Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32342d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130302e302f32342d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          oJeKsUaMsqJummxIPzQiF58EVwlN07RyWWZCjZE3VKg=
Subject key identifier:   88:78:FE:F1:60:25:50:8E:74:DC:00:E7:B3:34:9D:FB:12:E7:32:AC
Certificate issuer:       /CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
Certificate serial:       0C132393B7D9C802DF15FE01339DDE8D4F18D00F
Authority key identifier: C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32342d3234203d3e20323637353131.roa
Signing time:             Tue 18 Aug 2026 20:40:41 +0000
ROA not before:           Tue 18 Aug 2026 20:35:41 +0000
ROA not after:            Tue 17 Aug 2027 20:40:41 +0000
asID:                     267511
IP address blocks:        201.182.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:13:23:93:b7:d9:c8:02:df:15:fe:01:33:9d:de:8d:4f:18:d0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
        Validity
            Not Before: Aug 18 20:35:41 2026 GMT
            Not After : Aug 17 20:40:41 2027 GMT
        Subject: CN=8878FEF16025508E74DC00E7B3349DFB12E732AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:42:05:c5:01:29:16:c1:36:5e:c5:c0:ba:
                    ed:9b:cb:0a:c7:18:2f:45:84:1f:df:87:db:61:03:
                    b6:49:ca:bc:4c:45:06:8a:03:82:36:f9:8c:7f:e2:
                    9b:59:90:40:d8:79:57:78:ca:eb:b4:5a:92:c8:8f:
                    b7:e2:b3:81:34:0d:07:73:93:d6:dd:2f:2b:e2:01:
                    7a:a9:f9:74:b1:25:48:00:cd:b8:7f:a2:2a:c4:20:
                    c4:82:e5:03:8a:86:55:0e:60:f4:9d:56:7b:ce:e9:
                    9e:cb:03:f5:5c:d5:53:d1:9c:e2:53:e2:f1:fd:92:
                    a0:93:09:23:b5:1e:e5:45:c9:38:f8:fe:6b:7f:4a:
                    2c:87:4b:e3:70:10:4f:7f:14:e7:3d:b2:77:cd:96:
                    81:09:37:42:a1:b8:66:86:70:6a:64:c5:ef:1e:e0:
                    ca:ef:92:ce:2c:14:d8:67:0e:86:1d:84:50:e4:36:
                    10:b4:b1:58:ff:4c:72:50:05:b9:e4:c2:8c:e4:8e:
                    29:ce:9d:e1:f0:9e:8f:ac:ef:1d:4f:e7:d0:b6:77:
                    5d:2f:29:56:68:1d:1c:93:de:64:72:ff:fa:ef:de:
                    27:f9:95:48:2a:7c:9c:21:e8:29:f5:8d:15:8d:95:
                    28:cf:fb:4a:ac:45:e7:0f:de:85:0c:dd:25:e5:3a:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:FE:F1:60:25:50:8E:74:DC:00:E7:B3:34:9D:FB:12:E7:32:AC
            X509v3 Authority Key Identifier:
                keyid:C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130302e302f32342d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:26:d5:eb:6d:b5:39:fb:45:bc:f6:d3:04:00:8e:69:19:
         0e:ed:86:9a:81:51:4b:5b:f6:cd:35:a2:75:9e:c7:01:35:ae:
         c7:b1:c9:6c:45:74:3a:48:18:fd:ff:5a:f2:9b:83:0a:98:2d:
         b7:0d:cb:9c:a7:d8:ca:33:58:c9:b9:c0:30:24:c4:fd:5f:ff:
         62:1b:ea:08:9d:f5:df:74:a5:02:b0:c8:58:bb:96:82:7e:f4:
         c9:34:3a:5f:d1:e1:1c:cc:a3:b0:74:07:6e:b3:00:f3:42:25:
         e0:01:31:73:3b:1b:75:a0:cf:59:02:92:af:56:b2:3a:2d:6e:
         5f:57:ca:dd:62:60:4e:9b:d6:91:d8:63:83:a7:ad:9b:cb:16:
         e4:29:68:a6:68:e9:fc:88:8a:b2:f7:60:bd:f9:55:e6:03:5b:
         e2:56:51:be:fa:91:a1:f9:59:d4:fa:d7:1e:50:32:82:04:1b:
         15:f5:0d:8b:62:b6:86:19:16:33:22:2b:72:94:17:8f:fb:bf:
         b2:97:99:fa:4d:3d:be:6a:0f:ff:c4:9b:9a:df:dd:6c:fb:c0:
         7d:18:40:1c:96:3d:86:4a:61:71:5b:04:5e:50:3c:2b:77:0f:
         81:e4:91:f2:5c:00:0e:0e:d3:90:ee:6f:93:a4:7a:4c:b8:63:
         34:0d:c3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:01 2026 by rpki-client