Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e392e38342e302f32342d3234203d3e203532383838.roa
File:                     3230302e392e38342e302f32342d3234203d3e203532383838.roa (raw, json)
Hash identifier:          wJJ9tOk4Wdi782G5UDV4kJIJIJ+6NrB5JAXi427Um5Y=
Subject key identifier:   22:62:91:A7:56:96:82:DB:CD:C8:97:30:A9:C8:70:10:A7:1A:BA:65
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       6BA42E161385089EE9ADC2D11EEF2A00DDD78F95
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e392e38342e302f32342d3234203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 19:56:34 +0000
ROA not before:           Wed 15 Jul 2026 19:51:34 +0000
ROA not after:            Wed 14 Jul 2027 19:56:34 +0000
asID:                     52888
IP address blocks:        200.9.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a4:2e:16:13:85:08:9e:e9:ad:c2:d1:1e:ef:2a:00:dd:d7:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 19:51:34 2026 GMT
            Not After : Jul 14 19:56:34 2027 GMT
        Subject: CN=226291A7569682DBCDC89730A9C87010A71ABA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:5d:b5:0f:e5:65:7b:b4:0e:45:4b:94:5d:
                    00:3a:1b:03:d8:47:e5:f8:03:73:b0:c8:c3:41:d7:
                    59:ac:4f:83:bc:98:30:eb:4a:1e:70:85:35:85:30:
                    e9:36:68:e5:ce:b3:b5:bb:68:39:60:f0:3e:80:a3:
                    be:dc:9c:62:5b:c3:f7:ce:8a:df:43:e8:2a:32:da:
                    57:fc:2c:0d:57:ec:75:6b:38:fe:e3:1d:09:27:16:
                    9b:01:2d:96:14:5d:f3:fe:ac:2d:d9:83:ec:3a:31:
                    21:3e:74:cf:99:6c:3c:e7:8d:93:55:1c:b8:68:6d:
                    ea:19:45:0a:9a:26:8f:ca:dd:be:2a:b8:97:28:7d:
                    02:0b:09:0d:b8:7d:3b:55:00:17:13:9b:8e:d1:bf:
                    12:ae:b0:00:71:85:20:58:f4:33:ce:6e:d5:56:23:
                    41:e0:4a:93:a6:b6:03:34:69:7b:92:80:f2:e1:73:
                    ce:1d:5f:2a:a5:0e:fc:15:6d:8f:33:48:16:1d:57:
                    5d:eb:f4:a2:11:78:38:70:44:08:0f:a0:26:7c:27:
                    40:09:14:bc:10:fa:2e:dd:52:6d:96:d6:fa:c4:94:
                    f1:f9:b6:9f:79:88:b6:e1:9b:db:f6:80:88:7c:8a:
                    46:1e:f8:ba:b3:a3:1b:50:e3:c5:fa:8e:1b:f9:73:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:62:91:A7:56:96:82:DB:CD:C8:97:30:A9:C8:70:10:A7:1A:BA:65
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/3230302e392e38342e302f32342d3234203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9c:47:41:eb:09:0b:38:9e:75:6c:30:2e:58:22:36:90:db:
         bf:fb:53:06:b4:1a:f9:bc:54:cd:67:6b:72:fd:82:88:42:78:
         7b:b3:94:58:ed:83:7f:f5:cd:b3:e0:09:83:eb:16:93:15:95:
         96:46:04:f7:90:cf:e8:6d:3f:e5:3c:39:f9:d9:64:48:d5:80:
         bf:fd:31:2b:cb:ca:9d:b6:6a:f1:02:30:1b:f3:e6:d0:88:d9:
         64:4d:1b:95:df:8c:5d:e6:08:9f:6e:63:ed:53:65:9b:b8:69:
         00:4b:af:a2:55:b3:de:cd:4a:87:bc:5e:38:52:32:5e:80:af:
         ad:1e:08:9b:fa:b7:27:0a:40:e0:04:c3:7c:c4:ad:2f:a9:28:
         26:ac:21:03:39:b3:cd:6d:dc:a2:36:98:69:54:79:95:88:5f:
         2f:ee:f5:42:fe:27:29:61:6e:d8:0d:84:45:92:26:cc:14:04:
         cb:f0:7e:48:4e:74:b0:46:4b:3b:a4:6d:d5:70:3b:ee:8c:af:
         cb:57:9f:29:cc:4f:ea:ff:72:dc:99:37:3a:c4:77:dc:e8:46:
         b2:30:3f:1e:19:e8:63:e7:32:cf:89:12:40:fa:7e:b9:63:1b:
         16:2e:01:28:e0:da:9a:96:af:4e:cf:78:59:ba:3a:92:4f:f4:
         1e:f7:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:32 2026 by rpki-client