Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa
File:                     3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier:          un+5Ooo5+RrKOsUvOkjTpjFhGc+yTZk85ZfgTn0+LhQ=
Subject key identifier:   C7:AE:56:33:D7:F9:0D:04:21:1B:D8:1B:91:92:76:FB:75:7B:F1:19
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       2BB4F827866557757407FC3071E06C9346E947AE
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa
Signing time:             Mon 05 Oct 2026 22:02:35 +0000
ROA not before:           Mon 05 Oct 2026 21:57:35 +0000
ROA not after:            Mon 04 Oct 2027 22:02:35 +0000
asID:                     262585
IP address blocks:        201.55.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:f8:27:86:65:57:75:74:07:fc:30:71:e0:6c:93:46:e9:47:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Oct  5 21:57:35 2026 GMT
            Not After : Oct  4 22:02:35 2027 GMT
        Subject: CN=C7AE5633D7F90D04211BD81B919276FB757BF119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:43:3a:a4:9e:c4:8b:29:73:1c:6b:72:dc:
                    98:65:86:68:cf:23:17:4e:dc:d5:15:92:61:e5:08:
                    cd:75:58:9f:b1:a2:ce:1b:94:53:96:86:1e:4c:17:
                    c2:3d:2c:c5:71:0f:de:8f:a8:35:cc:bc:dc:6d:78:
                    bf:ee:e0:be:b4:30:b4:c5:21:4c:61:0a:18:f8:34:
                    2a:fd:ca:ff:6c:8c:ae:bc:6c:b9:70:46:0d:33:13:
                    c5:46:d5:28:ff:0e:c3:a0:32:0c:9b:9a:bb:ea:18:
                    0b:0d:58:52:7a:84:7a:ff:a6:22:3f:1c:6b:46:44:
                    dd:c8:33:7a:ad:b4:d9:64:41:f3:69:be:35:1e:b6:
                    e4:2c:ee:93:1a:3e:e9:c3:85:32:fc:e6:a3:91:a4:
                    6b:f7:0e:cd:78:c1:bb:c9:1a:43:cd:e9:51:61:79:
                    86:3a:f9:8a:5e:0a:11:21:a7:bb:1f:c1:a2:c5:27:
                    33:ab:e8:bc:b0:1e:e5:29:8b:e0:8e:84:f4:ad:5e:
                    e4:6f:42:7d:47:f9:76:dc:67:29:68:e0:62:8a:11:
                    c9:d7:95:45:e3:32:a1:dd:fe:3b:58:16:e0:35:a6:
                    27:25:f5:9d:fd:38:8e:99:06:f3:e7:79:73:99:11:
                    3d:08:a6:81:64:ff:cf:fc:82:83:a9:77:db:94:ab:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AE:56:33:D7:F9:0D:04:21:1B:D8:1B:91:92:76:FB:75:7B:F1:19
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136382e302f32342d3234203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:0c:7f:cf:07:0d:de:21:a6:35:84:21:92:84:51:93:9b:
         1b:59:de:1f:fa:d0:12:b0:65:94:70:16:e8:8c:fa:0d:88:30:
         1a:cd:ea:f4:4e:10:32:a2:1c:1c:1b:f1:e3:ad:d8:91:e7:4f:
         b0:de:20:97:8c:b4:d1:be:1e:bb:fd:52:fa:bd:c3:5f:07:e0:
         d2:17:e8:83:05:69:19:54:4b:61:b9:8e:f3:bc:95:f2:f3:9a:
         43:a8:43:c3:03:d7:75:52:bf:29:a3:eb:ec:4d:36:2a:48:8c:
         7f:f4:45:8a:9f:3b:90:04:38:ea:5a:2e:c8:db:21:ea:4c:2d:
         2d:c8:22:ad:51:e3:d5:56:23:0a:26:68:a0:c1:4d:94:84:e7:
         d8:f5:ea:9b:06:bd:b6:f4:ec:d8:d8:20:29:05:d1:82:d7:6b:
         1e:31:8d:20:15:da:fd:d4:dc:0b:4e:2c:e3:10:2d:4d:fb:f9:
         7d:ab:1c:14:c8:25:6b:9a:55:78:69:d7:22:90:ce:d0:5c:9f:
         e2:c0:02:b7:0d:c8:1b:6f:2e:ba:86:88:59:86:ca:33:96:77:
         76:8b:b6:31:64:7a:2e:72:cd:40:ea:95:dd:32:f1:d0:c4:52:
         19:fe:b9:22:6a:1a:6b:34:55:a4:bb:b0:8a:fe:87:30:7b:b0:
         47:c6:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:52:15 2026 by rpki-client