Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
File:                     3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa (raw, json)
Hash identifier:          7QtSMmLH4zITRP4xMle1GlDb6uflxhWCGItR9QtPE2A=
Subject key identifier:   DE:CC:78:BA:32:BC:15:F6:76:09:84:AB:86:E9:C3:9F:D8:F8:6D:8F
Certificate issuer:       /CN=A7C1D0E63DC6C4F379E128374A71D2EED2B8F996
Certificate serial:       7D36EFA4AF2B0A48783C851412447102DFB83FB6
Authority key identifier: A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa
Signing time:             Mon 07 Jul 2025 20:18:14 +0000
ROA not before:           Mon 07 Jul 2025 20:13:14 +0000
ROA not after:            Mon 06 Jul 2026 20:18:14 +0000
asID:                     273360
IP address blocks:        201.54.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 02:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:36:ef:a4:af:2b:0a:48:78:3c:85:14:12:44:71:02:df:b8:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7C1D0E63DC6C4F379E128374A71D2EED2B8F996
        Validity
            Not Before: Jul  7 20:13:14 2025 GMT
            Not After : Jul  6 20:18:14 2026 GMT
        Subject: CN=DECC78BA32BC15F6760984AB86E9C39FD8F86D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:3e:68:de:08:a4:81:23:05:b2:ff:f7:fd:
                    bd:8e:de:e2:75:1a:bd:40:6c:bf:51:c3:ae:74:7a:
                    52:5c:95:da:e7:a9:57:32:32:db:d2:76:26:9f:12:
                    26:a3:3c:ff:d1:db:f9:fc:c6:5f:34:97:06:8a:ae:
                    21:b6:c1:d2:f5:00:ff:60:d2:cf:8d:ba:e6:f7:eb:
                    07:5e:88:49:14:9d:5f:32:5d:9f:02:34:c1:73:fb:
                    69:de:c0:3d:53:56:2e:1d:21:79:bd:a3:45:72:96:
                    41:10:ed:ca:be:1c:27:a4:d7:11:36:4e:1d:99:4f:
                    4c:82:8f:94:e9:27:6b:39:d8:47:c5:66:1d:03:a4:
                    20:9f:cb:05:69:c4:aa:ed:5b:7e:a0:8b:9d:b7:5e:
                    b5:0d:7e:2f:3b:ae:4d:dd:9d:a2:fe:54:c2:db:98:
                    32:bb:0e:71:91:61:5d:50:46:53:0f:3d:a3:52:61:
                    67:e5:b8:58:07:38:dc:b3:a6:ba:d9:8a:72:5d:03:
                    5f:52:b0:22:17:7c:28:99:4d:f4:31:25:e5:dd:0a:
                    19:ea:25:96:55:56:45:97:43:f0:56:88:02:18:b8:
                    e2:12:c5:84:b3:0b:02:07:3f:a3:96:5e:80:b7:b6:
                    53:38:e5:1d:ef:58:03:69:62:66:09:9a:e2:29:8a:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:78:BA:32:BC:15:F6:76:09:84:AB:86:E9:C3:9F:D8:F8:6D:8F
            X509v3 Authority Key Identifier:
                keyid:A7:C1:D0:E6:3D:C6:C4:F3:79:E1:28:37:4A:71:D2:EE:D2:B8:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7C1D0E63DC6C4F379E128374A71D2EED2B8F996.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/3230312e35342e3138352e302f32342d3234203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:c8:ff:e0:96:33:24:1d:54:fe:fb:1b:af:a2:7b:85:be:
         93:c1:c0:6a:5a:0a:75:3f:00:1c:f9:61:54:6a:75:d1:a0:ca:
         89:1b:4e:cd:fc:21:ba:2d:bd:f8:88:e0:16:e3:72:c3:b8:41:
         18:45:d9:1f:c0:ce:87:d0:95:4d:46:29:f7:3f:3d:b5:24:d1:
         34:5e:6d:71:1e:81:02:b2:7e:2e:d1:eb:b1:f1:1f:8e:92:1c:
         bf:a1:2f:41:b3:00:58:66:74:bb:af:24:78:b7:9f:95:54:8d:
         db:06:00:ee:b0:7f:15:bb:e2:96:b9:87:18:12:2f:fe:01:78:
         5e:49:96:21:2c:15:c9:8c:ca:e9:95:cc:c7:68:fb:a3:f9:49:
         10:73:0e:e0:88:c0:f8:24:88:df:0e:65:b7:bd:be:d1:14:07:
         e5:66:b7:6a:e9:54:1e:fc:0a:37:b7:87:03:fc:6f:ce:dd:cc:
         30:1a:33:27:b8:ce:41:ed:c9:8e:1b:51:7b:3c:57:99:7c:87:
         d3:a4:56:34:ce:1f:0b:19:95:6c:73:67:28:50:ed:fd:5c:a9:
         87:ee:b0:b3:48:03:65:d4:57:88:89:da:b2:f3:40:f2:67:02:
         40:f2:c7:51:81:db:e9:17:b4:cf:6e:64:16:b8:2e:fb:c4:7e:
         48:63:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:51:58 2025 by rpki-client