Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS61792.roa
File:                     AS61792.roa (raw, json)
Hash identifier:          P2AfPQp3RIk1drgNMdh3FfZgWP3+dM4hUxX1FZDm0ts=
Subject key identifier:   6F:F7:8D:0E:4B:1C:C9:44:51:AC:BE:0E:15:32:97:08:A9:5A:61:52
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       02D15296F091AC24C42E2EC821F359123882988A
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS61792.roa
Signing time:             Wed 14 Oct 2026 13:47:48 +0000
ROA not before:           Wed 14 Oct 2026 13:42:48 +0000
ROA not after:            Wed 13 Oct 2027 13:47:48 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:52:96:f0:91:ac:24:c4:2e:2e:c8:21:f3:59:12:38:82:98:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Oct 14 13:42:48 2026 GMT
            Not After : Oct 13 13:47:48 2027 GMT
        Subject: CN=6FF78D0E4B1CC94451ACBE0E15329708A95A6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:3c:09:23:ab:dc:32:bf:10:1a:f6:d8:b1:
                    6f:35:0b:66:67:2f:80:1e:1b:6a:d9:04:8f:f5:8d:
                    e0:2b:59:79:59:51:ec:e2:56:6b:99:79:44:5b:fd:
                    28:fd:18:cc:65:71:21:f8:91:5e:ee:86:9c:ae:1f:
                    71:61:76:3b:3a:9e:3d:df:4a:86:ae:a6:62:72:f1:
                    24:12:a6:24:65:ce:6d:c7:02:cd:c1:e2:96:3a:9c:
                    bf:a9:40:9b:06:3e:15:8f:4a:67:79:bb:07:d6:f0:
                    d1:dc:44:fe:e8:18:00:46:02:a9:6b:7e:12:91:46:
                    cc:c2:e0:ab:0b:44:85:a8:e8:d5:34:84:9c:dd:72:
                    9a:7e:a1:e1:61:71:07:9e:04:5c:4b:94:b6:81:54:
                    0f:6e:c3:d6:ac:f9:e3:97:14:8e:7c:0b:81:db:f9:
                    e1:12:f6:ab:2a:46:7d:77:03:86:8a:aa:19:87:48:
                    70:0c:06:43:78:5d:fd:73:8c:3b:0d:b0:7d:55:22:
                    20:b4:0d:2c:1c:75:14:2c:e9:47:cb:ff:d6:df:2e:
                    d6:fe:7d:cb:81:03:15:5b:54:ee:30:6e:92:2f:56:
                    6e:91:25:e2:20:62:2a:70:f7:bf:9f:4e:eb:f0:81:
                    5d:fe:94:35:a1:78:75:d6:20:a3:0b:41:5e:67:69:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:8D:0E:4B:1C:C9:44:51:AC:BE:0E:15:32:97:08:A9:5A:61:52
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS61792.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:20:e6:b5:c9:9d:58:08:60:7a:fa:a9:00:aa:d0:8d:f9:
         c7:9f:a5:2d:9f:b7:06:bd:df:9e:69:8d:20:ee:6b:19:28:b0:
         6d:6c:a3:a7:fe:1b:ad:97:35:7c:ec:ab:5d:7e:0b:44:7a:f4:
         6d:88:10:a0:78:78:a1:ce:a7:58:2e:0f:5b:af:94:c3:b2:83:
         18:73:f0:ef:03:c5:30:95:ca:bb:cc:58:8f:8a:1d:fa:51:4c:
         ce:be:a5:4f:68:83:a1:84:c2:0f:d4:f7:32:4d:79:79:0c:4d:
         b4:28:93:6d:c7:33:a5:99:a0:36:77:93:2e:96:a9:3e:fc:a9:
         28:1f:37:05:72:f1:54:04:9b:21:0e:ab:81:9f:36:b3:d1:d6:
         99:54:2c:a6:91:9c:b0:20:c1:8b:6d:57:c7:13:78:2c:1a:4c:
         2c:eb:bc:80:65:ed:0d:8f:a6:34:03:a6:a3:84:59:9d:7e:07:
         25:86:4a:51:74:dc:74:54:11:41:ea:32:45:1f:06:af:14:37:
         44:8e:6b:b9:0d:11:c3:2d:1e:22:40:56:f0:d2:b1:2f:58:82:
         8a:a2:04:48:ae:7f:f8:a7:a5:17:33:3a:fb:95:b5:60:0a:b4:
         b7:8e:ca:21:e4:05:20:6f:42:81:33:ef:9f:57:5a:21:93:3d:
         53:c3:5c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:41 2026 by rpki-client