Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa
File:                     f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa (raw, json)
Hash identifier:          imMIXnv7iUJyEXYmebcBSMI5HpMhZXaSQX93MqdAaZs=
Subject key identifier:   E3:E0:9E:AF:C7:F4:B2:2B:C3:27:2A:22:8E:CB:99:CC:29:F2:33:01
Certificate issuer:       /CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15
Certificate serial:       64C353E7F31E4732826DF5874202CD8B6C2E4058
Authority key identifier: 58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa
Signing time:             Thu 01 Oct 2026 18:45:22 +0000
ROA not before:           Thu 01 Oct 2026 18:45:22 +0000
ROA not after:            Wed 30 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        177.86.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 Oct 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c3:53:e7:f3:1e:47:32:82:6d:f5:87:42:02:cd:8b:6c:2e:40:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15
        Validity
            Not Before: Oct  1 18:45:22 2026 GMT
            Not After : Dec 30 23:59:59 2026 GMT
        Subject: serialNumber=070f3aa85e8f162e32c773a08e896a5cced35f1279954bfbc65603ae602997a1, CN=cdb9583c-a9d1-49af-98d4-96e3eb7e1cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:02:7e:15:87:ce:85:38:9e:0e:83:62:5f:
                    24:7e:68:0b:6e:bf:fc:5b:27:66:95:30:a1:d9:32:
                    7d:b1:94:9f:c8:76:7e:8a:f9:e6:fa:08:b2:86:c6:
                    fe:88:f5:b0:08:c0:61:e4:a8:4a:5c:11:05:55:41:
                    38:ef:b2:48:7d:ce:71:66:ea:77:6b:41:c5:a0:fc:
                    f2:db:dc:c9:3d:33:bc:ec:29:ea:b8:ca:5d:3b:14:
                    c4:08:08:53:08:0c:cc:50:a5:d4:10:8c:f3:69:59:
                    11:be:3d:67:a0:43:34:66:f7:45:ef:f5:09:cd:11:
                    bd:68:d5:f8:78:13:ae:48:36:1f:d9:60:74:23:41:
                    60:ce:e5:d7:83:de:00:fe:ca:64:ae:ee:32:1f:51:
                    58:f6:d9:45:00:fd:92:71:38:2a:f8:8c:6a:2a:30:
                    51:a4:a9:88:d4:84:93:94:ee:a3:26:fc:00:e5:2f:
                    79:d8:63:34:c7:74:48:a9:37:9a:ad:77:b1:ec:d8:
                    c6:30:2d:16:a0:bc:94:3a:13:3e:de:0d:e9:2a:e6:
                    1e:f7:71:28:88:d4:65:e3:7f:dd:f1:90:b1:72:fb:
                    20:39:d3:01:2e:23:b8:73:b2:96:2f:7c:7b:b5:73:
                    cb:05:3e:0d:cf:6a:1d:d2:ec:16:1a:8f:57:b9:5e:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:9E:AF:C7:F4:B2:2B:C3:27:2A:22:8E:CB:99:CC:29:F2:33:01
            X509v3 Authority Key Identifier:
                keyid:58:4B:FB:8A:D2:60:37:15:03:B6:CD:8B:0E:F5:AE:A7:9C:9C:BB:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/584BFB8AD260371503B6CD8B0EF5AEA79C9CBB15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/f5ae5cb2-5c9a-4f86-87ed-8e26b9978ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/62b3479e-d188-4fbf-a2b8-0558d7e495cd/nA747Uq1S7sGJBCcsAHC4_YV5QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:c7:74:d3:d8:cf:4c:92:bd:0d:ab:44:a7:93:32:8a:be:ea:
         fd:70:c0:e7:5d:48:ad:16:51:25:c2:bf:6f:13:2e:c7:da:88:
         54:ad:a5:17:91:2f:a4:7a:72:36:73:e7:14:ce:78:26:75:48:
         5a:e7:1a:ae:6d:c1:77:eb:3d:16:20:ca:ab:97:95:dc:d0:b7:
         22:6d:a5:b4:c4:53:ba:26:d4:c2:b4:86:a1:c0:88:bd:53:63:
         af:b2:70:89:1f:df:f3:f8:09:43:c7:b3:04:b7:5b:be:9e:d7:
         6d:04:1d:96:b9:e3:ec:d4:31:0e:27:77:c2:41:78:39:1c:66:
         45:ee:e3:ce:01:ca:dc:79:0e:48:dc:fe:c3:76:91:69:ed:fc:
         8f:c5:46:82:cb:55:2c:f4:03:8c:68:ab:1a:e4:2b:5e:bd:5f:
         36:06:04:89:4b:67:e5:a4:bc:61:3c:dd:27:4f:4f:e1:30:68:
         2e:a3:c3:85:97:1f:0c:a2:e9:c2:c3:7d:13:6b:d0:27:1c:fb:
         9d:93:c2:7e:33:4a:d1:4f:30:de:bf:3c:62:c7:84:23:33:73:
         1e:1e:73:18:2c:ad:c7:a4:8d:36:86:d2:59:b2:52:a4:20:bb:
         14:02:81:d7:e5:a8:ae:57:7a:e3:1b:f3:b2:fb:26:6a:71:45:
         05:79:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:15:55 2026 by rpki-client