Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa
File:                     3136382e3139372e31382e302f32342d3234203d3e203532393437.roa (raw, json)
Hash identifier:          HgDkqra6joHLXxIgv0aMrtMvJS3k/lcwU+AsPcEvwzY=
Subject key identifier:   36:34:F4:19:54:E3:56:B3:B7:27:C1:9C:4F:01:54:B0:F5:A6:E4:2D
Certificate issuer:       /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
Certificate serial:       6F5589645759691E52C5E0D79A214BB2B9E95B42
Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa
Signing time:             Fri 17 Jul 2026 13:03:37 +0000
ROA not before:           Fri 17 Jul 2026 12:58:37 +0000
ROA not after:            Fri 16 Jul 2027 13:03:37 +0000
asID:                     52947
IP address blocks:        168.197.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:55:89:64:57:59:69:1e:52:c5:e0:d7:9a:21:4b:b2:b9:e9:5b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
        Validity
            Not Before: Jul 17 12:58:37 2026 GMT
            Not After : Jul 16 13:03:37 2027 GMT
        Subject: CN=3634F41954E356B3B727C19C4F0154B0F5A6E42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:c0:4b:90:db:98:12:c0:c7:92:d7:b5:1c:
                    0d:ba:75:8c:07:d6:00:99:71:68:6a:e4:8f:c2:9a:
                    d6:41:e5:70:ff:8b:95:f9:07:43:87:1b:58:92:d9:
                    f4:b8:cc:72:5e:ad:4b:5e:bf:21:bc:c7:04:0d:39:
                    21:ba:ea:3a:09:b7:e0:ee:1c:a8:66:9b:2d:b7:01:
                    bf:f9:37:a8:7e:62:6f:60:bc:7c:32:5e:31:5a:17:
                    37:08:68:c3:a8:c4:45:f1:43:56:48:05:84:7a:0c:
                    aa:f1:21:f2:6c:ba:d7:b2:e9:c7:7b:3d:de:16:47:
                    5f:34:03:64:35:57:d5:97:1c:75:36:f0:f2:a3:f4:
                    90:f6:65:af:81:82:7d:9a:b4:f5:af:bb:ff:d1:68:
                    48:3b:bd:63:05:fe:49:3d:66:32:02:2e:67:88:fc:
                    e3:98:49:58:f2:a6:7f:f6:d8:e9:10:a3:f3:69:49:
                    df:44:fd:2b:2c:28:f8:c4:3b:71:fd:9c:66:0c:82:
                    3f:c9:3a:28:21:78:62:c2:8b:2f:20:31:b2:a3:47:
                    30:e8:3c:53:c8:1d:47:4d:9d:5a:91:fd:88:c3:b1:
                    67:8b:f0:71:08:00:2c:25:1e:69:8e:97:27:69:61:
                    78:b0:65:5e:ca:f1:59:cb:e0:42:54:88:bd:a9:19:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:34:F4:19:54:E3:56:B3:B7:27:C1:9C:4F:01:54:B0:F5:A6:E4:2D
            X509v3 Authority Key Identifier:
                keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3136382e3139372e31382e302f32342d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:f2:c9:5a:04:2f:80:1c:0a:f7:cc:47:c9:93:38:c3:7c:c3:
         ce:ca:36:6b:33:dc:3a:7f:ee:49:c6:95:22:df:ce:8a:32:4f:
         8e:e2:fc:cc:db:d3:e6:d9:55:5a:77:2e:f7:65:2b:22:e4:04:
         99:6d:77:7c:93:fd:65:c5:c1:95:5f:fb:12:67:c1:f6:b9:4a:
         8f:b7:13:ab:47:2d:1b:c7:dd:5a:d9:b2:5e:f1:08:a7:7d:f0:
         5b:fc:74:5e:4d:8e:7e:92:2d:da:6c:8e:dc:df:25:5b:3e:a2:
         d2:63:f2:9b:0e:aa:c1:67:a9:b6:0f:5b:3a:90:86:8d:1e:81:
         38:9c:da:6c:e9:8c:f3:b9:44:3b:68:5f:03:c4:c2:c7:6f:d5:
         fb:f0:b8:43:03:85:a8:49:19:1d:aa:56:8c:5c:c7:62:0f:6c:
         9b:d3:5e:69:66:4f:b6:fc:bb:0b:6c:ea:6d:13:ea:ed:10:75:
         fd:b8:80:9e:64:bb:19:fb:2f:67:31:fa:38:6c:f2:f9:1f:65:
         0d:35:50:e1:91:6f:33:73:e5:a4:4a:f2:a0:10:f6:32:c2:95:
         10:22:04:e1:da:6a:77:d8:2e:17:fc:83:1c:fa:18:3c:2f:35:
         98:46:db:3a:36:71:bd:f0:db:9b:9a:ad:39:85:39:fc:17:b7:
         c0:df:7a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:48 2026 by rpki-client