Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa
File:                     AS53224.roa (raw, json)
Hash identifier:          4LAaRJXmveKLSjf8MRSZUxCtao52jTxgkMeA05cx0AU=
Subject key identifier:   6D:F1:86:03:71:70:9E:B2:E9:A2:A8:8D:84:16:06:7D:05:78:17:51
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       415C86921C8FC7F372D65E5BA9BC1BAF9FC76331
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa
Signing time:             Tue 15 Sep 2026 19:39:39 +0000
ROA not before:           Tue 15 Sep 2026 19:34:39 +0000
ROA not after:            Tue 14 Sep 2027 19:39:39 +0000
asID:                     53224
IP address blocks:        186.193.96.0/20 maxlen: 24
                          186.208.208.0/21 maxlen: 24
                          189.45.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 10:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5c:86:92:1c:8f:c7:f3:72:d6:5e:5b:a9:bc:1b:af:9f:c7:63:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Sep 15 19:34:39 2026 GMT
            Not After : Sep 14 19:39:39 2027 GMT
        Subject: CN=6DF1860371709EB2E9A2A88D8416067D05781751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:62:81:ba:57:52:4f:c7:a0:e9:e7:21:dd:
                    32:29:a1:14:f3:0d:68:cc:6c:ef:f0:71:d5:9b:6b:
                    5d:35:7a:07:bf:eb:0f:5d:54:c6:42:5e:7d:89:17:
                    16:ec:70:97:a9:d8:70:42:57:76:b5:95:0d:ee:5e:
                    f9:4a:03:71:22:1a:35:3e:20:83:07:f6:9b:43:7a:
                    af:fe:6f:97:f7:cc:35:b6:8e:aa:49:81:86:9f:f4:
                    c5:b5:19:57:5e:9b:97:e1:d9:6f:65:93:a7:fc:81:
                    8d:d2:07:6c:8f:4f:57:3a:12:92:05:d1:8b:93:a8:
                    3b:cb:66:bf:91:df:72:89:45:29:23:07:2b:89:6c:
                    ba:6e:dd:0d:24:00:b2:ff:a0:26:6f:7d:b2:50:b4:
                    06:04:bf:4c:f5:fe:d7:28:dc:2f:b4:03:10:4c:f4:
                    1f:04:7e:7c:f2:02:b8:f7:8e:cf:43:df:69:d2:c6:
                    c5:02:fd:0e:47:f4:c9:29:d3:45:02:7d:55:3e:c2:
                    69:0f:75:e4:d7:9a:25:ec:15:15:79:bc:77:5e:02:
                    66:ab:ba:a2:5a:20:4f:d8:be:29:cb:d5:a2:b9:7a:
                    5d:42:03:85:60:5a:d9:0e:9f:26:8a:fd:e2:43:bb:
                    9d:9c:cf:69:b6:be:b1:4e:6d:05:52:e2:8e:62:a5:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:86:03:71:70:9E:B2:E9:A2:A8:8D:84:16:06:7D:05:78:17:51
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS53224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/20
                  186.208.208.0/21
                  189.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:03:28:0e:ca:ff:d4:12:eb:28:82:34:f2:8d:d0:19:1d:a6:
         90:68:cb:e8:75:21:c0:42:86:78:ff:bd:4f:c3:48:02:f0:bb:
         1e:6c:05:00:50:eb:d8:51:39:19:b5:78:c5:d8:cc:08:22:72:
         c1:fe:22:c1:77:7d:e9:69:bb:3a:48:8d:a4:e9:e1:7f:4e:28:
         95:7d:b7:0c:66:bd:82:1a:09:06:5a:66:7c:3d:41:7d:34:49:
         94:91:a8:66:c4:5e:3d:d9:e2:f9:29:8f:ea:07:16:0e:44:44:
         d0:ac:4d:3b:84:3b:b0:4a:90:68:70:d6:2c:2d:45:51:43:d0:
         6e:cb:bf:b6:9e:b6:f9:0c:87:cb:2a:9f:52:5a:74:cd:a6:d6:
         52:b7:93:02:69:8d:7f:ab:1d:04:5a:12:aa:ac:6d:9b:b8:b3:
         05:38:39:fc:c2:72:3d:0a:e5:b2:10:ea:de:fd:62:1a:67:c1:
         97:66:a6:18:41:f0:f6:1e:b2:59:da:78:ea:a2:7a:97:0e:c5:
         4b:b9:7a:44:f3:4c:bb:08:bf:a0:a8:9e:42:2a:74:ae:76:de:
         b0:83:0d:f1:16:d7:fb:02:69:1a:ea:5a:d9:58:92:2c:ff:d1:
         7f:59:aa:4f:ab:18:11:3a:b8:33:13:aa:c2:4e:2c:94:6b:8c:
         48:c7:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:45:21 2026 by rpki-client