Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313761303a3a2f34382d3438203d3e203631353830.roa
File:                     323830313a38303a313761303a3a2f34382d3438203d3e203631353830.roa (raw, json)
Hash identifier:          QXIyevvspuHQ9tlQifPd0xgM16IlMt7HdNsa831d2OA=
Subject key identifier:   1C:88:82:0F:96:E7:BC:FE:40:F2:2C:C7:54:6F:34:B2:F4:14:D1:11
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       4419D9BB62D1BC63354058E89D7DD86D97EBAE21
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313761303a3a2f34382d3438203d3e203631353830.roa
Signing time:             Tue 28 Jul 2026 17:35:29 +0000
ROA not before:           Tue 28 Jul 2026 17:30:29 +0000
ROA not after:            Tue 27 Jul 2027 17:35:29 +0000
asID:                     61580
IP address blocks:        2801:80:17a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:19:d9:bb:62:d1:bc:63:35:40:58:e8:9d:7d:d8:6d:97:eb:ae:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jul 28 17:30:29 2026 GMT
            Not After : Jul 27 17:35:29 2027 GMT
        Subject: CN=1C88820F96E7BCFE40F22CC7546F34B2F414D111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:06:1d:cc:b0:e8:d3:b6:79:b1:71:f0:f9:
                    f2:e9:c7:7f:1c:af:35:f6:9f:d6:d6:2c:fb:ed:92:
                    bc:e3:90:c4:9f:f8:31:e6:c8:f7:e1:94:8d:d6:48:
                    1f:3a:5a:aa:33:51:3a:d5:b9:53:68:1a:8f:8c:50:
                    8c:fe:27:56:cc:ee:68:01:be:a5:11:f5:56:47:fb:
                    5e:ae:a2:d4:e7:eb:27:49:31:57:46:a9:f2:24:40:
                    1b:07:39:c9:11:6b:32:9b:47:91:2a:fe:26:27:98:
                    d4:60:24:1e:06:dd:81:ed:63:78:e7:45:6f:38:2a:
                    28:32:57:74:8c:4d:8e:c5:44:db:21:23:21:fd:54:
                    a2:16:c6:75:4a:af:0d:13:31:7b:7a:1a:f2:77:b2:
                    57:c2:e2:fe:37:89:36:68:53:de:70:82:fc:5a:1f:
                    58:ef:2f:5e:20:54:bb:09:d1:d9:62:b4:8c:9b:6c:
                    92:c5:e1:2a:e1:35:db:8b:d8:bb:15:c9:29:87:37:
                    b8:12:30:1d:ff:84:ef:e5:4f:f3:44:64:f3:32:2e:
                    a9:fa:87:91:70:db:16:4a:2e:58:1a:dd:9b:bc:d2:
                    30:71:81:91:f6:04:a1:7c:3f:79:44:26:a1:24:7f:
                    2e:79:8c:f3:1c:4a:76:7c:25:50:a9:9d:f8:75:1e:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:82:0F:96:E7:BC:FE:40:F2:2C:C7:54:6F:34:B2:F4:14:D1:11
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/323830313a38303a313761303a3a2f34382d3438203d3e203631353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:17a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:b1:23:50:3f:96:b8:0e:b5:7a:32:2f:52:94:ba:31:8a:
         3b:61:04:2f:e7:47:cb:8b:49:d1:bf:5d:62:00:43:bb:d5:a1:
         1d:52:61:95:64:09:24:0a:09:47:5a:b2:79:19:93:a6:79:ba:
         8d:34:af:d7:7d:fe:5f:1b:da:87:89:2d:f8:da:6a:79:d2:f6:
         16:3a:ce:c1:d2:76:f7:73:95:30:93:c9:e7:32:2a:f2:49:65:
         7a:46:3a:67:2b:68:d7:47:13:50:94:77:e1:36:52:43:78:ac:
         dc:14:6b:62:a2:68:e6:eb:9a:2a:eb:e2:b8:af:23:be:0d:cd:
         c1:c9:77:b7:94:77:ef:f5:11:4d:dc:45:35:6b:14:80:ed:e1:
         76:66:7c:38:e9:23:8b:4f:f3:cc:d3:56:de:ff:0e:3b:3a:cf:
         5a:3b:37:4c:81:8f:7f:29:31:73:3d:19:eb:2e:2e:09:52:58:
         63:3e:73:23:69:4f:16:7e:77:b4:a8:92:b0:64:9f:d0:ba:f9:
         7e:d3:44:d6:88:0a:ef:be:3b:cd:e2:72:33:21:cd:e9:e0:19:
         d0:20:7a:23:06:b4:7d:fa:2f:72:84:09:f8:de:83:da:73:c5:
         73:e7:fb:26:18:cd:f3:67:e5:75:22:95:69:88:e0:27:c9:21:
         d0:18:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:13 2026 by rpki-client