Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa
File:                     3230312e33332e382e302f32342d3234203d3e203238323733.roa (raw, json)
Hash identifier:          LVfouVS6URC3PaDfesjUCqfbeM9CKQFQswfOKG2xUv8=
Subject key identifier:   98:D3:B9:E1:25:66:84:F4:5C:7A:1F:94:EE:DA:69:FF:A1:75:7D:45
Certificate issuer:       /CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
Certificate serial:       489B0890DF5E5A6B250A1E7AF02C25A70C7A0456
Authority key identifier: 6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa
Signing time:             Thu 04 Sep 2025 14:17:19 +0000
ROA not before:           Thu 04 Sep 2025 14:12:19 +0000
ROA not after:            Thu 03 Sep 2026 14:17:19 +0000
asID:                     28273
IP address blocks:        201.33.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl
                          rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Sep 2025 01:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:08:90:df:5e:5a:6b:25:0a:1e:7a:f0:2c:25:a7:0c:7a:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C607ADAA97C6582D4AEE8C79D077565176C87D6
        Validity
            Not Before: Sep  4 14:12:19 2025 GMT
            Not After : Sep  3 14:17:19 2026 GMT
        Subject: CN=98D3B9E1256684F45C7A1F94EEDA69FFA1757D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:79:65:61:bb:68:32:00:6c:43:1b:1c:a5:
                    37:ba:fb:a0:1e:18:09:bf:2e:36:3f:db:5b:64:a5:
                    8d:21:d9:71:72:92:44:de:27:2c:d7:2e:11:61:6a:
                    d5:28:fc:fb:11:52:66:ed:8b:ff:a5:e3:bc:9f:ea:
                    0f:de:27:7a:80:50:20:38:0c:3a:62:8f:ff:c4:36:
                    00:51:9c:d9:63:8f:ba:38:e7:ee:51:bb:62:ef:69:
                    2c:f3:a1:c9:6d:90:d7:2c:59:f9:47:19:cb:48:f9:
                    65:ca:d2:75:2a:ab:c8:4d:14:13:0e:57:4d:26:29:
                    20:56:ae:f4:ab:15:12:45:09:94:e8:c4:e0:35:18:
                    53:c4:2a:43:d6:60:25:ef:b2:9c:fa:c0:89:c6:7b:
                    1e:c9:cf:13:f1:4d:ac:8c:ef:9b:08:a4:1c:04:2f:
                    83:e8:95:de:d5:55:f2:08:de:69:c0:14:32:ea:70:
                    e8:de:94:e5:47:ee:1d:60:77:ca:38:c1:e3:c2:28:
                    d3:cc:3d:86:44:ef:69:5e:6b:3b:16:78:8b:dc:e5:
                    b0:3f:21:e9:2d:59:bd:1f:00:d1:06:79:62:c9:65:
                    aa:25:0b:3c:c1:d9:2d:79:af:64:77:83:94:c1:c1:
                    8b:06:80:f7:df:10:e1:08:a4:aa:b7:56:30:72:63:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:B9:E1:25:66:84:F4:5C:7A:1F:94:EE:DA:69:FF:A1:75:7D:45
            X509v3 Authority Key Identifier:
                keyid:6C:60:7A:DA:A9:7C:65:82:D4:AE:E8:C7:9D:07:75:65:17:6C:87:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/6C607ADAA97C6582D4AEE8C79D077565176C87D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C607ADAA97C6582D4AEE8C79D077565176C87D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cwa775MFtn8e4FLYqRDprKDbbjbsFD8DvR59dgCBEQom/0/3230312e33332e382e302f32342d3234203d3e203238323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ec:3f:d5:56:ca:c2:ac:9e:26:d4:31:19:a7:53:fb:6e:2e:
         2b:6e:74:32:dd:af:09:a9:44:c6:25:b7:f7:a7:83:95:d5:c2:
         5b:eb:70:98:87:2d:62:b0:aa:bd:50:9b:3f:f7:9e:92:b3:d0:
         c5:f9:a3:11:b0:23:06:d3:f1:e4:ab:1d:1b:aa:a4:3d:1e:a7:
         62:c3:4a:9e:7a:96:03:ef:2c:bf:eb:98:d5:a5:8a:26:7c:75:
         23:da:46:87:aa:d9:00:8d:85:cd:84:02:0d:d6:92:87:46:28:
         11:ce:a5:90:ec:a5:63:06:cc:68:61:1e:1c:02:07:65:af:5e:
         bb:de:aa:93:de:10:97:25:08:5f:c9:a3:b1:83:00:ba:44:ee:
         f7:5b:2f:fb:d1:34:37:c8:61:66:1b:46:a8:55:24:63:24:e8:
         f0:b1:84:c4:4b:67:bc:cb:8a:b2:ed:9e:d9:15:bc:ef:ec:d3:
         ba:89:78:66:9a:57:a7:a2:88:17:11:08:a2:77:59:24:f1:71:
         db:1b:52:5d:03:ea:bb:c2:0d:5d:21:c0:9d:19:7b:61:4f:d1:
         9c:55:5f:9b:ea:01:3f:b1:fb:8c:fa:da:83:4e:59:46:ab:3d:
         d2:d7:94:ff:7e:9e:9a:50:35:4f:36:d7:ac:53:b9:13:90:a2:
         33:69:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:00 2025 by rpki-client