Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33322e302f32332d3233203d3e20323731323538.roa
File:                     3132382e3230312e33322e302f32332d3233203d3e20323731323538.roa (raw, json)
Hash identifier:          nZTk7kbqY9xcA7JSjUfRaOX32alAWmY/KTH66eDifm0=
Subject key identifier:   CA:D6:3E:A1:60:B7:2A:03:A5:86:42:77:D3:77:22:2E:FA:C7:33:85
Certificate issuer:       /CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
Certificate serial:       7A9768CC0BC95C290C286C899438C485B824897C
Authority key identifier: 4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33322e302f32332d3233203d3e20323731323538.roa
Signing time:             Wed 01 Jul 2026 04:05:43 +0000
ROA not before:           Wed 01 Jul 2026 04:00:43 +0000
ROA not after:            Wed 30 Jun 2027 04:05:43 +0000
asID:                     271258
IP address blocks:        128.201.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl
                          rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:97:68:cc:0b:c9:5c:29:0c:28:6c:89:94:38:c4:85:b8:24:89:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A763D5AD2784076DF3620B8E46FF5745BFEFBDD
        Validity
            Not Before: Jul  1 04:00:43 2026 GMT
            Not After : Jun 30 04:05:43 2027 GMT
        Subject: CN=CAD63EA160B72A03A5864277D377222EFAC73385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:36:f3:64:9b:b8:94:8f:2c:e6:17:5e:ef:
                    3c:b7:46:2f:10:33:50:84:47:d5:25:d5:85:5f:9f:
                    cf:11:da:41:8b:4f:a1:e1:d9:9a:6f:0e:b1:9b:b8:
                    54:44:58:d0:6f:f1:41:b9:01:db:62:34:7d:24:1a:
                    b4:a2:dd:df:37:22:e1:b7:b9:93:9d:78:f7:0b:c0:
                    13:fe:ed:9c:27:6a:4c:42:2a:02:2c:22:e3:ab:d3:
                    e5:1c:47:6b:78:eb:82:48:06:cc:cc:a9:f9:77:50:
                    e0:f0:25:8b:cc:28:91:af:e6:93:cc:60:3b:c9:fc:
                    9b:f6:a4:f1:b6:8d:e8:11:ad:86:2a:80:64:c4:a7:
                    83:54:c3:f1:ea:5b:30:d4:56:29:3c:5d:13:c1:a9:
                    0c:1e:6e:ce:4c:75:67:32:8b:58:0c:57:21:d2:c3:
                    8e:4b:03:2d:f1:10:eb:01:73:61:a5:e3:90:97:52:
                    54:97:27:da:9d:1f:67:19:ab:7b:9e:08:f8:97:39:
                    e9:c6:7d:08:32:9b:0e:4f:37:34:99:63:a2:5c:cf:
                    5f:21:68:61:c7:55:37:d9:b0:09:59:a4:ec:fa:c0:
                    01:1d:c2:4a:8f:bb:1d:f8:bb:3e:8c:74:31:2e:9b:
                    6d:71:b3:9e:b0:ae:4c:6a:25:eb:e1:41:ed:ee:fa:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D6:3E:A1:60:B7:2A:03:A5:86:42:77:D3:77:22:2E:FA:C7:33:85
            X509v3 Authority Key Identifier:
                keyid:4A:76:3D:5A:D2:78:40:76:DF:36:20:B8:E4:6F:F5:74:5B:FE:FB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A763D5AD2784076DF3620B8E46FF5745BFEFBDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/3132382e3230312e33322e302f32332d3233203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:59:39:bb:ae:87:fc:85:7a:72:ad:86:4b:6b:d3:b1:86:6e:
         57:46:ce:97:46:3b:92:2b:7e:d2:c1:47:3c:94:df:9a:7d:8a:
         e6:1e:b8:05:08:4e:27:f2:3f:e8:4d:72:f9:00:5b:e7:38:af:
         fb:8f:2e:02:e5:5e:a6:4c:85:92:4e:c5:e7:4a:ad:41:d5:a5:
         57:c3:f5:86:4d:73:f3:27:61:43:c8:de:a1:fa:fd:0b:d0:d0:
         11:c0:fe:67:1b:05:ca:af:b4:a0:cc:20:73:06:00:3a:15:e2:
         bb:99:30:a4:7f:ac:3b:9b:da:da:08:24:76:af:38:47:9f:28:
         68:b8:59:b8:28:87:ef:ed:36:6c:22:3d:a4:eb:86:ed:43:15:
         cd:3c:bb:f2:60:cc:b1:4f:a9:3f:6f:0f:95:47:5a:87:a6:2b:
         ae:73:21:bd:e6:05:e9:78:3e:45:aa:29:a0:11:5b:80:05:7d:
         f7:fb:73:cd:ce:0b:84:cc:51:4f:ca:4f:01:52:c8:9e:68:ae:
         25:1a:53:1d:f2:c6:0b:02:27:41:b9:43:85:22:c0:ed:86:55:
         bd:13:e2:9a:98:28:5d:b0:6e:aa:c0:29:78:b0:31:99:f2:9a:
         94:d8:2e:1c:84:26:67:6c:5a:63:0e:3c:14:a6:57:3d:19:7b:
         79:df:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:07:15 2026 by rpki-client