Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa
File:                     3230312e33332e31342e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          Gu3F8AHVcJK2bww0AKqs3KZ4J5m/8RjzKF/PSz/T38g=
Subject key identifier:   11:0F:1A:7A:46:38:2F:11:CB:9A:52:D7:F6:97:7F:D8:3C:9F:43:8F
Certificate issuer:       /CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
Certificate serial:       3B6C291E63BCC7DA3118ABE4764E8E380D8DEFE1
Authority key identifier: 6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa
Signing time:             Thu 04 Sep 2025 14:17:22 +0000
ROA not before:           Thu 04 Sep 2025 14:12:22 +0000
ROA not after:            Thu 03 Sep 2026 14:17:22 +0000
asID:                     28273
IP address blocks:        201.33.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Sep 2025 01:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6c:29:1e:63:bc:c7:da:31:18:ab:e4:76:4e:8e:38:0d:8d:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
        Validity
            Not Before: Sep  4 14:12:22 2025 GMT
            Not After : Sep  3 14:17:22 2026 GMT
        Subject: CN=110F1A7A46382F11CB9A52D7F6977FD83C9F438F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:4d:40:6c:98:39:8f:6e:d4:34:1a:4c:c9:
                    46:a2:3f:96:9c:e6:0a:90:7a:83:c2:e0:cd:d6:70:
                    c1:f8:85:1d:48:39:53:eb:50:b2:d4:ea:79:93:68:
                    96:f9:d1:67:78:37:56:79:01:76:fc:b7:47:5f:04:
                    9c:f9:de:6b:e7:8e:d2:14:5e:2c:05:21:96:09:0e:
                    ea:bf:8c:cc:c2:87:92:68:fb:ae:84:e4:ff:ff:66:
                    b9:7b:7b:10:73:2f:64:5d:5c:b9:f0:3a:cb:73:d6:
                    77:3e:37:10:24:44:6e:ef:00:cb:09:00:67:8e:34:
                    86:af:0b:a7:c2:9a:7d:76:fe:0d:52:18:29:5e:25:
                    f8:cb:cd:46:58:70:ab:1d:37:43:b7:ab:5c:60:60:
                    56:79:53:39:e7:dd:86:8c:02:36:b9:11:21:97:e9:
                    2e:76:c5:71:64:14:82:1b:73:82:6b:32:7b:43:b3:
                    8c:51:fb:34:d3:59:fc:cf:60:0f:ca:32:e1:62:41:
                    db:a6:32:db:88:4e:c5:8f:31:ba:4a:e9:b0:9e:51:
                    a5:98:44:b7:57:71:ff:07:ae:3b:98:54:5a:e3:4e:
                    ef:b4:9f:78:70:60:17:37:dc:c9:ae:77:2b:87:00:
                    f2:b7:c8:16:f7:c9:bf:3c:d4:9f:54:00:6d:16:bb:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:1A:7A:46:38:2F:11:CB:9A:52:D7:F6:97:7F:D8:3C:9F:43:8F
            X509v3 Authority Key Identifier:
                keyid:6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e31342e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:45:fc:2c:72:32:40:c8:fc:c1:5c:03:3f:d4:2b:89:34:67:
         82:18:64:23:d1:b3:af:5b:fc:b5:91:30:33:8b:10:dc:b4:29:
         20:21:da:3c:70:e2:78:9d:26:23:ec:0a:12:51:85:7a:c4:fb:
         22:bf:63:1c:a0:57:dd:d7:63:f6:0d:f4:b8:16:36:65:02:35:
         6f:ed:32:b7:7d:c8:ca:c0:34:7d:ed:3b:56:1d:8f:80:0a:57:
         4c:74:d4:17:e5:85:97:89:a8:43:f4:89:09:40:c2:26:86:2d:
         69:0b:fe:94:bd:21:ee:ed:ea:a8:24:2e:c7:9d:03:36:80:72:
         29:b5:a9:05:71:c9:af:7c:9c:20:49:b0:3a:d3:67:c6:ca:25:
         59:67:55:ed:05:b2:5e:38:12:f4:15:bf:47:c2:18:ed:db:c5:
         4e:5f:f1:d7:82:14:25:ef:a2:fb:c7:e7:91:9a:f4:db:8b:54:
         bb:cb:c7:6d:7b:f2:28:fb:93:27:83:32:47:b0:ec:85:a5:a6:
         34:3b:5d:96:d6:a5:93:a0:d3:44:14:78:01:c8:ff:c0:43:2d:
         30:a4:87:14:4e:54:b9:39:1e:fc:bc:1a:fc:2e:25:7c:f1:00:
         f1:17:b8:34:48:fa:ad:b1:5e:44:06:f3:77:6e:be:bc:3d:af:
         58:b5:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client