Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32332e302f32342d3234203d3e203631353830.roa
File:                     3136382e3138312e32332e302f32342d3234203d3e203631353830.roa (raw, json)
Hash identifier:          3O1EXD7GLR5+LUXSZcmISJb7lae/ismZ51CvFBT2JZU=
Subject key identifier:   C5:5D:01:AF:35:E6:A5:FE:C0:AB:AB:FB:AB:6F:96:3D:55:C3:9D:83
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       604A414F0B6D5C9CFDD7C2E0675DE65516935CB6
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32332e302f32342d3234203d3e203631353830.roa
Signing time:             Tue 28 Jul 2026 17:35:31 +0000
ROA not before:           Tue 28 Jul 2026 17:30:31 +0000
ROA not after:            Tue 27 Jul 2027 17:35:31 +0000
asID:                     61580
IP address blocks:        168.181.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4a:41:4f:0b:6d:5c:9c:fd:d7:c2:e0:67:5d:e6:55:16:93:5c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jul 28 17:30:31 2026 GMT
            Not After : Jul 27 17:35:31 2027 GMT
        Subject: CN=C55D01AF35E6A5FEC0ABABFBAB6F963D55C39D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:b6:7c:cb:e5:4b:c6:69:44:c5:c1:e5:1a:
                    f5:a2:48:42:be:47:84:d8:b2:8d:88:db:52:fc:9b:
                    c7:a6:12:39:a2:7e:5f:12:e3:b9:cc:c2:2b:e6:85:
                    e4:20:ef:bd:55:7d:35:1b:5a:60:57:80:3c:84:da:
                    f7:46:19:0d:17:ed:46:49:50:f5:1f:1a:8d:a4:f1:
                    13:16:f5:95:4f:d8:28:83:5f:0c:9b:5b:3d:21:63:
                    84:59:1d:b4:2e:e2:71:96:d4:90:cc:65:23:e9:8f:
                    43:84:4f:61:26:c8:29:2c:00:f7:0e:71:c4:84:ca:
                    a6:57:d7:db:aa:1e:de:47:08:97:d0:b3:cc:99:f9:
                    05:7a:e0:81:d7:23:e3:b3:e6:aa:f7:9a:88:1f:dc:
                    1f:07:47:2c:6f:1d:d8:00:db:18:e5:37:5a:ac:2a:
                    0e:20:05:10:bb:09:c5:cf:13:1b:18:03:4c:11:dc:
                    16:f5:82:9b:6e:e2:ff:37:d3:2b:d4:bc:63:87:ef:
                    c9:e5:ec:98:b5:d9:51:7e:4d:a6:c8:9f:9b:7c:6b:
                    f4:20:a9:87:19:4a:04:14:c2:6f:80:fd:bb:2a:1a:
                    07:76:70:89:60:41:5d:56:a1:d3:31:a0:ad:93:ba:
                    7e:ad:79:10:94:a8:16:47:2e:31:70:70:10:38:51:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:01:AF:35:E6:A5:FE:C0:AB:AB:FB:AB:6F:96:3D:55:C3:9D:83
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32332e302f32342d3234203d3e203631353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:80:be:86:14:9e:fe:d6:89:45:79:7c:6e:dd:b9:fa:f7:c9:
         fe:22:ad:8f:b2:f7:78:97:3e:cd:c2:37:c9:19:c6:eb:31:2b:
         80:bd:0e:c5:68:c4:b7:db:c0:60:28:1d:71:8d:ae:76:88:88:
         56:2c:e7:96:55:35:01:d8:60:e8:b7:8e:f2:44:84:dd:47:53:
         23:49:ee:bf:9c:40:aa:ba:1a:c2:e4:8d:ed:cb:6e:b7:d8:e1:
         35:fe:ef:3c:4d:d4:b7:8a:10:58:39:71:35:76:6d:45:86:cb:
         52:11:89:42:25:83:08:81:81:7b:15:e2:8a:cf:cc:fd:dc:7b:
         87:2b:d6:36:f0:03:e1:05:b6:bb:84:a4:5a:68:fa:6f:af:99:
         27:ca:07:46:25:32:16:ef:e6:68:af:e8:68:90:de:5a:18:41:
         ed:5c:e4:af:c4:92:4d:7b:96:6d:fb:eb:68:45:44:15:69:95:
         b9:cc:e9:85:6c:65:d2:6d:55:c1:6b:95:d3:35:76:1e:4d:73:
         94:23:6f:dc:f3:97:03:80:6a:39:cf:94:f2:c9:db:82:c4:c3:
         be:3c:f2:3a:ae:ab:f5:c9:e3:cc:a4:a0:45:d3:83:84:0c:e4:
         a2:a0:62:ce:16:da:b2:fd:e9:5b:53:d2:35:bb:ea:2e:82:bf:
         29:40:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:13 2026 by rpki-client