Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233322e302f32312d3231203d3e203532383838.roa
File:                     3230302e3133332e3233322e302f32312d3231203d3e203532383838.roa (raw, json)
Hash identifier:          kTIbJ5fxLflpfwazHoXZ4MN075EWTno63U6H5i9/S8w=
Subject key identifier:   95:39:65:D3:90:57:46:42:99:BA:6E:0E:6A:A8:E2:0C:38:C4:CA:6C
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       0C93F192E20791CAA7E38110A73411E3E1DC1209
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233322e302f32312d3231203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:57:25 +0000
ROA not before:           Wed 15 Jul 2026 19:52:25 +0000
ROA not after:            Wed 14 Jul 2027 19:57:25 +0000
asID:                     52888
IP address blocks:        200.133.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:93:f1:92:e2:07:91:ca:a7:e3:81:10:a7:34:11:e3:e1:dc:12:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:52:25 2026 GMT
            Not After : Jul 14 19:57:25 2027 GMT
        Subject: CN=953965D39057464299BA6E0E6AA8E20C38C4CA6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:d7:3b:b1:01:7d:82:c8:1a:72:80:5b:9b:
                    4a:1a:03:2b:b4:34:c4:d7:55:dd:f7:93:0b:16:49:
                    cc:33:39:70:22:7c:04:3f:64:8d:79:c4:c2:65:24:
                    70:ab:e2:b9:7e:be:9b:7e:a0:94:c5:0e:bc:df:25:
                    81:ae:5e:50:7a:63:aa:fb:f8:a8:50:88:b5:b7:13:
                    e2:02:c7:41:b2:ab:a6:42:09:51:e1:90:44:5a:e3:
                    98:11:08:e9:f8:77:d0:5b:ae:55:e1:c4:46:19:d7:
                    99:e5:68:e8:9c:93:0a:c0:9d:1e:a3:a6:94:b6:33:
                    ea:c5:c2:06:c1:35:ee:34:ad:ba:ec:c7:1f:ac:05:
                    08:e4:5d:43:bd:2d:03:72:bc:a6:c7:2b:c9:21:73:
                    c7:46:c5:f3:15:9f:71:c2:c2:c0:0e:8b:ca:fb:10:
                    3d:ce:64:32:ab:7c:56:a4:de:2a:dd:9a:fe:06:a6:
                    d4:68:33:f6:ea:50:01:d3:2d:f1:d7:09:12:a9:c3:
                    2c:86:b1:01:2a:91:b3:86:52:88:d0:ea:65:8c:47:
                    cf:2a:30:0a:06:7e:ba:72:09:f0:d6:af:b6:28:5f:
                    62:ee:6c:36:e5:cd:80:32:54:55:85:d2:e0:af:77:
                    8d:e8:b1:1a:d9:5b:9a:bc:e6:5d:de:08:eb:f6:79:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:65:D3:90:57:46:42:99:BA:6E:0E:6A:A8:E2:0C:38:C4:CA:6C
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e3133332e3233322e302f32312d3231203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:46:e1:77:cd:6f:d6:e8:ec:ef:c5:9a:fe:07:0d:42:6d:27:
         3f:25:0d:a3:4a:f5:2b:1e:33:27:7a:dd:f4:98:47:1e:f8:a8:
         21:c9:f6:29:95:53:1c:3a:20:06:c6:1d:7f:4d:ec:c2:f5:0e:
         0d:7f:18:14:04:aa:52:89:e3:ca:16:37:d0:a7:e5:00:37:11:
         b7:5b:5d:80:8d:fc:dd:67:7c:ca:43:22:2a:fa:04:05:61:65:
         7d:04:53:a7:ef:c2:15:11:0e:d3:1e:f7:67:dd:7b:1d:72:6a:
         08:93:d3:2b:d7:e7:c6:d0:11:14:33:0d:15:c1:8b:36:22:1e:
         41:e5:a5:1a:03:5b:29:74:99:e7:80:5d:3d:71:0c:8a:66:26:
         11:85:d4:48:2f:06:01:c1:4b:7d:2c:6b:92:19:dc:67:30:1e:
         bc:74:fb:99:3f:ba:5d:b4:f5:a8:61:c2:90:47:d2:af:cf:36:
         16:a5:1d:40:07:c5:62:30:19:b9:60:63:06:bc:7f:4c:a0:57:
         15:77:74:a3:44:bd:d5:22:08:48:5b:9b:3b:bc:dd:1a:ce:2d:
         48:c8:74:5c:ad:58:71:d5:3e:d7:79:7a:b3:23:5c:87:fe:64:
         0d:05:41:1a:aa:c3:c6:13:a3:9d:75:f0:20:e6:2a:69:e7:a8:
         f1:7a:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:37 2026 by rpki-client