Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e352e302f32342d3234203d3e203238323733.roa
File:                     3230312e33332e352e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          HIn2lfC5oSZNQjuQR7cQ1zciPnlL25kM0C6wTUTwhX4=
Subject key identifier:   DD:65:EC:39:56:D7:29:75:EE:BB:33:A3:B2:8E:5B:5C:B2:AC:F1:49
Certificate issuer:       /CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
Certificate serial:       76C4866BEDEAB7B09728501F1EB91B0DA64EA4EB
Authority key identifier: 6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e352e302f32342d3234203d3e203238323733.roa
Signing time:             Thu 04 Sep 2025 14:17:14 +0000
ROA not before:           Thu 04 Sep 2025 14:12:14 +0000
ROA not after:            Thu 03 Sep 2026 14:17:14 +0000
asID:                     28273
IP address blocks:        201.33.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Sep 2025 01:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c4:86:6b:ed:ea:b7:b0:97:28:50:1f:1e:b9:1b:0d:a6:4e:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
        Validity
            Not Before: Sep  4 14:12:14 2025 GMT
            Not After : Sep  3 14:17:14 2026 GMT
        Subject: CN=DD65EC3956D72975EEBB33A3B28E5B5CB2ACF149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:99:38:8e:67:0f:7a:70:3a:44:34:4a:fc:69:
                    56:3e:a8:5b:2f:a9:26:aa:11:15:a5:c7:90:a3:8e:
                    ee:d9:27:5c:cd:3d:1f:39:db:73:3a:e1:d2:d9:23:
                    96:88:c2:2e:17:4a:1e:5c:1b:ce:49:3a:c8:08:68:
                    db:6c:c8:d1:c5:3b:4f:24:06:77:d6:b0:28:b1:e3:
                    1b:4c:2e:59:02:8d:64:88:e3:5b:40:63:6f:e3:65:
                    ef:2e:10:c8:19:f7:f4:fe:a6:13:ce:4a:63:5c:01:
                    8c:bc:96:98:8d:e2:10:c8:12:2c:cf:eb:be:18:fa:
                    10:44:f6:e1:9c:f1:18:a8:3b:48:72:5a:6e:b9:6f:
                    62:1f:96:76:31:e7:22:2b:c1:53:5e:43:1c:6b:a2:
                    0b:11:5c:35:a5:d8:3b:c1:a4:0e:39:d0:c2:3a:05:
                    ce:3e:9d:f6:d8:8f:5b:08:ae:cd:f4:75:59:11:b9:
                    c5:9c:0a:39:3e:8e:61:65:cb:d5:14:70:18:6a:d6:
                    de:e5:79:e3:12:94:b6:39:0e:42:a2:78:5d:cc:12:
                    7a:a0:f5:44:96:dd:d7:66:d2:9b:89:62:f5:d5:d7:
                    c2:e4:1d:07:75:a1:9f:d8:cf:35:c2:6f:ee:dc:70:
                    de:dc:07:14:51:e4:a0:eb:c5:7e:80:35:66:3a:36:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:65:EC:39:56:D7:29:75:EE:BB:33:A3:B2:8E:5B:5C:B2:AC:F1:49
            X509v3 Authority Key Identifier:
                keyid:6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e352e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:21:2e:a5:6a:6f:5d:61:05:d4:f8:59:b9:b4:a1:49:77:
         64:cb:ef:85:0d:7b:0f:16:45:f2:d3:0d:2e:bc:7d:25:40:f0:
         12:d0:c7:15:5b:ba:9a:df:0f:c9:30:d9:7b:ce:23:69:5f:03:
         84:4e:16:fc:96:14:17:d4:2d:55:0d:67:bf:46:3c:e6:16:6d:
         bf:97:83:c6:4e:d3:4a:af:8b:22:46:7b:9c:d0:42:16:4b:14:
         c9:e1:4e:2a:85:1b:ad:1c:20:22:f2:9f:33:3c:5c:b6:f4:c1:
         42:47:c5:9e:f6:7c:8e:a8:7a:9c:0f:81:43:24:5a:be:d1:e6:
         47:d1:d3:bd:dd:81:ea:78:3d:d4:1f:aa:4e:69:60:3c:35:00:
         56:1e:b8:ef:f3:dc:df:ed:49:fe:82:03:c1:48:2e:29:e7:c6:
         42:f5:9a:9a:00:9d:21:e1:af:18:9d:65:9a:e8:a1:4d:a0:e9:
         82:06:7d:44:7e:ac:7a:b3:d1:a8:66:70:68:bc:09:ad:7e:cf:
         15:f3:3f:3b:5b:de:33:8c:88:c2:7c:3b:72:cf:e4:e2:1d:95:
         14:03:61:1f:b1:96:42:c5:dd:3d:fc:bf:0e:6b:3d:91:e0:31:
         4a:48:af:da:0a:59:4f:66:a8:b4:13:8a:cf:1d:e4:eb:b9:dd:
         6d:2b:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client