Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238323733.roa
File:                     3230312e33332e302e302f32312d3231203d3e203238323733.roa (raw, json)
Hash identifier:          Sj54GsXpA0DRsbENooC5GUZsZjXm279hY335mKzta9I=
Subject key identifier:   71:1E:D0:1B:84:02:31:13:23:AA:10:B1:1D:D3:05:67:23:89:7E:43
Certificate issuer:       /CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
Certificate serial:       1596AE4A9A8611E2CEEA1F1A3395792FD6F8D957
Authority key identifier: 6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238323733.roa
Signing time:             Thu 04 Sep 2025 14:16:50 +0000
ROA not before:           Thu 04 Sep 2025 14:11:50 +0000
ROA not after:            Thu 03 Sep 2026 14:16:50 +0000
asID:                     28273
IP address blocks:        201.33.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Sep 2025 01:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:96:ae:4a:9a:86:11:e2:ce:ea:1f:1a:33:95:79:2f:d6:f8:d9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
        Validity
            Not Before: Sep  4 14:11:50 2025 GMT
            Not After : Sep  3 14:16:50 2026 GMT
        Subject: CN=711ED01B8402311323AA10B11DD3056723897E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:07:ed:ef:0f:0a:5b:b5:27:bc:7f:2a:e9:
                    d5:ee:a8:82:90:6a:3f:be:6a:33:64:5c:25:1c:fe:
                    3c:16:b5:2c:da:56:c2:7d:03:fd:b3:d1:cb:ab:ba:
                    4c:ff:2e:1a:0b:75:6d:c6:64:46:2c:2c:40:a3:69:
                    0d:9d:a9:dd:ae:3d:6a:65:4a:0f:93:06:38:da:d3:
                    53:b5:e6:d2:3f:62:d9:7f:9a:e6:11:2b:2c:75:61:
                    f2:a7:7d:7c:0d:e4:db:9d:d1:8b:85:3c:6e:74:b5:
                    00:46:d3:44:66:5e:6c:c3:d1:58:fe:8e:6c:7d:f9:
                    7b:85:de:5a:5a:19:0d:0f:1a:01:48:16:bb:af:45:
                    05:a0:43:ba:99:30:cf:99:f2:f5:40:1a:bc:51:ff:
                    0c:ac:6b:53:e1:18:5b:e6:3f:ab:76:2e:e1:3a:cf:
                    e1:f3:e6:df:9c:ef:f2:60:7d:c3:8b:3e:9e:8c:20:
                    6e:2d:a5:27:02:07:1a:9d:32:ed:93:42:0f:4c:a9:
                    8b:ab:7c:e4:b7:bf:e9:ea:10:d1:dd:0c:82:d1:cb:
                    4e:a0:fd:c9:b2:16:50:a9:6b:84:25:58:3d:62:1e:
                    9c:7e:7b:f3:41:30:5d:2d:76:6c:98:88:c3:c1:77:
                    73:58:c5:4a:ba:90:23:c9:f6:2b:8b:09:21:76:73:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:D0:1B:84:02:31:13:23:AA:10:B1:1D:D3:05:67:23:89:7E:43
            X509v3 Authority Key Identifier:
                keyid:6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e302e302f32312d3231203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:04:c6:07:ba:db:7f:f1:44:ae:67:33:a7:46:f8:5d:d3:d8:
         31:f7:50:50:36:e2:b7:c3:38:f1:a4:79:ff:1f:8a:5c:ad:bd:
         75:31:2f:0b:2e:bc:cf:fb:c7:a2:3f:f8:99:4e:63:b1:14:22:
         1a:13:df:e6:da:11:e6:2e:3b:ed:07:35:a7:1a:62:f7:8c:3c:
         93:ab:a7:13:b3:04:d3:c0:4d:d5:54:6a:8f:ca:84:d9:b1:bc:
         a0:8e:fd:f1:07:8f:55:b5:74:69:50:c5:3e:2e:d9:8d:47:0a:
         8f:4b:fc:01:31:2d:9b:ff:40:e3:e0:a0:6f:65:3d:9a:c5:df:
         16:76:5f:23:46:09:a2:67:73:9d:01:9a:0d:4c:49:64:1c:5a:
         c4:e8:2b:d2:85:fe:19:45:f5:c1:12:f6:cc:00:0c:22:a8:52:
         74:37:09:c7:95:63:6c:77:44:af:1e:ba:87:78:a4:03:1a:1f:
         ea:70:80:b9:f0:94:bf:12:e0:0f:79:ec:57:62:60:2d:da:f8:
         21:82:c3:8c:d7:a7:ba:b7:30:50:3d:d1:c3:b0:60:27:b3:1d:
         78:e1:6f:af:84:7a:84:cc:07:6c:f9:aa:b3:34:2d:2f:cd:c4:
         f4:3f:c2:2a:7e:e9:b2:e7:66:94:90:53:31:19:08:46:06:e3:
         03:55:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client