Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234362e302f32342d3234203d3e20323637353530.roa
File:                     3230312e3138322e3234362e302f32342d3234203d3e20323637353530.roa (raw, json)
Hash identifier:          n0Dv0JaFe+7zU+r9fjqH8bywvPmtZrr3q/gHZ9jhPDU=
Subject key identifier:   35:A6:8A:8F:EC:52:C9:36:CC:EF:B9:FA:7F:8C:D8:FB:48:09:07:D8
Certificate issuer:       /CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
Certificate serial:       72F59AAD778D2A2B13E1C4A6CE2CC337E891CE69
Authority key identifier: 83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234362e302f32342d3234203d3e20323637353530.roa
Signing time:             Sun 06 Sep 2026 13:02:48 +0000
ROA not before:           Sun 06 Sep 2026 12:57:48 +0000
ROA not after:            Sun 05 Sep 2027 13:02:48 +0000
asID:                     267550
IP address blocks:        201.182.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl
                          rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 07:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f5:9a:ad:77:8d:2a:2b:13:e1:c4:a6:ce:2c:c3:37:e8:91:ce:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A1F4485D74EF1D71014D4C40E8261F31E32512
        Validity
            Not Before: Sep  6 12:57:48 2026 GMT
            Not After : Sep  5 13:02:48 2027 GMT
        Subject: CN=35A68A8FEC52C936CCEFB9FA7F8CD8FB480907D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:d4:69:27:20:ed:3e:07:ce:aa:81:2f:7c:
                    79:64:13:01:86:54:17:64:a5:e9:03:62:86:81:cd:
                    90:29:17:a1:78:57:9c:06:29:b3:83:d3:e6:cb:cb:
                    e6:f4:95:4e:f9:c6:a8:71:3c:21:8b:1a:4c:69:74:
                    eb:c3:94:d4:0a:56:65:ea:6a:54:f6:7c:85:af:23:
                    69:4b:4a:1a:80:99:e1:f3:32:b0:32:a8:6a:8f:da:
                    24:1f:38:26:5b:f4:c5:e2:52:a5:27:85:e3:16:0f:
                    14:b1:9d:79:f7:b0:d1:f1:ac:0a:6d:6f:a9:59:a1:
                    0e:cc:2f:09:3e:6b:2a:fd:d1:2d:b4:4e:c1:fb:30:
                    ea:38:fa:be:69:9d:c6:f8:04:ba:1a:48:ec:1b:75:
                    76:5f:b0:36:09:74:82:0f:25:e2:4d:6c:f8:bb:46:
                    00:7c:0c:d8:42:ff:d8:b1:15:c4:a1:ef:9e:28:18:
                    86:fc:45:19:4d:b3:72:1f:59:6e:e1:d2:be:8b:bb:
                    60:9f:f3:10:8f:fa:21:5c:56:e4:0e:2a:19:35:98:
                    52:5d:95:29:1c:b0:d9:ad:67:d7:42:c3:3c:83:59:
                    1e:f7:56:ca:fe:29:87:c6:26:3c:c0:cd:1b:84:3d:
                    89:75:1c:8f:92:c1:31:13:5d:d6:ee:25:27:91:08:
                    ac:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:8A:8F:EC:52:C9:36:CC:EF:B9:FA:7F:8C:D8:FB:48:09:07:D8
            X509v3 Authority Key Identifier:
                keyid:83:A1:F4:48:5D:74:EF:1D:71:01:4D:4C:40:E8:26:1F:31:E3:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/83A1F4485D74EF1D71014D4C40E8261F31E32512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A1F4485D74EF1D71014D4C40E8261F31E32512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAxrqVnJLb9FEm1cLjB5aTWaHRKJgcCsB4vZdnk986aK/0/3230312e3138322e3234362e302f32342d3234203d3e20323637353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:33:00:74:12:f4:c5:1f:b2:1e:b0:f1:bc:90:93:85:03:73:
         4c:54:35:9e:7c:dd:47:13:72:e4:2d:77:1c:7e:b1:37:e1:64:
         0d:1a:cf:8b:7f:83:ec:19:bc:3b:a0:aa:7b:6f:e1:0e:3f:27:
         10:26:94:4a:55:21:89:d6:4d:3d:78:06:18:72:64:cd:3d:31:
         64:05:78:fe:ef:b7:7c:84:7d:ae:56:e6:b9:c0:6a:cf:4c:61:
         14:6b:55:8e:87:78:2d:b2:b6:30:a1:22:6d:69:2d:01:01:14:
         5c:56:52:d5:46:fc:52:82:2d:19:33:4f:71:01:71:28:9f:ae:
         35:5e:1b:d6:0a:ea:64:ea:be:31:7e:22:51:e0:e0:f4:25:f3:
         f3:aa:95:ce:5d:47:dd:de:9b:3c:6c:69:3a:b1:fd:c1:c7:11:
         52:c9:a6:24:b6:09:a6:73:61:6c:5a:10:b2:3b:5a:e8:43:4d:
         1f:b4:04:6e:29:2c:27:79:20:ec:21:60:b0:d6:3f:18:46:3b:
         f1:cf:ec:42:5c:97:87:0c:87:c8:30:ee:78:9a:79:df:92:ea:
         8c:a2:e4:ad:23:70:fc:04:80:35:f2:6b:9d:32:ea:30:31:72:
         55:72:ed:d7:75:a4:20:49:28:7d:7e:61:ba:ac:9e:6a:97:81:
         a1:f3:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 18:34:08 2026 by rpki-client