Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
File:                     3230312e372e3232302e302f32322d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          0998SrT1d8GdpeURCa+He/JwBQla+iaerKdNS6qbqJE=
Subject key identifier:   FF:AA:69:D6:E3:AE:24:34:B8:0F:11:1D:D3:EF:FE:C3:08:4D:B2:E1
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       08A712FC1752D6168A96163324ACB8BF439B9733
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
Signing time:             Mon 01 Sep 2025 07:06:20 +0000
ROA not before:           Mon 01 Sep 2025 07:01:20 +0000
ROA not after:            Mon 31 Aug 2026 07:06:20 +0000
asID:                     265041
IP address blocks:        201.7.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a7:12:fc:17:52:d6:16:8a:96:16:33:24:ac:b8:bf:43:9b:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Sep  1 07:01:20 2025 GMT
            Not After : Aug 31 07:06:20 2026 GMT
        Subject: CN=FFAA69D6E3AE2434B80F111DD3EFFEC3084DB2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:28:f4:5a:bb:e2:0a:ca:e8:ec:fd:8b:65:
                    fb:31:51:24:d5:41:3c:97:bc:d5:b3:7d:22:ca:7a:
                    02:04:65:94:58:c8:e0:23:00:2f:ab:57:40:7c:71:
                    6a:59:73:55:ee:35:de:16:a6:60:5e:e7:5b:5f:ad:
                    ba:eb:82:40:dd:de:12:1e:30:04:c9:0f:74:a6:22:
                    53:5a:ab:f1:a6:ac:52:b5:bd:04:48:80:0e:59:93:
                    c6:cd:1e:7c:20:42:df:9a:2a:77:66:dd:ca:88:8a:
                    2a:cf:bb:3f:12:d4:11:ac:50:78:75:e2:1c:20:21:
                    69:54:9b:b5:a2:a2:24:21:b3:73:4c:cd:84:69:e5:
                    0b:52:bc:2c:4a:36:66:11:44:15:63:a6:17:84:a1:
                    80:12:52:d8:ad:fc:c7:21:0d:b3:06:99:fa:e0:5d:
                    f0:d7:6c:4e:0e:c3:a3:1d:b6:f6:40:f4:32:bf:1c:
                    a5:86:de:05:f1:f3:d8:69:6e:16:8d:4c:73:30:a1:
                    dc:3f:8b:28:25:96:73:40:35:97:12:46:4d:69:0f:
                    6f:eb:cb:8c:dc:05:55:d5:31:d1:df:40:97:d7:9a:
                    5c:a1:fc:a9:2c:dd:f4:08:fa:ae:54:47:5f:ae:1b:
                    42:7e:09:7c:61:69:2e:68:aa:c0:d3:a5:86:17:f1:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:69:D6:E3:AE:24:34:B8:0F:11:1D:D3:EF:FE:C3:08:4D:B2:E1
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:57:ee:3a:d1:c9:0d:91:b3:4e:f9:8b:6b:19:65:d5:4d:
         df:a7:0f:df:86:ee:ba:46:13:82:12:b9:1b:3a:be:ba:10:c5:
         58:0c:60:72:ed:68:40:16:78:4c:44:ad:6d:55:9c:8f:68:a2:
         b3:10:76:80:d2:b5:c6:bd:d2:11:ca:94:16:4c:ee:d1:48:be:
         51:76:e3:ee:76:c5:31:33:df:b5:e5:16:89:fa:d2:24:99:df:
         7f:cd:f9:17:33:70:3a:9c:78:5f:e7:cc:bf:3a:65:2a:36:5d:
         ee:19:74:9f:82:8f:df:0c:5d:2d:e6:5f:80:12:40:6d:38:a7:
         06:5f:91:0e:97:29:c6:8a:3a:50:71:2d:8f:ef:a7:2a:e3:69:
         72:46:9b:ec:ac:6c:78:c4:ba:76:b2:f3:1e:ff:65:d5:da:27:
         dd:9b:6f:be:7f:df:ab:6d:4f:e8:ff:10:9e:cd:ec:39:06:00:
         05:34:e6:61:f8:83:20:38:73:b5:1b:be:e4:74:9c:0b:82:78:
         fe:23:ee:38:ab:df:87:ae:03:44:6e:a8:02:e0:89:58:d2:0e:
         1e:9e:04:40:66:32:ef:be:7b:62:82:89:09:23:ea:4d:df:0b:
         29:cc:b6:24:af:2e:d3:65:26:a6:30:90:b4:83:b0:c6:84:5f:
         a4:55:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:30:58 2025 by rpki-client