Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a3a2f33322d3332203d3e203532383838.roa
File:                     323830313a62303a3a2f33322d3332203d3e203532383838.roa (raw, json)
Hash identifier:          IvrC8toppxXBJ3flCQnCnF6B4ccvfx44NVUi+PBkFbY=
Subject key identifier:   D2:AE:01:39:46:E7:6B:F6:FC:37:13:90:32:02:2F:1A:9C:EC:A7:70
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       469C14A263D2397862D2FBA75016C0CB1AC487E1
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a3a2f33322d3332203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 18:07:00 +0000
ROA not before:           Wed 15 Jul 2026 18:02:00 +0000
ROA not after:            Wed 14 Jul 2027 18:07:00 +0000
asID:                     52888
IP address blocks:        2801:b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:14:a2:63:d2:39:78:62:d2:fb:a7:50:16:c0:cb:1a:c4:87:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 18:02:00 2026 GMT
            Not After : Jul 14 18:07:00 2027 GMT
        Subject: CN=D2AE013946E76BF6FC37139032022F1A9CECA770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:63:7d:91:c6:3f:50:a0:ce:c1:ba:ab:8a:
                    db:76:f5:7c:56:31:92:4e:48:9f:8e:b5:25:8f:3b:
                    64:a8:93:c5:ab:cf:70:e9:f8:01:62:c6:dc:2b:f8:
                    72:e1:8b:f2:58:54:53:16:61:6d:61:2e:6a:07:2b:
                    24:51:46:70:79:f6:65:07:23:e9:9e:b4:2a:81:97:
                    49:be:5d:77:ed:06:ad:ba:c4:4d:07:3d:81:41:b5:
                    e0:d3:9b:9f:cd:7f:de:5b:ad:f2:a7:a4:2a:b3:04:
                    7c:f9:d3:af:2f:81:9d:71:83:fc:1e:f3:07:e5:80:
                    2d:06:a1:e8:d0:a7:ba:2e:9e:94:bc:ec:1c:ee:34:
                    30:c1:ac:64:47:c3:93:7e:0c:60:6a:13:2a:53:4f:
                    d3:df:21:93:b4:a3:e3:43:5d:36:bd:32:d7:c6:f7:
                    eb:5b:71:3d:64:59:52:ea:6c:17:de:e3:85:bb:05:
                    d6:68:4e:2c:65:19:b1:37:74:61:b5:fe:87:c6:79:
                    82:6e:96:be:96:3b:57:79:f9:b0:45:cd:a6:88:01:
                    3f:d8:8d:23:c2:20:f9:9d:c3:18:e0:0b:0c:92:59:
                    c3:7c:a5:77:22:13:d1:dc:52:82:20:da:d4:27:22:
                    87:ef:0f:c8:e9:64:0f:84:24:a5:c8:bb:d4:d0:bf:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:01:39:46:E7:6B:F6:FC:37:13:90:32:02:2F:1A:9C:EC:A7:70
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a3a2f33322d3332203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:e1:72:6c:06:4c:22:1d:6e:e6:40:e7:20:45:64:29:70:
         0c:39:1f:6b:d1:25:de:34:45:24:fb:3a:46:2a:8f:d5:ea:a8:
         22:89:91:87:fa:f4:f5:f4:82:fd:3e:ba:7f:c2:97:7a:c9:5a:
         8e:80:ba:05:13:0a:bc:db:d9:49:3f:59:46:35:63:4b:3c:4e:
         09:cf:0f:ab:f9:bc:48:1a:b0:2a:ae:bd:e8:cb:65:ce:69:a2:
         8d:3a:76:5e:f4:f6:f0:63:48:6f:a1:33:f8:79:16:eb:66:b6:
         1e:86:4a:77:9b:41:03:fa:3d:21:78:99:80:aa:c0:f5:d4:1c:
         98:23:35:e0:d3:be:4e:9c:41:9c:f9:7f:7e:c0:72:21:93:cd:
         1d:f7:df:92:fd:56:71:b8:5a:b2:77:d3:8f:02:70:6a:d3:6b:
         27:c0:7a:df:a3:a2:ac:01:95:ea:fe:f6:23:97:a5:ec:82:75:
         14:8b:b7:6b:a4:93:39:19:bc:c0:61:bd:93:5e:cb:37:4f:ab:
         b3:b7:79:88:fe:32:e1:98:2e:0d:d5:4b:29:d8:a0:dd:69:59:
         0a:e0:6f:1f:07:a8:9d:4d:13:ee:d0:73:7b:ad:7e:f9:c7:26:
         46:b1:39:78:11:56:a0:84:52:4e:6f:0c:2d:9e:6e:55:54:3a:
         0d:4f:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:44:17 2026 by rpki-client