Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
File:                     3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa (raw, json)
Hash identifier:          tfM44uSuZd5GSGjyfJpPu1ulVNK2KaC4cAKgka955JE=
Subject key identifier:   46:28:BA:1F:7A:FC:6D:67:80:B9:E9:32:88:08:5E:57:52:B6:A8:0F
Certificate issuer:       /CN=D76580431FA15F4C3D598181DBE97B6443141E8C
Certificate serial:       415E4840957C1CB0F3E48EBA0518259EB097C6ED
Authority key identifier: D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa
Signing time:             Thu 01 Oct 2026 20:16:06 +0000
ROA not before:           Thu 01 Oct 2026 20:11:06 +0000
ROA not after:            Thu 30 Sep 2027 20:16:06 +0000
asID:                     267531
IP address blocks:        201.182.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl
                          rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 16:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5e:48:40:95:7c:1c:b0:f3:e4:8e:ba:05:18:25:9e:b0:97:c6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76580431FA15F4C3D598181DBE97B6443141E8C
        Validity
            Not Before: Oct  1 20:11:06 2026 GMT
            Not After : Sep 30 20:16:06 2027 GMT
        Subject: CN=4628BA1F7AFC6D6780B9E93288085E5752B6A80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:7e:71:24:0b:d8:a7:ae:f2:de:ee:d4:e6:
                    64:a9:16:aa:a0:0a:81:fd:04:f0:7b:51:9d:1b:a1:
                    c6:d8:d2:53:bc:f2:66:44:25:2d:65:dd:bf:23:91:
                    c7:5c:bc:23:2a:60:3f:60:c8:43:d0:de:b8:52:51:
                    e3:57:9c:f1:44:8c:d3:01:81:78:40:c7:63:5a:6f:
                    6f:8d:73:8f:10:c2:a4:8f:84:1b:40:6b:9f:27:41:
                    4d:bc:6f:e3:19:82:51:a8:c8:90:33:8f:29:61:59:
                    b5:75:e4:03:87:34:d6:9c:23:41:bb:f0:34:8c:b1:
                    7e:47:97:83:16:1d:71:61:13:cc:c4:f6:59:b4:dd:
                    cd:ff:c2:26:b9:44:75:c4:33:22:1f:46:97:54:cb:
                    f8:c8:5a:97:68:da:85:01:5a:a0:52:5d:26:a2:00:
                    84:e0:81:1e:fc:63:e0:c4:6a:36:71:b6:ba:b4:5d:
                    3b:cd:75:18:17:e9:e0:3e:1c:ca:f5:fa:85:fd:e5:
                    bc:6d:00:ca:79:d8:71:27:d5:54:0e:29:cd:f4:c0:
                    86:3d:d4:63:17:d3:6c:e4:77:6c:93:53:9e:6b:d4:
                    88:ee:bb:9f:6b:d8:44:82:b6:4a:ba:02:1c:13:a0:
                    45:d6:14:70:6f:17:d4:fd:4c:5e:50:07:60:93:ed:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:BA:1F:7A:FC:6D:67:80:B9:E9:32:88:08:5E:57:52:B6:A8:0F
            X509v3 Authority Key Identifier:
                keyid:D7:65:80:43:1F:A1:5F:4C:3D:59:81:81:DB:E9:7B:64:43:14:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/D76580431FA15F4C3D598181DBE97B6443141E8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76580431FA15F4C3D598181DBE97B6443141E8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sSFAgzsUK9o4ECBLjawgW5ftbVD6nLF4Yhaz49Mo2Ap/0/3230312e3138322e3139362e302f32322d3332203d3e20323637353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:99:5c:d4:85:c1:6d:37:e7:0a:4a:89:ce:c3:6d:fe:b4:
         d7:3a:eb:1e:05:82:9c:ae:90:81:70:0e:ae:d7:06:70:ee:c9:
         16:1d:30:7a:31:24:c3:07:52:8d:2d:57:e3:9a:1d:78:ac:a3:
         7e:87:2d:2f:28:f8:6c:3d:47:b4:20:90:60:2e:94:cd:86:97:
         78:31:0d:72:5e:c2:d2:48:71:0d:26:ed:b2:cb:c9:53:b8:7f:
         81:a9:63:82:2d:5e:e2:0f:23:c4:41:c8:b2:1c:15:54:e2:55:
         97:60:e0:4b:2c:d8:aa:7d:a3:67:9d:2d:11:c0:1c:19:34:ca:
         72:2b:30:00:b5:53:9a:d2:49:57:bd:97:8a:35:38:df:cd:51:
         ca:cf:97:d4:f1:65:1f:fe:fc:bd:8d:ac:e5:a8:d3:f4:12:12:
         63:dc:f3:27:2c:e4:c2:b2:92:17:34:98:1c:88:1c:03:93:3d:
         1c:d6:e0:12:7c:ed:1f:ff:31:96:50:7a:a7:4e:8f:b2:49:05:
         3e:ea:0a:9c:ab:9c:17:ad:fe:87:df:72:86:10:8e:db:d2:10:
         ee:63:25:1f:77:f1:19:33:d7:45:43:d2:e1:a0:3d:5a:82:5d:
         a7:7b:8d:5d:65:7c:c1:5e:0a:79:cc:85:75:14:1d:31:75:59:
         80:79:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:49:59 2026 by rpki-client