Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130332e302f32342d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130332e302f32342d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          LlknGo4cMnXihCnERjoCnLNnKfQH6dSEhp8WE7V7GHk=
Subject key identifier:   7B:86:37:71:98:17:81:45:57:2E:EE:7B:9D:CA:14:CF:E9:CE:15:45
Certificate issuer:       /CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
Certificate serial:       05EF4619C93C9A5AA9DF801034868722505E7C33
Authority key identifier: C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130332e302f32342d3234203d3e20323637353131.roa
Signing time:             Tue 18 Aug 2026 20:40:41 +0000
ROA not before:           Tue 18 Aug 2026 20:35:41 +0000
ROA not after:            Tue 17 Aug 2027 20:40:41 +0000
asID:                     267511
IP address blocks:        201.182.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 02:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ef:46:19:c9:3c:9a:5a:a9:df:80:10:34:86:87:22:50:5e:7c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59EF657C4F6D55F03B8712C21A3CA1E704BAA06
        Validity
            Not Before: Aug 18 20:35:41 2026 GMT
            Not After : Aug 17 20:40:41 2027 GMT
        Subject: CN=7B86377198178145572EEE7B9DCA14CFE9CE1545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8d:05:00:ba:14:2b:c4:11:66:1c:b5:55:df:
                    21:ae:bd:8b:9a:d7:a7:8e:0a:29:80:46:5d:c9:7d:
                    87:af:d8:1c:5b:e8:09:fe:8f:8c:a2:5c:3d:76:86:
                    c8:c3:9d:5d:84:95:91:20:5f:d8:ec:99:91:6e:56:
                    fa:b3:04:5f:0e:fa:1f:3d:21:49:24:24:f3:7c:1e:
                    03:5b:0f:90:72:2a:eb:09:73:52:63:bd:64:fc:49:
                    d3:64:75:5f:91:07:ed:ee:b6:1e:7e:bd:cf:f1:50:
                    30:ca:4a:75:da:76:13:56:5a:c9:db:57:0e:91:58:
                    27:51:f5:2b:d9:f4:25:25:ed:24:45:f7:9b:55:2c:
                    dd:5f:ce:2f:19:76:36:d3:8c:9e:ac:b3:f1:79:62:
                    2c:04:45:78:00:3b:16:a1:6f:ef:98:1e:e1:f5:79:
                    ce:18:1d:26:21:fd:24:bf:c5:bd:ef:99:39:52:a1:
                    4a:69:fc:fb:0f:cd:50:c8:e8:37:ce:3e:e5:21:e8:
                    2f:a6:bb:a9:b4:1a:6e:16:b6:f3:b9:5c:3c:cd:ec:
                    5a:68:6d:f1:77:12:60:7b:ac:d5:b7:06:60:f4:1e:
                    d4:c9:ba:ef:6c:81:b5:fd:99:2a:74:41:f6:c6:eb:
                    b1:74:d3:95:ea:32:74:a6:14:b6:05:ed:73:1f:77:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:37:71:98:17:81:45:57:2E:EE:7B:9D:CA:14:CF:E9:CE:15:45
            X509v3 Authority Key Identifier:
                keyid:C5:9E:F6:57:C4:F6:D5:5F:03:B8:71:2C:21:A3:CA:1E:70:4B:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C59EF657C4F6D55F03B8712C21A3CA1E704BAA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/0/3230312e3138322e3130332e302f32342d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:cd:4f:3f:50:8a:f6:b7:99:cf:d3:1f:4d:5a:00:ce:c6:ad:
         20:c3:6e:92:12:f0:67:99:49:85:b2:c8:a5:0d:35:eb:da:d0:
         8a:25:7b:4d:cc:89:d8:92:c3:51:c5:7b:91:63:f2:dd:b4:c2:
         6d:b0:41:ea:86:b6:d8:ff:3e:d8:61:5a:d0:ce:70:55:3c:27:
         22:69:d3:66:57:e1:79:f7:88:5b:05:34:51:89:c1:03:9b:bc:
         a1:dc:1a:35:e7:71:29:42:70:77:4e:f2:54:9f:1a:f4:9a:81:
         a3:25:82:73:18:fb:5e:71:b0:fa:83:48:7e:ad:88:d7:54:c1:
         71:fc:2c:6e:7f:88:45:3d:13:6b:49:c7:86:dc:66:fc:c9:0e:
         b7:e6:0c:13:fb:f8:71:4c:24:8c:8f:a6:ce:fe:c4:8c:c2:08:
         26:ba:5b:8b:48:15:a2:6e:da:ed:be:2b:f5:a3:a7:fd:de:28:
         d4:e3:2a:c0:dd:53:be:f6:e7:2e:6b:d4:f6:27:70:2c:1d:49:
         a8:27:4a:b0:9f:1c:52:04:5f:73:91:bf:88:c0:eb:5c:83:99:
         c2:be:25:de:91:cb:3d:cb:b9:f1:c2:af:90:03:2e:30:21:3a:
         6a:92:4b:d4:15:75:00:75:cb:98:f3:ba:5a:6d:c4:26:9a:63:
         3e:a1:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:59:01 2026 by rpki-client