Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3137302e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          cZNwwgYCJkARLA7gaD/7jf041i/CoJzdeJuagYxFQ3g=
Subject key identifier:   B5:43:8B:29:AB:CF:DA:D0:EF:1F:D1:77:A8:E3:AF:E8:72:D5:E5:E5
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       43A7EEF0F04D1660AFC3B2BFA522096C99FA9ADF
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32342d3234203d3e20323632353835.roa
Signing time:             Tue 03 Mar 2026 15:47:42 +0000
ROA not before:           Tue 03 Mar 2026 15:42:42 +0000
ROA not after:            Tue 02 Mar 2027 15:47:42 +0000
asID:                     262585
IP address blocks:        201.55.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:ee:f0:f0:4d:16:60:af:c3:b2:bf:a5:22:09:6c:99:fa:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Mar  3 15:42:42 2026 GMT
            Not After : Mar  2 15:47:42 2027 GMT
        Subject: CN=B5438B29ABCFDAD0EF1FD177A8E3AFE872D5E5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:32:06:e4:e9:fc:48:23:a0:2e:2f:f1:10:
                    a1:52:07:a5:f6:d8:ab:07:5b:cf:3f:07:04:45:e3:
                    2b:d6:45:4b:37:b1:e2:ed:50:8c:9d:eb:b6:66:2b:
                    62:29:18:69:d4:fd:ad:a1:f1:ae:2e:d4:31:b7:4d:
                    ee:5f:cc:bd:b8:fd:63:8c:e2:be:c3:fc:70:58:4e:
                    d3:bd:8a:54:82:07:23:ae:73:3f:6d:10:f9:91:7b:
                    ae:2e:56:41:e9:83:f1:d1:55:6b:7b:61:a6:9a:92:
                    d8:7d:19:73:10:43:67:d0:d8:be:3d:c1:06:3b:a1:
                    56:c8:54:cd:5f:0c:76:bd:75:a7:12:fb:08:79:0d:
                    31:31:2c:e0:ed:6f:9f:6e:c9:c2:21:f1:d3:b0:62:
                    da:20:d1:6c:c8:7e:7c:53:24:a5:c3:4c:be:cc:6d:
                    9c:c3:e3:61:e2:9c:c7:31:2a:69:87:b2:ac:fc:62:
                    00:2e:f4:cf:e8:04:96:9c:ec:04:3d:31:4a:16:20:
                    89:27:58:88:17:6f:a5:a8:6b:21:a6:38:e6:1f:ab:
                    fc:22:11:4e:c9:5e:31:03:85:4e:75:63:b6:cb:48:
                    c6:5a:0e:34:77:85:a7:95:ad:96:44:4d:e6:69:2f:
                    eb:65:02:c7:40:78:1c:81:a0:f5:de:97:81:ce:a4:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:43:8B:29:AB:CF:DA:D0:EF:1F:D1:77:A8:E3:AF:E8:72:D5:E5:E5
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137302e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:83:2a:53:10:83:35:8f:32:99:af:35:10:ea:f9:33:71:
         28:41:32:ab:64:c4:db:52:31:64:5a:4d:a8:fc:f8:cf:db:6f:
         c0:97:1b:0c:f2:0c:e9:09:01:47:be:8a:32:24:8a:5e:88:a9:
         64:34:77:2d:fa:00:33:b9:7b:e8:ad:e8:9b:6d:a6:83:68:8d:
         92:6e:9d:b0:96:d9:58:6a:7b:8c:45:8c:3d:91:b2:9d:70:a6:
         c7:4e:2e:43:5b:22:4d:1d:08:55:af:0f:3f:8e:e2:a2:92:3e:
         59:82:2e:a3:e9:be:1a:84:e9:74:c4:2a:a9:8c:a5:1a:f9:44:
         65:c4:d8:f6:c6:41:b2:3e:f8:1e:a9:91:ec:92:d7:26:55:3b:
         a4:34:62:82:ff:cf:83:db:d4:11:dc:67:ba:a3:93:e3:88:7a:
         f9:c0:3a:77:54:61:6d:6c:23:4d:8b:13:6a:56:db:fa:f4:2b:
         f0:91:43:56:37:29:c5:76:a1:79:b6:03:de:8b:ea:9a:39:6d:
         87:33:48:04:c3:b2:25:fb:90:92:e6:a5:de:3d:59:56:f6:94:
         f0:99:76:3c:a9:36:15:26:82:b2:c7:5e:c6:57:f4:b8:26:df:
         e1:12:67:48:a6:35:be:d5:3f:b0:77:42:d1:39:f5:8c:b7:7a:
         97:16:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:57:26 2026 by rpki-client