Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65355.roa
File:                     AS65355.roa (raw, json)
Hash identifier:          uQBJWL7TMs23mGV6OlTmFT9szMTOFPKsOOyssUZwuxk=
Subject key identifier:   FA:5D:48:BA:F0:E1:6F:83:BE:1F:30:BE:75:95:CC:BC:8B:9B:36:4B
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       5E080494B445AC86698AB9A707AF47F96C0379E5
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65355.roa
Signing time:             Fri 02 Oct 2026 20:29:38 +0000
ROA not before:           Fri 02 Oct 2026 20:24:38 +0000
ROA not after:            Fri 01 Oct 2027 20:29:38 +0000
asID:                     65355
IP address blocks:        187.111.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 10:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:08:04:94:b4:45:ac:86:69:8a:b9:a7:07:af:47:f9:6c:03:79:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Oct  2 20:24:38 2026 GMT
            Not After : Oct  1 20:29:38 2027 GMT
        Subject: CN=FA5D48BAF0E16F83BE1F30BE7595CCBC8B9B364B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e4:9a:a8:26:cc:52:ca:0b:c4:84:fa:8d:b9:
                    86:ff:99:fb:18:84:65:e8:17:9d:c1:b5:5a:1c:64:
                    a0:ce:d2:04:a9:70:cf:0c:bc:18:3f:25:7c:95:34:
                    c4:cc:5c:7e:88:63:a2:2b:94:ba:22:80:d9:c0:03:
                    00:62:bb:83:20:25:5f:c9:dc:2e:59:33:62:2f:0d:
                    df:d5:3d:c0:ea:9e:93:fa:57:21:c8:18:39:cc:98:
                    5c:aa:89:24:3b:65:8f:02:c1:e7:d6:59:17:74:7a:
                    fe:5d:1d:07:46:cc:92:25:2f:b7:a7:84:56:64:95:
                    01:64:29:92:a7:fd:22:c1:c6:aa:f6:af:85:8c:11:
                    76:69:89:e9:76:f8:cf:20:cd:89:03:8c:dd:d5:50:
                    43:5c:95:af:ff:b5:a0:60:ae:6b:37:f6:07:10:31:
                    fe:d8:ad:d7:fb:b6:98:b6:26:43:c1:76:ae:77:19:
                    34:16:15:b9:f8:3d:ee:7b:06:5c:f9:9a:77:83:99:
                    8f:78:15:37:9b:94:28:8c:90:d5:4b:59:79:a9:fa:
                    5b:37:ad:b0:f4:0c:b7:ae:c3:ab:7a:96:ea:9e:d8:
                    cd:17:f2:71:d3:d0:ea:e5:c4:d4:11:7d:46:5a:f5:
                    70:a6:8e:da:e6:c2:32:9d:0a:45:f1:37:12:9e:47:
                    c0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5D:48:BA:F0:E1:6F:83:BE:1F:30:BE:75:95:CC:BC:8B:9B:36:4B
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS65355.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:07:66:fc:ac:72:f3:d2:96:51:6d:1c:87:5a:1b:95:b4:77:
         ec:0e:42:2b:21:07:cf:15:1d:0a:92:35:15:0b:83:6f:03:dd:
         d4:f2:fd:79:24:db:d5:3d:7e:c7:ae:a4:0f:44:63:ef:8d:e4:
         a7:51:ee:52:c3:d0:7d:21:df:4f:71:9d:96:b7:e3:ee:88:f1:
         f8:a2:00:b9:52:8f:a9:16:d7:81:56:ed:5b:69:c7:1a:05:61:
         fa:ff:a8:d5:ca:f4:b5:96:c4:5e:bd:54:60:8a:f2:c6:5d:fa:
         00:57:5c:b9:0b:ca:9e:aa:57:40:37:fc:95:e2:31:f8:0a:7d:
         c8:a2:9d:8e:b1:eb:91:89:53:db:e7:d1:1b:19:e0:90:3d:98:
         88:cf:cb:6f:31:b8:43:8e:fa:69:5e:71:71:c1:b7:26:63:06:
         70:a4:c1:d9:76:09:f2:be:d7:4f:b7:89:9e:0c:6c:7e:dd:f5:
         b0:c7:da:45:eb:b7:06:05:51:8a:82:d8:61:90:47:f9:e8:d0:
         25:7b:c1:b6:fa:06:ab:74:1e:bf:e6:f3:f4:69:29:c5:0b:61:
         40:83:92:d4:aa:4b:84:20:7a:f0:8f:f3:de:59:f9:6f:e6:94:
         d2:29:2f:73:fb:42:ae:da:8d:19:c6:90:a3:55:e7:18:5b:01:
         18:a2:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:34:26 2026 by rpki-client