Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138362e302f32332d3234203d3e20323731373030.roa
File:                     3230312e35342e3138362e302f32332d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          RRe3gXJvtiQ7soV+K7lA5OaoqBDvtbius3QPuaA9Wbs=
Subject key identifier:   F7:8B:10:F2:AF:05:6B:82:46:EB:40:68:9E:56:12:3F:53:42:69:45
Certificate issuer:       /CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
Certificate serial:       571731A195FE340B981607342414601C11BD9BDC
Authority key identifier: DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138362e302f32332d3234203d3e20323731373030.roa
Signing time:             Thu 10 Jul 2025 11:42:45 +0000
ROA not before:           Thu 10 Jul 2025 11:37:45 +0000
ROA not after:            Thu 09 Jul 2026 11:42:45 +0000
asID:                     271700
IP address blocks:        201.54.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 13:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:17:31:a1:95:fe:34:0b:98:16:07:34:24:14:60:1c:11:bd:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCACBC52FA698E261DF1082C2450AB6A410E6741
        Validity
            Not Before: Jul 10 11:37:45 2025 GMT
            Not After : Jul  9 11:42:45 2026 GMT
        Subject: CN=F78B10F2AF056B8246EB40689E56123F53426945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:38:c8:3d:f8:87:b3:40:11:36:1d:31:f6:
                    65:c0:51:29:28:34:8a:3e:df:b1:f6:15:89:8c:a8:
                    c8:91:0c:10:df:49:b0:fa:74:f0:76:b4:e5:d2:59:
                    00:94:c8:20:17:4f:35:48:2c:c1:ac:de:ac:db:97:
                    3a:3f:20:8a:ba:c7:a8:6b:44:0b:21:d7:71:f0:cd:
                    8a:2a:14:51:cb:2c:d1:d2:5b:e5:c4:51:f6:0d:5d:
                    d3:63:3d:1e:91:8f:a0:be:d7:0e:a0:94:74:d6:82:
                    df:38:41:0d:84:6e:4e:e2:d9:90:ba:cd:11:8e:fd:
                    48:2d:87:fc:8b:78:92:74:3b:0f:3d:0d:c3:e8:02:
                    d4:1c:7f:4b:36:7f:f9:5f:c6:9a:ba:aa:39:6d:88:
                    d6:de:e4:78:33:ac:9a:0d:96:c4:c2:b1:43:a1:57:
                    a7:86:1a:35:27:ae:1d:52:a5:59:a7:7b:59:51:77:
                    6d:13:48:37:de:f6:c2:69:ec:06:ee:a4:34:23:e5:
                    49:fb:d4:6e:77:ae:42:92:86:00:28:d1:50:6c:6e:
                    81:ac:d8:ca:b7:af:e3:cb:23:b6:29:90:c0:31:7a:
                    17:24:78:3e:55:73:52:02:a2:d8:76:62:50:32:02:
                    e1:a2:8b:82:83:47:13:bc:70:f7:15:de:a3:9b:3f:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8B:10:F2:AF:05:6B:82:46:EB:40:68:9E:56:12:3F:53:42:69:45
            X509v3 Authority Key Identifier:
                keyid:DC:AC:BC:52:FA:69:8E:26:1D:F1:08:2C:24:50:AB:6A:41:0E:67:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/DCACBC52FA698E261DF1082C2450AB6A410E6741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCACBC52FA698E261DF1082C2450AB6A410E6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3230312e35342e3138362e302f32332d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:40:c1:d6:5b:e1:a4:60:1e:24:fd:0f:1f:4b:31:77:80:
         cf:6e:6a:db:e0:85:0e:16:09:2b:aa:ac:21:64:62:84:08:9c:
         a0:78:57:71:a8:1c:36:1d:54:35:2a:d1:d1:f0:b5:2f:b8:c0:
         55:d6:50:ea:97:00:b3:ea:95:be:c4:c6:a3:e3:aa:0f:95:2d:
         e8:98:92:b7:69:1c:6c:ba:2c:b9:48:f5:f2:12:b0:a2:cf:01:
         27:e4:68:5b:75:3e:73:2d:7c:ce:d1:77:7d:d3:4b:61:7f:ab:
         9c:a5:80:0f:27:7c:d5:0f:4c:c6:de:2a:d3:5b:0b:2f:dc:1b:
         d2:eb:b9:82:04:71:c0:39:e5:fc:48:b3:97:bb:c5:a8:bc:51:
         b5:36:d5:d1:94:28:10:d5:ce:98:4d:61:c7:de:46:35:ce:0b:
         a5:e9:04:20:cb:95:0a:b2:ac:25:f0:cd:6f:c9:28:23:44:47:
         45:f2:78:de:47:f1:c5:db:15:fc:ff:db:3e:dd:82:a9:2e:8e:
         ce:1a:13:14:58:47:f9:0e:ee:f8:ed:94:6b:8c:dd:2c:7e:56:
         20:5d:5a:88:f7:15:5b:c2:49:17:64:bc:7f:f4:43:c8:42:88:
         f9:a4:d5:db:92:10:dc:86:79:0d:3f:c6:44:b4:fe:1d:03:60:
         3b:3c:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:00:01 2025 by rpki-client