Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa
File:                     3136382e3232372e33322e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          18Vw1YyMha/7nKTKIGt9MU+4KMT0WBZxU+bQ+OjiaLc=
Subject key identifier:   28:AC:C2:77:E3:D9:C2:15:91:E8:B9:B3:0C:D1:4F:48:E0:4F:11:F7
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       648A17613A37231B9B452893A1648F3E1C226BF3
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        168.227.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8a:17:61:3a:37:23:1b:9b:45:28:93:a1:64:8f:3e:1c:22:6b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=28ACC277E3D9C21591E8B9B30CD14F48E04F11F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:87:00:bd:13:1f:f6:04:88:35:fb:19:72:
                    ed:e1:d5:43:b3:84:c3:fb:6e:e0:42:5b:7b:0f:28:
                    2b:99:55:85:33:1f:1b:31:c0:77:ad:5e:f1:25:51:
                    6b:fe:3a:6d:8c:ff:69:d5:1f:f8:9c:08:2b:03:e8:
                    d4:38:5d:d2:6d:ea:47:40:55:94:1f:23:7a:85:11:
                    65:f5:50:46:ef:10:94:9b:0b:e8:82:6d:72:c2:e1:
                    f9:ec:42:b7:fd:74:43:1f:05:a7:ac:05:a7:11:4a:
                    fe:f1:9a:ae:d2:6f:aa:31:0a:6e:2b:29:f1:dc:f7:
                    b5:29:28:d0:65:1c:08:2b:4c:a7:41:a5:ae:dd:7b:
                    72:85:fd:cc:32:ea:0b:0c:32:f7:a7:1c:07:8c:f6:
                    ae:b9:58:85:3e:2d:e6:71:7b:8f:0e:db:aa:27:72:
                    ce:93:1d:c7:be:d3:2f:8d:53:6c:5c:e1:d9:42:f0:
                    ea:6e:07:5c:cb:2b:0d:6c:ed:9e:ad:62:4b:52:b6:
                    5d:16:fb:44:9a:ab:03:8a:16:13:73:df:49:93:27:
                    71:d4:33:82:f1:0e:07:b4:24:a1:17:fa:81:62:01:
                    01:4b:0a:49:f9:e5:19:d4:5b:de:7d:dd:10:03:2a:
                    34:46:5b:80:06:71:a4:35:62:88:7d:72:df:6c:7d:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:C2:77:E3:D9:C2:15:91:E8:B9:B3:0C:D1:4F:48:E0:4F:11:F7
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3232372e33322e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:49:5b:ce:e2:f2:5b:03:d3:9d:66:9c:8a:42:fe:01:e0:4c:
         e6:47:9f:10:8a:94:f8:70:6f:bb:81:00:83:7a:33:03:c1:6c:
         a7:a0:ab:5f:2e:a7:96:ca:d5:d6:bf:ea:e4:60:a6:3e:b6:86:
         6f:a0:40:3a:f6:79:07:a3:fb:26:9a:e8:8f:ca:36:6f:cb:aa:
         2b:41:07:be:0d:5a:65:ca:cc:62:4c:54:fc:92:42:18:56:bb:
         21:8a:c7:b2:ba:d0:b5:f5:53:46:03:bd:4d:68:1d:d8:e0:d1:
         94:35:1c:3c:50:b5:11:56:48:96:93:18:3c:5b:fc:46:76:ee:
         7e:52:15:ff:5b:82:90:4c:f7:4f:dc:ee:6f:77:b4:63:0f:12:
         54:8c:24:cc:f6:14:08:14:27:04:00:ab:30:11:78:bf:ba:9f:
         62:85:cd:26:03:a8:61:41:f3:0d:52:dc:af:41:72:f8:54:0b:
         37:c4:79:b3:9c:27:1e:88:01:e0:b5:c3:0a:93:79:1c:ed:ad:
         ab:17:cf:7a:6a:75:5e:8a:36:dd:59:d8:6b:2b:7a:1c:49:29:
         1b:ba:6e:1c:33:c2:51:d2:f3:dd:aa:94:48:99:67:0d:d3:d1:
         b4:43:33:ee:fa:5d:36:c9:7c:a2:6e:9d:7b:c3:13:16:98:d4:
         9b:dc:96:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:31 2026 by rpki-client