Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e372e302f32342d3234203d3e203238323733.roa
File:                     3230312e33332e372e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          CAp5Tmguappsq8qaEcrGspDXQB3fL+rrzRNTvSK1dIk=
Subject key identifier:   16:70:EC:AF:F3:41:65:41:18:92:51:52:EA:59:52:2E:9C:EA:E1:2A
Certificate issuer:       /CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
Certificate serial:       1F051D41E21A1FF227B440B0B5E06B21BDAD22C7
Authority key identifier: 6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e372e302f32342d3234203d3e203238323733.roa
Signing time:             Thu 04 Sep 2025 14:17:43 +0000
ROA not before:           Thu 04 Sep 2025 14:12:43 +0000
ROA not after:            Thu 03 Sep 2026 14:17:43 +0000
asID:                     28273
IP address blocks:        201.33.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Sep 2025 01:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:05:1d:41:e2:1a:1f:f2:27:b4:40:b0:b5:e0:6b:21:bd:ad:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
        Validity
            Not Before: Sep  4 14:12:43 2025 GMT
            Not After : Sep  3 14:17:43 2026 GMT
        Subject: CN=1670ECAFF341654118925152EA59522E9CEAE12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:a6:cb:62:34:ca:57:7a:90:26:dc:0e:33:
                    0c:3d:06:af:a0:1b:bc:64:ae:bd:2d:47:87:bf:69:
                    88:40:18:81:db:78:1e:eb:29:65:09:76:10:82:93:
                    59:52:38:d2:31:b3:d3:7b:29:3d:a3:c3:a9:db:02:
                    1c:cb:d3:0f:68:13:53:46:b4:a5:17:91:6a:08:fa:
                    aa:e7:c0:e9:8e:2d:3c:aa:89:4e:0f:3d:da:f7:ca:
                    9b:0c:37:17:73:a9:67:ba:44:67:07:10:ab:8e:78:
                    36:bf:78:f7:d6:93:f0:fb:1c:9b:f6:fb:b1:3b:66:
                    86:48:2c:82:c9:a3:71:c2:f3:49:20:85:75:51:ce:
                    77:d3:8f:86:78:1d:94:0a:01:0b:68:aa:a1:3b:09:
                    cf:ab:64:12:4a:e3:16:a3:bd:fd:37:08:22:8f:d1:
                    0c:1a:0d:a9:dc:8c:41:d4:2e:f0:0d:a0:78:1f:ee:
                    44:c3:d1:36:a2:65:5e:97:e6:ab:d0:c0:7c:ee:ec:
                    07:f1:68:dd:52:d4:01:73:90:02:ed:53:e1:80:b2:
                    2b:e0:fc:71:d4:63:39:63:1f:d4:1a:30:37:ec:48:
                    67:95:33:df:19:f9:7d:d2:2a:33:98:94:96:89:59:
                    4f:b6:07:3e:b2:8c:b2:bc:6b:04:60:08:04:32:d5:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:70:EC:AF:F3:41:65:41:18:92:51:52:EA:59:52:2E:9C:EA:E1:2A
            X509v3 Authority Key Identifier:
                keyid:6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e372e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:e0:1b:19:ee:6a:0b:d0:0e:f3:e9:9a:88:00:df:d5:c4:
         8a:c9:07:9e:9e:e7:60:51:a0:41:0d:9f:ac:95:d9:13:52:85:
         04:87:e8:74:97:e5:2a:3e:15:f4:6f:a9:77:e2:43:3f:85:66:
         84:73:15:d1:e9:b6:d9:fd:c8:73:21:60:8b:8d:48:76:39:76:
         89:63:3a:ec:34:b1:ad:e1:f9:b1:05:aa:e6:5e:5c:bf:e2:06:
         4d:a4:5b:69:63:dd:03:4b:05:b1:c5:01:20:d8:04:69:e2:5d:
         84:60:16:2d:41:69:b7:ed:8a:0d:65:31:d6:fd:90:7b:3d:96:
         8e:8b:1f:57:c1:b2:3b:cb:df:0c:79:5f:8e:65:86:f7:cb:91:
         1b:b2:dc:71:a0:75:dc:1f:e7:bb:fa:19:9d:a8:7d:7d:cb:12:
         b2:16:8c:51:67:2a:37:62:bf:a7:8f:e1:44:85:ef:36:14:c5:
         f5:b3:25:44:44:bd:cc:8a:7a:5f:29:3a:d7:a0:30:95:ce:6a:
         b8:b1:64:02:9e:b5:3b:c9:d4:be:33:63:5f:5d:9e:07:e2:2a:
         88:f1:51:be:eb:5a:f9:d6:04:dd:88:7b:58:3e:4c:8a:f2:57:
         2f:a9:02:ea:6b:97:0e:fd:e9:32:41:26:0e:03:93:f3:8d:93:
         ae:9f:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client