Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323030313a313262343a3a2f33322d313238203d3e203238363439.roa
File:                     323030313a313262343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          9IU1fedxRqUlFePSyL377neZER8sbGr5C+gtoMym7kM=
Subject key identifier:   8D:DC:E2:00:E4:56:D1:40:8A:F5:E2:90:8B:F5:2A:87:89:7D:E5:45
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       3C77725082EE8939A0143275E211D6D312AE7997
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323030313a313262343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        2001:12b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:77:72:50:82:ee:89:39:a0:14:32:75:e2:11:d6:d3:12:ae:79:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=8DDCE200E456D1408AF5E2908BF52A87897DE545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:27:df:15:66:72:b1:68:ef:da:95:23:68:
                    e5:1d:60:30:ce:e3:7a:d7:56:58:f7:a2:4e:19:50:
                    71:6d:aa:66:34:03:cc:d1:41:ce:5e:8e:8b:87:23:
                    e8:72:44:c3:e6:86:00:56:6c:39:c3:88:71:3e:34:
                    75:5c:f1:a6:b3:96:5c:b1:b2:0c:4a:38:b4:61:12:
                    e8:dd:c2:5f:56:de:4a:16:e1:f0:c5:c4:66:00:5d:
                    ed:50:5d:ad:56:a9:e9:3c:41:1c:0c:b3:1f:ef:95:
                    6f:81:6a:8c:53:5a:2a:6a:c6:e4:c7:e6:9c:39:b2:
                    7c:64:d3:cd:0f:ef:b6:b5:f8:19:c9:54:45:2d:61:
                    d0:97:59:73:ba:b2:d6:98:6d:a4:96:08:d1:a6:18:
                    f7:43:ed:b5:da:ff:15:ad:60:b0:22:53:af:c7:8e:
                    df:e0:b7:5d:51:36:7f:cc:f6:5a:4d:13:3d:11:17:
                    ab:3b:4f:4f:6d:b6:8a:c9:19:5a:01:67:98:2c:a2:
                    4c:03:b7:3e:5d:ab:d4:34:92:20:a8:85:9a:19:cc:
                    50:2a:c8:c0:a0:17:a7:72:85:b6:8b:82:89:0f:63:
                    dc:ab:bc:5d:48:50:1d:a1:7b:f7:b5:60:98:9e:43:
                    e7:64:18:27:7f:75:1a:3e:a0:ce:f7:f6:6f:0c:12:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:E2:00:E4:56:D1:40:8A:F5:E2:90:8B:F5:2A:87:89:7D:E5:45
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323030313a313262343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:8b:6f:dc:10:dd:1b:68:8b:51:9f:f5:9f:74:20:10:54:
         35:29:a6:85:05:53:41:7e:99:33:52:f5:bd:04:f3:b4:65:c3:
         ed:03:33:75:28:56:c3:35:f8:45:db:b0:82:72:e7:71:b2:ed:
         39:26:71:84:63:16:d6:17:b7:f8:74:51:5e:e1:83:f4:14:55:
         92:9e:0e:c3:d1:3a:e8:3c:59:a8:1c:8c:c1:e4:73:7e:b7:77:
         f5:79:05:e7:30:05:06:91:03:79:0d:15:f5:72:d0:ae:ac:b7:
         6e:ea:33:88:1f:28:eb:16:79:82:64:0f:0d:23:fc:16:a7:bb:
         c1:10:1c:c1:d0:ef:23:b5:e8:90:c6:a9:c9:53:c6:f3:e7:d4:
         a0:be:ef:43:84:64:81:33:a9:c2:da:5c:75:41:80:1c:e6:6d:
         6d:b8:cd:e3:b0:8f:a1:34:6e:4f:85:40:1f:19:2e:2f:a6:06:
         74:5d:96:35:88:01:4f:36:42:53:01:47:e8:d9:e8:4f:d5:95:
         cd:2b:b8:b7:c1:c0:ce:3a:da:d1:16:b1:9b:1f:44:c7:6b:d8:
         8c:17:82:e7:93:6e:5e:a8:65:04:93:a6:15:20:03:93:f5:5d:
         94:05:b6:0c:96:9e:0b:58:6b:4d:9c:0b:19:cc:77:9b:61:37:
         7a:9d:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:00 2026 by rpki-client