Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138342e302f32342d3234203d3e20323731373030.roa
File:                     3230312e35342e3138342e302f32342d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          Mty/FVtlTkwEvFutWLA/nQv5tfdfrmQ7fNFXzkfP//Y=
Subject key identifier:   4D:C6:04:B7:3E:ED:42:84:CC:FE:44:4E:44:83:FD:64:A0:DC:39:2E
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       0681F58E4ECB6E519AAA618C0F06A996BD9F2D3C
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138342e302f32342d3234203d3e20323731373030.roa
Signing time:             Thu 10 Jul 2025 11:42:55 +0000
ROA not before:           Thu 10 Jul 2025 11:37:55 +0000
ROA not after:            Thu 09 Jul 2026 11:42:55 +0000
asID:                     271700
IP address blocks:        201.54.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:f5:8e:4e:cb:6e:51:9a:aa:61:8c:0f:06:a9:96:bd:9f:2d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Jul 10 11:37:55 2025 GMT
            Not After : Jul  9 11:42:55 2026 GMT
        Subject: CN=4DC604B73EED4284CCFE444E4483FD64A0DC392E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:d5:6f:f9:32:83:f0:e7:83:59:ae:92:da:
                    7c:41:15:81:74:58:f5:c1:8b:be:b1:6b:06:d6:9b:
                    3c:e0:f2:97:9d:ca:73:5b:20:e2:39:fc:d5:8d:2e:
                    eb:09:d4:2d:d1:f0:9a:68:06:ef:3a:ac:7d:d1:a2:
                    31:b6:61:72:0e:58:6c:19:f4:96:16:bf:bd:dc:1f:
                    bb:ab:1d:9a:c4:1a:8f:45:5a:04:da:0d:22:10:e8:
                    83:fa:84:e4:16:8d:80:75:da:65:05:f0:c9:1f:db:
                    ce:f6:7a:ae:1a:09:71:4c:a3:13:89:49:71:12:f4:
                    df:ee:33:ea:df:a2:20:e1:cb:f9:cd:c5:58:aa:d9:
                    ee:04:57:1c:0e:55:2b:53:7e:76:1c:4c:d2:13:c5:
                    bc:df:32:e7:a9:40:03:c6:88:18:73:55:3c:3c:5d:
                    b6:c0:4d:43:14:a2:75:a2:7d:cd:40:6d:b7:71:2c:
                    34:1a:ca:5a:bb:ee:95:33:24:db:93:ee:ae:3a:72:
                    d8:df:90:68:f3:3c:04:8b:88:c5:fc:25:15:79:90:
                    47:b7:61:f3:00:53:1b:4e:d1:b7:a3:38:61:00:db:
                    04:57:b8:3f:40:6d:ca:c0:e1:78:6b:a4:c4:13:c7:
                    84:e0:a0:1c:06:fd:81:fb:e1:fe:13:61:3b:7a:0b:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C6:04:B7:3E:ED:42:84:CC:FE:44:4E:44:83:FD:64:A0:DC:39:2E
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138342e302f32342d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:ea:ce:3f:ab:51:b9:de:5e:ba:13:a8:9a:70:1b:b9:e3:
         3a:5c:87:73:62:39:97:c1:8f:c4:9e:37:aa:d3:cb:e0:98:51:
         0b:84:5c:95:34:55:bc:31:6f:6b:40:4f:dc:7c:2d:45:b6:9b:
         1f:d0:38:11:ca:01:16:22:f7:7c:12:4e:c7:77:f5:09:e3:c3:
         92:fa:5d:51:12:26:54:6c:9c:da:03:f1:a4:ab:86:88:e1:96:
         c0:40:15:b9:41:c0:b6:dd:42:cf:d6:2f:58:85:43:9f:52:07:
         63:64:ca:b4:70:09:dc:3e:27:48:a8:ce:c4:7c:95:2a:55:b5:
         c4:c7:a0:41:3b:f1:1d:41:4c:7f:b5:e4:8b:0b:b3:c9:0e:63:
         e9:8f:cd:4c:c4:02:4a:a5:1f:5e:14:c2:8c:94:58:6b:30:28:
         ed:b2:de:de:32:79:cd:03:45:db:46:eb:5d:c2:1e:35:3c:de:
         90:43:71:61:0f:71:c6:20:13:50:13:41:c2:33:1b:07:f7:4a:
         9e:04:f2:4d:f7:3a:be:0f:e9:2a:f6:55:3e:fe:07:0f:7a:5d:
         d2:56:88:61:f2:46:84:5b:14:c7:33:26:e8:4e:3c:6e:37:cf:
         35:ff:aa:fd:d0:a9:3f:52:13:2d:be:53:e3:d4:a5:76:e0:6c:
         09:21:a9:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBoH1jk7LblGaqmGMDwaplr2fLTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBQ0JDNTJGQTY5OEUyNjFERjEwODJDMjQ1MEFCNkE0
MTBFNjc0MTAeFw0yNTA3MTAxMTM3NTVaFw0yNjA3MDkxMTQyNTVaMDMxMTAvBgNV
BAMTKDREQzYwNEI3M0VFRDQyODRDQ0ZFNDQ0RTQ0ODNGRDY0QTBEQzM5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrftVv+TKD8OeDWa6S2nxBFYF0
WPXBi76xawbWmzzg8pedynNbIOI5/NWNLusJ1C3R8JpoBu86rH3RojG2YXIOWGwZ
9JYWv73cH7urHZrEGo9FWgTaDSIQ6IP6hOQWjYB12mUF8Mkf2872eq4aCXFMoxOJ
SXES9N/uM+rfoiDhy/nNxViq2e4EVxwOVStTfnYcTNITxbzfMuepQAPGiBhzVTw8
XbbATUMUonWifc1AbbdxLDQaylq77pUzJNuT7q46ctjfkGjzPASLiMX8JRV5kEe3
YfMAUxtO0bejOGEA2wRXuD9AbcrA4XhrpMQTx4TgoBwG/YH74f4TYTt6C72pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTcYEtz7tQoTM/kRORIP9ZKDcOS4wHwYDVR0j
BBgwFoAU3Ky8UvppjiYd8QgsJFCrakEOZ0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC9EQ0FDQkM1MkZBNjk4RTI2MURGMTA4MkMyNDUwQUI2QTQxMEU2NzQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDQUNCQzUyRkE2OThFMjYx
REYxMDgyQzI0NTBBQjZBNDEwRTY3NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzIzMDMxMmUzNTM0MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJNrgwDQYJKoZIhvcNAQELBQADggEBAAp+6s4/
q1G53l66E6iacBu54zpch3NiOZfBj8SeN6rTy+CYUQuEXJU0Vbwxb2tAT9x8LUW2
mx/QOBHKARYi93wSTsd39Qnjw5L6XVESJlRsnNoD8aSrhojhlsBAFblBwLbdQs/W
L1iFQ59SB2NkyrRwCdw+J0iozsR8lSpVtcTHoEE78R1BTH+15IsLs8kOY+mPzUzE
AkqlH14UwoyUWGswKO2y3t4yec0DRdtG613CHjU83pBDcWEPccYgE1ATQcIzGwf3
Sp4E8k33Or4P6Sr2VT7+Bw96XdJWiGHyRoRbFMczJuhOPG43zzX/qv3QqT9SEy2+
U+PUpXbgbAkhqYU=
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:58:23 2025 by rpki-client