Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3233203d3e20323637353131.roa
File:                     3230312e3138322e3130322e302f32332d3233203d3e20323637353131.roa (raw, json)
Hash identifier:          vCANG1WqgvO/m/HdF+y42C/JixUru4POHSsugi7gM9A=
Subject key identifier:   43:F8:90:08:77:0A:D6:D5:37:3D:40:11:FE:03:53:A7:78:97:15:73
Certificate issuer:       /CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
Certificate serial:       6507C41D4A52E24FC87D33B6A59C683531484090
Authority key identifier: C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3233203d3e20323637353131.roa
Signing time:             Tue 18 Aug 2026 20:40:41 +0000
ROA not before:           Tue 18 Aug 2026 20:35:41 +0000
ROA not after:            Tue 17 Aug 2027 20:40:41 +0000
asID:                     267511
IP address blocks:        201.182.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:07:c4:1d:4a:52:e2:4f:c8:7d:33:b6:a5:9c:68:35:31:48:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
        Validity
            Not Before: Aug 18 20:35:41 2026 GMT
            Not After : Aug 17 20:40:41 2027 GMT
        Subject: CN=43F89008770AD6D5373D4011FE0353A778971573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:ef:5d:89:e9:af:27:6f:61:61:5e:1e:5d:
                    13:e5:fc:54:db:54:e9:06:0c:c0:5c:80:e6:3d:a5:
                    42:b2:a8:ac:7e:14:19:8c:50:3f:b9:00:92:75:66:
                    9a:87:5a:cd:41:c8:ca:b9:4e:ee:16:7d:b3:a5:4f:
                    c3:0b:10:7b:ad:0a:1c:82:58:8b:c2:cc:bd:3a:d0:
                    93:79:39:86:7d:05:2d:13:bb:92:86:5b:ab:36:9f:
                    54:13:8d:9a:5b:8e:a8:ae:f6:dd:ce:53:07:cb:5b:
                    dd:b0:88:4a:98:48:36:78:56:da:60:33:8d:cb:09:
                    3c:89:4c:9e:e8:23:1a:54:f9:a3:1a:86:17:ac:e1:
                    78:90:ba:d0:2e:8a:ec:96:50:a3:d6:26:c4:4a:46:
                    07:9f:ea:20:4a:c3:9d:11:3f:aa:84:61:7d:f3:3e:
                    aa:8c:3c:ae:0b:3c:ab:c7:0f:52:28:02:51:c5:58:
                    d6:8a:a1:f6:0b:87:d6:80:24:06:4f:c1:0b:11:41:
                    ad:dd:f8:de:1a:85:05:0e:80:bf:c1:80:c0:37:f9:
                    aa:f3:e8:83:70:ac:53:2b:3e:dd:10:6c:72:f1:9d:
                    a8:bd:22:5d:d7:8e:9c:6e:85:58:6f:58:de:66:e3:
                    25:fb:32:e1:c8:4e:7e:90:fa:76:99:0e:6c:ee:2a:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:90:08:77:0A:D6:D5:37:3D:40:11:FE:03:53:A7:78:97:15:73
            X509v3 Authority Key Identifier:
                keyid:C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130322e302f32332d3233203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:3a:45:57:60:3d:36:10:e7:70:cf:e7:f2:cd:60:29:a9:
         b7:10:7e:d3:cd:ec:ae:27:4f:71:e5:81:fd:8f:e1:5d:fb:99:
         f4:f9:be:87:cc:dd:95:f7:9f:cc:34:30:4f:13:9a:76:b6:12:
         0a:df:72:a1:8c:53:57:aa:c1:91:d8:fc:5a:6d:48:1e:a3:6f:
         a6:e8:63:7b:8d:51:cf:0e:da:6d:a4:ea:bc:ed:65:d3:36:41:
         f4:07:76:90:40:c1:4e:fe:0c:08:c8:b4:41:4d:77:e1:25:2d:
         c2:59:6f:83:e2:2e:64:8c:4f:a2:e1:77:3d:18:d1:5b:65:ed:
         aa:c5:53:4c:f9:a1:49:8a:bb:c9:ef:2f:26:3b:18:f9:6d:3e:
         3f:60:00:12:00:c1:60:85:51:80:6c:38:50:b3:34:72:f9:68:
         46:e9:f1:3a:65:21:75:dd:01:3d:d4:a1:52:d1:7e:77:7b:06:
         40:3b:8e:d5:e3:ed:01:61:ce:39:bb:a7:c6:a4:ba:b6:8c:96:
         7c:0f:8a:6d:c2:43:30:e7:5a:04:f1:b1:17:64:fe:d7:f3:3f:
         03:b6:7e:d6:4f:98:6b:0e:f2:b0:4a:cf:92:6e:84:01:28:20:
         1e:23:15:86:77:56:45:4d:dd:82:d9:39:13:75:1d:40:5f:44:
         f7:ea:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:01 2026 by rpki-client