Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          TSkDz+uNTSlgK56YAN+Yu4EUP4zGtMMhDj4DKoe61nU=
Subject key identifier:   F0:A7:A8:A7:DF:79:BF:86:2F:5B:5F:2E:3B:05:9C:9C:B5:DD:23:5D
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       15800A2008A285B72949274276D7920D271F918B
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa
Signing time:             Thu 17 Sep 2026 17:00:34 +0000
ROA not before:           Thu 17 Sep 2026 16:55:34 +0000
ROA not after:            Thu 16 Sep 2027 17:00:34 +0000
asID:                     262585
IP address blocks:        201.55.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:0a:20:08:a2:85:b7:29:49:27:42:76:d7:92:0d:27:1f:91:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Sep 17 16:55:34 2026 GMT
            Not After : Sep 16 17:00:34 2027 GMT
        Subject: CN=F0A7A8A7DF79BF862F5B5F2E3B059C9CB5DD235D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:f5:9b:57:c5:42:28:21:0a:6c:96:35:b6:
                    9d:5a:ad:dd:ae:b0:c8:77:d5:fb:ff:50:1a:ab:1b:
                    e3:69:f2:19:93:b6:43:e1:35:17:41:40:6c:01:4a:
                    1a:d6:d6:de:83:f5:7c:1a:9a:55:f9:54:a7:bb:24:
                    c5:cd:05:61:c2:d8:b8:c9:ec:14:2b:a1:9b:91:36:
                    b0:17:08:c7:3a:b5:fb:1d:6e:b8:da:9d:fb:3e:f7:
                    43:56:7b:c1:05:9e:8a:ba:91:89:b3:b1:ed:31:22:
                    7e:86:33:93:21:1c:fd:8b:92:86:6a:79:75:42:df:
                    d1:d8:23:88:17:32:bc:73:26:a3:d7:36:20:79:ea:
                    03:58:85:52:5a:ba:7f:a1:14:68:07:c0:2b:d8:c3:
                    ad:40:33:08:65:b7:97:10:cf:9f:df:bc:bf:a9:c4:
                    6e:2f:1a:de:b5:e8:56:d6:3e:0d:db:5a:87:30:64:
                    c7:34:5f:4b:ba:aa:95:9b:71:c7:d4:78:46:58:6a:
                    24:23:a5:19:3b:81:93:99:f1:d9:4e:30:a9:da:cb:
                    6f:3e:2f:63:ae:7c:56:79:26:71:69:b5:bf:00:b2:
                    d6:56:dc:e1:bb:cf:8d:9c:ee:d5:94:6f:82:9c:cc:
                    7e:0b:25:70:13:a0:8b:e2:56:09:23:d9:9e:69:05:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:A8:A7:DF:79:BF:86:2F:5B:5F:2E:3B:05:9C:9C:B5:DD:23:5D
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136312e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:db:91:d8:c1:ac:1b:9e:aa:2d:8e:5a:ea:15:09:fb:17:28:
         b0:3f:96:b0:36:7c:66:00:b7:b2:85:72:92:ba:dd:d7:77:47:
         18:09:47:60:c7:25:d6:8e:16:92:c9:ce:9b:49:26:19:c8:ad:
         2e:f6:55:9a:33:25:bd:6c:6a:2d:7f:06:f1:c4:36:58:bf:eb:
         a9:cf:5b:a9:02:6b:eb:12:55:34:3c:1b:41:72:9c:c4:c9:11:
         21:00:37:85:5b:bb:19:b4:60:ab:80:b3:20:18:be:49:76:dc:
         9c:7c:ec:d7:12:70:2c:3a:53:a0:15:55:c4:ad:83:cc:99:11:
         55:84:ef:8c:50:a4:18:ac:91:40:63:16:e1:bb:76:77:59:1c:
         9e:39:b5:75:e6:de:7b:a2:dc:1d:51:93:7c:79:75:8a:1a:cd:
         19:0e:68:76:7c:04:57:ab:8d:c1:47:ce:d7:cb:3d:61:c9:13:
         89:f1:52:41:94:bb:16:da:d0:30:6a:9c:79:11:9a:2f:d2:fa:
         2e:98:b7:ff:25:0b:d5:22:1e:3f:37:63:60:fc:81:6c:55:b4:
         2d:10:1e:15:23:67:43:1a:ea:84:59:e8:c9:a4:6e:e7:8f:1d:
         79:ba:42:3a:4f:51:8a:73:0b:3b:cb:15:e3:7f:90:46:de:29:
         64:c9:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:51:19 2026 by rpki-client