Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa
File:                     3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa (raw, json)
Hash identifier:          tAIknkb29eyl+VJy0fGGs4IZXsnc89oNE4RdSzDCCQQ=
Subject key identifier:   85:B3:3D:AC:93:3D:A2:ED:C6:F4:EB:F4:0E:2F:A0:CA:D2:00:A7:E5
Certificate issuer:       /CN=604CC86F51D78DE8F32943D7FAA159451D63781F
Certificate serial:       71842BC001A32B789198EABB3E87FF4C7EA5B884
Authority key identifier: 60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa
Signing time:             Wed 08 Jul 2026 21:08:09 +0000
ROA not before:           Wed 08 Jul 2026 21:03:09 +0000
ROA not after:            Wed 07 Jul 2027 21:08:09 +0000
asID:                     271352
IP address blocks:        181.232.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:84:2b:c0:01:a3:2b:78:91:98:ea:bb:3e:87:ff:4c:7e:a5:b8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604CC86F51D78DE8F32943D7FAA159451D63781F
        Validity
            Not Before: Jul  8 21:03:09 2026 GMT
            Not After : Jul  7 21:08:09 2027 GMT
        Subject: CN=85B33DAC933DA2EDC6F4EBF40E2FA0CAD200A7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:d0:9b:fc:49:19:1d:2a:ce:92:99:8a:b5:
                    eb:b5:71:6c:11:37:32:07:1c:6d:aa:1b:1f:28:b9:
                    e9:b4:65:b1:c8:15:38:0b:90:84:4a:27:0f:44:08:
                    fe:7d:72:e9:e9:d3:da:b4:ad:b4:98:86:c5:da:a0:
                    e2:4e:df:30:8c:df:d5:f9:78:ad:80:63:9f:e3:44:
                    0d:8c:94:fe:29:8f:b7:2e:f1:8a:20:c7:c1:69:ae:
                    85:ff:83:84:6a:ec:b8:6a:36:31:46:14:ff:5e:07:
                    de:81:f1:02:a7:d8:26:a8:31:9e:0b:2c:d3:13:63:
                    b8:2c:ea:ea:5f:c3:c4:90:f1:b6:f0:30:ad:73:32:
                    f6:94:58:af:27:22:a3:eb:c0:54:77:49:12:87:a1:
                    9d:77:0f:0f:60:74:38:20:b4:a6:cb:c1:80:0c:b5:
                    05:2a:73:ff:2e:8f:4e:7d:12:ca:dc:ce:68:3c:18:
                    2b:36:17:ed:37:bf:53:e5:85:e4:d6:cb:29:41:5f:
                    6e:08:e0:e6:d3:3e:4d:60:51:fd:1f:9c:db:2d:4e:
                    ab:4b:7e:fe:b2:b6:b7:9c:b1:c8:60:67:cb:00:d8:
                    94:b0:38:15:be:4a:57:65:4e:37:66:a1:f6:9b:b3:
                    82:77:07:7e:25:28:00:a3:a9:27:8a:4e:7d:6b:f0:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:3D:AC:93:3D:A2:ED:C6:F4:EB:F4:0E:2F:A0:CA:D2:00:A7:E5
            X509v3 Authority Key Identifier:
                keyid:60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:5a:17:02:e9:b5:00:0f:a2:c8:45:6c:41:e3:39:9c:57:
         9d:48:91:10:fc:a2:6e:56:e4:84:44:be:50:10:87:1d:a5:8b:
         8f:95:60:31:7b:7b:6e:77:82:40:c4:17:e4:0b:70:f6:c3:a4:
         20:ef:63:af:17:a4:6b:9a:6f:ab:5a:d1:51:42:d9:d9:52:3a:
         af:f1:36:a3:a2:68:22:ed:91:47:4f:57:82:a1:a7:22:56:19:
         03:34:3f:6e:d0:91:5a:bb:a4:12:bc:19:cb:92:07:20:22:61:
         cf:b1:4f:66:88:83:ea:29:eb:a9:f8:b1:31:23:f3:aa:b9:72:
         f7:03:cf:56:d1:fe:d6:eb:e6:b0:ce:bc:e2:36:c0:a6:40:d8:
         83:f9:8a:85:52:05:66:a1:c8:99:cd:3d:48:ba:79:f5:9e:a1:
         7c:86:40:c0:0d:a0:d5:db:d8:39:f2:db:4a:06:b3:61:7a:c4:
         8c:8d:46:c9:5e:7d:1f:7b:82:c8:c0:69:62:c8:da:84:a3:ad:
         e9:c6:7c:7c:9e:a5:9d:1d:7b:53:05:33:c0:02:21:03:85:83:
         6f:d1:ab:41:85:74:be:29:0e:2d:b8:c6:a7:4b:0f:73:b4:b4:
         2d:8a:90:f9:36:c1:79:3b:ca:26:03:70:8f:cd:a0:a8:60:5f:
         75:8a:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:09:31 2026 by rpki-client