Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234372e302f32342d3234203d3e20323637353530.roa
File:                     3230312e3138322e3234372e302f32342d3234203d3e20323637353530.roa (raw, json)
Hash identifier:          fvDi0M3MshfjjziCpvxUf6biEwMafEBo601zT4WLbUo=
Subject key identifier:   94:42:55:D9:6D:11:1C:B5:CD:A1:AA:E4:1A:F0:72:79:06:C3:89:99
Certificate issuer:       /CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
Certificate serial:       27661B99D09F1286BE27A0303C8A7A87C2D479D5
Authority key identifier: 83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234372e302f32342d3234203d3e20323637353530.roa
Signing time:             Tue 29 Sep 2026 01:39:28 +0000
ROA not before:           Tue 29 Sep 2026 01:34:28 +0000
ROA not after:            Tue 28 Sep 2027 01:39:28 +0000
asID:                     267550
IP address blocks:        201.182.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl
                          rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 14:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:66:1b:99:d0:9f:12:86:be:27:a0:30:3c:8a:7a:87:c2:d4:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
        Validity
            Not Before: Sep 29 01:34:28 2026 GMT
            Not After : Sep 28 01:39:28 2027 GMT
        Subject: CN=944255D96D111CB5CDA1AAE41AF0727906C38999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:7a:2b:20:d2:5b:f6:28:b2:0a:0f:0d:33:
                    9e:5e:a9:7d:b6:79:dd:4b:e2:d5:3e:93:fc:ab:b3:
                    a9:1d:ea:8c:f2:8a:77:09:32:fe:35:61:59:0b:65:
                    b3:48:a2:90:7d:0c:64:40:a9:75:a9:58:b1:00:8d:
                    d3:8e:13:17:e5:11:e4:4e:fc:72:5f:23:4a:e9:97:
                    12:d0:fa:4d:c6:b0:4c:e7:ba:ec:c2:83:88:5c:1c:
                    c3:c1:f0:57:ea:52:fa:e4:db:a0:54:87:05:81:c7:
                    08:1e:57:32:63:3f:22:ab:53:8a:46:82:48:75:ff:
                    0a:c3:b1:e0:1a:eb:b7:9e:3b:0b:f0:7c:b4:e6:5a:
                    1c:87:af:ed:95:17:04:1d:05:8a:b1:10:ad:89:7d:
                    7e:2f:aa:26:e8:95:ef:18:8f:bd:0b:0d:a8:99:71:
                    33:dc:8f:f3:2f:f4:37:10:1b:50:57:4f:b2:d5:72:
                    f7:2d:b7:a7:b9:1e:c9:d5:04:8a:68:01:71:64:37:
                    69:06:b6:f2:07:3e:5d:23:4b:b1:fb:3d:9f:07:19:
                    6e:a7:21:04:0c:6c:d7:b2:14:14:9a:5b:a7:23:bb:
                    6f:05:a0:cd:29:41:0b:13:b0:34:c7:41:b0:cd:7c:
                    37:8d:12:a6:c4:6b:77:22:99:98:13:a9:e9:6f:cf:
                    46:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:55:D9:6D:11:1C:B5:CD:A1:AA:E4:1A:F0:72:79:06:C3:89:99
            X509v3 Authority Key Identifier:
                keyid:83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234372e302f32342d3234203d3e20323637353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:a4:c8:21:b6:f0:e4:c2:3c:37:b4:35:2e:c8:39:f6:b9:
         a5:43:ca:89:9b:09:03:3a:c3:04:d7:98:8e:d1:1c:42:94:e7:
         43:93:c8:20:2f:8d:d3:93:50:d7:02:33:ba:e1:f9:5a:1c:c4:
         f7:0b:23:7f:26:d3:e9:6f:d3:ec:4f:0a:42:a5:ae:39:4e:50:
         59:d5:6c:94:0f:32:c9:b1:c8:71:a9:16:25:eb:bd:22:34:d7:
         66:57:ca:98:9a:84:75:5d:e1:e6:cc:51:b6:9c:f9:5d:40:2b:
         9a:f7:90:01:20:96:1a:27:cd:75:f9:9d:bb:98:ae:fa:c0:98:
         9b:7f:5b:4a:ca:74:62:28:c7:56:a9:cd:a8:a5:99:35:f7:52:
         85:37:0d:6f:13:b6:b0:44:20:e9:f7:b3:54:68:06:6d:d8:b1:
         c9:c8:2e:31:c2:d5:27:dd:5a:23:7c:75:c2:5d:38:f4:cc:79:
         d9:2c:d3:49:0a:de:f1:86:8e:cd:5d:c6:c2:3d:6f:d9:54:90:
         b4:b2:3e:6e:97:b1:f3:e2:a7:92:fc:dd:35:a7:f5:55:22:f4:
         54:aa:69:1d:05:c8:66:81:6c:17:01:fa:72:f7:b6:51:d6:c3:
         5e:84:05:37:ea:40:23:02:bb:bc:88:93:02:38:fb:11:ed:69:
         62:c0:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:10:59 2026 by rpki-client