c:48:
                    cc:96:ce:6e:8c:6f:6d:e5:e5:59:d6:25:09:49:5e:
                    7a:2f:e1:fd:32:eb:06:13:2b:66:e0:e6:e1:e8:eb:
                    3c:fa:73:32:83:b6:59:57:86:9c:6e:f4:44:37:9d:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:59:37:2D:E2:84:B4:BF:2E:7A:51:3A:7E:2D:49:C1:87:BA:CC
            X509v3 Authority Key Identifier:
                keyid:6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/3230312e35342e3138392e302f32342d3234203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:dc:3b:42:62:04:b7:56:5e:1f:f3:c9:56:4b:4c:49:79:
         b9:cc:05:34:3c:f9:05:99:f2:4d:9a:dc:63:79:67:fe:f9:0a:
         c6:80:ba:66:92:5b:4e:ab:d3:dc:e9:e2:8b:43:f8:86:01:ab:
         d5:e3:f7:be:bf:45:28:90:a4:a3:7a:c6:0f:eb:c8:80:e9:40:
         de:ac:0c:19:88:0c:d0:2b:aa:c0:5c:12:a3:bc:34:f2:90:7a:
         dd:ec:bd:ad:dd:38:0e:e6:f8:97:36:d5:83:0e:02:af:e2:fd:
         8c:ab:c4:54:e0:f3:6b:c2:a9:81:7b:1a:a7:b6:a7:ad:d0:d7:
         a8:fd:23:eb:28:12:6b:42:d8:ac:43:79:1e:b1:d9:8d:fc:aa:
         a9:4f:78:27:e7:75:ae:ee:a2:27:a4:19:2e:5b:1a:d4:99:82:
         05:c7:aa:76:6a:48:92:e3:d7:50:a7:4f:6c:b3:75:eb:ae:86:
         e3:ee:66:c7:87:c4:0c:6c:14:87:6f:92:21:43:03:f7:a6:ad:
         8e:25:26:9e:2e:c3:53:61:fe:58:ad:8d:c6:8a:ca:03:65:4c:
         b0:92:70:8f:5b:22:d2:4b:12:a0:c0:d6:b6:e8:82:a3:54:71:
         1e:cd:90:64:dc:f6:21:10:36:ff:e1:a1:f7:91:b3:a1:da:25:
         07:fd:18:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:10:42 2025 by rpki-client