Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/3136382e302e38302e302f32322d3332203d3e20323635323235.roa
File:                     3136382e302e38302e302f32322d3332203d3e20323635323235.roa (raw, json)
Hash identifier:          ZQ2kzCstOB5Jy6VLl2XJvXgt+1fIt3RWG6ESsjzsWkw=
Subject key identifier:   A6:03:EE:C1:14:A8:DB:17:15:5A:30:9F:04:1A:BF:B3:CE:6A:E8:5D
Certificate issuer:       /CN=5561415ABA0D39BE24A249DCCEC552C0B7230FD8
Certificate serial:       67EBFF6ABC5D3D396C67F500C4CD44BE8D47078C
Authority key identifier: 55:61:41:5A:BA:0D:39:BE:24:A2:49:DC:CE:C5:52:C0:B7:23:0F:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/3136382e302e38302e302f32322d3332203d3e20323635323235.roa
Signing time:             Wed 15 Jul 2026 17:33:23 +0000
ROA not before:           Wed 15 Jul 2026 17:28:23 +0000
ROA not after:            Wed 14 Jul 2027 17:33:23 +0000
asID:                     265225
IP address blocks:        168.0.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.crl
                          rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:eb:ff:6a:bc:5d:3d:39:6c:67:f5:00:c4:cd:44:be:8d:47:07:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5561415ABA0D39BE24A249DCCEC552C0B7230FD8
        Validity
            Not Before: Jul 15 17:28:23 2026 GMT
            Not After : Jul 14 17:33:23 2027 GMT
        Subject: CN=A603EEC114A8DB17155A309F041ABFB3CE6AE85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:68:49:dd:2b:e9:d4:cb:73:ca:53:ac:00:
                    b0:43:b6:1f:20:f0:58:b1:34:76:46:a9:33:7c:52:
                    02:ee:d7:4b:61:10:d4:dc:f1:e5:c8:67:0f:da:22:
                    6f:4a:42:cb:22:af:05:65:37:5d:b8:b8:4c:58:c3:
                    a8:9c:93:bb:85:09:27:2a:d5:8a:0a:b4:bb:ab:ef:
                    86:19:5a:cc:29:5d:83:f2:c8:ea:4f:d7:95:01:5a:
                    79:9e:73:f6:1d:2a:5a:2c:f4:50:ec:1c:b8:74:8c:
                    bc:30:1a:07:0e:95:99:c5:63:18:c6:c7:67:fb:a9:
                    6d:71:86:a5:bc:cf:9a:4e:97:06:ad:91:d9:47:08:
                    d8:d7:7f:f0:d4:73:7f:74:15:0c:77:98:b1:4d:8f:
                    50:0b:1d:e4:99:41:ea:08:c4:7a:72:e4:16:b4:e2:
                    d3:6a:ca:37:f9:e9:69:69:e8:ef:93:73:af:ab:55:
                    d6:87:ea:6c:87:f1:ab:2a:77:8c:96:d8:bb:29:99:
                    28:4c:eb:b0:30:e4:70:a5:c9:96:9d:1d:bf:c5:de:
                    10:5d:79:8c:cb:67:96:34:0e:94:0f:06:ac:8e:84:
                    5a:b3:07:98:62:a7:e9:ff:79:6b:f6:d4:40:cd:0b:
                    f0:0b:8e:ab:30:65:15:f0:01:e6:dc:b7:b6:8a:b8:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:EE:C1:14:A8:DB:17:15:5A:30:9F:04:1A:BF:B3:CE:6A:E8:5D
            X509v3 Authority Key Identifier:
                keyid:55:61:41:5A:BA:0D:39:BE:24:A2:49:DC:CE:C5:52:C0:B7:23:0F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561415ABA0D39BE24A249DCCEC552C0B7230FD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gfDM52CiAxCaJaHAPJEhZGiKQM1Fif9QaDgboCE9kjx/0/3136382e302e38302e302f32322d3332203d3e20323635323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:60:04:fc:20:71:64:06:73:69:df:2b:3b:5d:e5:01:90:65:
         6c:1b:09:28:66:41:19:94:80:79:39:03:5e:e9:92:62:4c:9c:
         81:a7:de:77:d2:13:06:54:2c:79:c1:0f:88:78:7d:38:77:b1:
         4e:f7:42:12:52:62:d4:4e:e3:5d:41:67:83:f9:6f:21:a9:bf:
         df:87:93:54:dd:36:ff:f2:58:d2:f5:11:69:c6:68:89:f4:d5:
         95:a4:8b:dc:1f:6b:9e:f5:94:b4:6e:ef:01:a0:91:cc:c0:2d:
         77:ff:fc:e4:62:41:99:7a:00:5d:8e:88:3e:d3:ae:16:7f:f0:
         50:ec:c1:61:c6:65:2d:33:1d:af:df:82:18:3c:a0:70:c5:e5:
         49:f8:18:2d:d6:0e:df:77:17:48:26:52:62:df:0e:0b:bd:36:
         18:df:d5:96:3f:58:0e:46:0f:d2:56:8c:82:e3:5d:f9:16:a3:
         23:9a:3c:25:35:c3:fe:c2:d6:74:b1:70:1c:6b:28:9a:0a:06:
         51:b9:29:0d:47:11:d4:9c:a2:12:fd:7e:93:1d:8a:47:b0:6a:
         42:9b:f3:03:ca:77:45:f1:27:e1:c1:d8:6d:cd:32:c9:51:12:
         a8:d4:1a:cb:4e:56:08:ea:cf:b3:a7:29:3d:35:7d:bd:e2:78:
         5d:d0:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:09 2026 by rpki-client