Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a62303a3a2f34362d3436203d3e203532383838.roa
File:                     323830313a62303a62303a3a2f34362d3436203d3e203532383838.roa (raw, json)
Hash identifier:          xOUXUKYO4A0w+1kGl7Ho6dRsfzDGHdH1C+lzGZFqHjs=
Subject key identifier:   BE:B6:44:60:E1:49:49:8B:26:61:D2:7D:58:BB:E9:1F:99:50:6A:22
Certificate issuer:       /CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
Certificate serial:       034252AA9B8533CE3364038C23FCD141D3B00065
Authority key identifier: 55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a62303a3a2f34362d3436203d3e203532383838.roa
Signing time:             Wed 15 Jul 2026 18:08:22 +0000
ROA not before:           Wed 15 Jul 2026 18:03:22 +0000
ROA not after:            Wed 14 Jul 2027 18:08:22 +0000
asID:                     52888
IP address blocks:        2801:b0:b0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl
                          rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Jul 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:42:52:aa:9b:85:33:ce:33:64:03:8c:23:fc:d1:41:d3:b0:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D70B4F48CAC50C41471718B18C78D87F0E9E2B
        Validity
            Not Before: Jul 15 18:03:22 2026 GMT
            Not After : Jul 14 18:08:22 2027 GMT
        Subject: CN=BEB64460E149498B2661D27D58BBE91F99506A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:88:22:a5:99:33:15:b4:9e:7c:de:01:90:
                    f9:1c:7b:63:be:85:a8:6c:fd:b5:ec:e0:0f:c2:13:
                    be:a0:b6:8e:f1:f4:83:6c:2c:92:8f:62:c9:7f:58:
                    43:ca:ff:28:e3:c7:20:51:57:a6:a5:d2:4d:d9:80:
                    c9:fb:b7:e7:b4:b9:10:ec:1c:74:80:37:fd:4a:17:
                    7b:0f:41:2c:98:f9:a2:cb:cb:ed:e1:75:a7:5b:20:
                    8b:22:2d:6c:44:1f:72:dd:cd:2e:ae:df:d3:39:14:
                    56:1e:b4:20:f3:40:ef:51:40:04:92:b3:e3:0f:94:
                    a9:f6:9f:ab:6c:c1:aa:2a:b5:b5:db:96:97:63:a9:
                    5d:b8:52:c1:53:3e:84:dc:67:d6:ab:a4:fa:93:97:
                    96:d1:0d:48:ca:ea:86:a8:a0:81:ea:1a:1d:d3:05:
                    b5:1d:3a:41:c8:33:2b:68:f4:57:d3:83:43:3e:cb:
                    60:e9:b6:24:cc:8a:32:f2:f4:fd:9f:b8:65:0b:89:
                    04:8f:02:1e:bb:25:9e:7d:92:e6:5c:45:d1:dd:47:
                    99:00:0e:aa:96:9e:14:95:b5:01:47:f9:a7:84:00:
                    0e:8f:1a:07:c2:45:cc:23:ee:56:8f:f5:ef:7e:c6:
                    9c:d5:36:d0:99:ab:ff:46:bc:ec:a9:5a:93:46:ce:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:44:60:E1:49:49:8B:26:61:D2:7D:58:BB:E9:1F:99:50:6A:22
            X509v3 Authority Key Identifier:
                keyid:55:D7:0B:4F:48:CA:C5:0C:41:47:17:18:B1:8C:78:D8:7F:0E:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55D70B4F48CAC50C41471718B18C78D87F0E9E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUGFHJZPq4WQjFhdddbDZmzLs39b6Qkkbz2ruT56VKtX/0/323830313a62303a62303a3a2f34362d3436203d3e203532383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b0:b0::/46

    Signature Algorithm: sha256WithRSAEncryption
         05:4d:44:65:31:16:81:b5:19:17:89:42:2d:f0:10:be:2d:44:
         e6:12:fa:f3:3b:f4:22:2a:2b:5c:de:64:26:67:05:31:c0:09:
         f3:b9:b9:ec:91:70:ed:9f:3c:73:d1:ab:09:56:6c:ff:62:e6:
         bf:8a:3e:2f:2b:11:d0:26:c1:01:c4:8a:4d:7c:58:eb:3b:6c:
         37:fa:39:71:26:4d:91:5c:77:81:70:c0:5b:f4:b8:88:59:5c:
         d1:21:45:d9:c6:a6:08:70:b9:6b:8b:b9:4f:ea:b0:fb:27:42:
         1a:9d:0c:40:1b:a7:73:db:42:50:12:69:3c:e8:e2:b6:f6:39:
         a8:69:ca:cb:ee:2c:10:a2:a7:14:18:6e:ef:ff:4e:99:a2:f2:
         3e:af:5a:54:51:61:9e:74:28:77:a2:09:31:87:89:9e:38:c2:
         74:52:be:53:1f:87:09:97:d8:cc:af:53:28:39:a5:66:28:76:
         fb:ea:35:69:f9:4d:ed:30:fd:5e:6d:b2:4c:85:91:34:d8:7e:
         0f:da:5c:33:25:0a:de:fe:cb:86:6f:3e:f6:92:3d:46:0f:8f:
         d8:69:04:01:ba:6c:82:8d:89:f9:7a:0a:62:3b:ea:7a:2f:d6:
         8a:ed:65:db:7f:18:9d:8b:19:5a:d1:ba:60:db:13:5a:31:b3:
         3f:a5:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:50 2026 by rpki-client