Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32332d3233203d3e20323731333532.roa
File:                     3138312e3233322e3137302e302f32332d3233203d3e20323731333532.roa (raw, json)
Hash identifier:          d0GHELLPQMSyM7HBC/5xE651Fi3LVaeyf8yCDkE7qDw=
Subject key identifier:   FC:7A:AD:B4:44:C0:08:89:5A:EA:05:FF:A4:97:C3:8B:57:D5:97:0D
Certificate issuer:       /CN=604CC86F51D78DE8F32943D7FAA159451D63781F
Certificate serial:       3D867F757F0577FFE85344F2B0D079A682C68D24
Authority key identifier: 60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32332d3233203d3e20323731333532.roa
Signing time:             Wed 08 Jul 2026 21:08:49 +0000
ROA not before:           Wed 08 Jul 2026 21:03:49 +0000
ROA not after:            Wed 07 Jul 2027 21:08:49 +0000
asID:                     271352
IP address blocks:        181.232.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:86:7f:75:7f:05:77:ff:e8:53:44:f2:b0:d0:79:a6:82:c6:8d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604CC86F51D78DE8F32943D7FAA159451D63781F
        Validity
            Not Before: Jul  8 21:03:49 2026 GMT
            Not After : Jul  7 21:08:49 2027 GMT
        Subject: CN=FC7AADB444C008895AEA05FFA497C38B57D5970D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:fc:8e:c8:95:04:27:44:b7:91:9c:01:f9:
                    97:1c:6c:fd:17:f4:25:2d:50:e7:ee:a6:8e:73:44:
                    65:f1:70:d3:93:7e:c5:e9:f9:64:64:f3:7b:3f:75:
                    be:ff:f5:20:a9:35:42:4f:32:a1:f3:26:bc:fb:56:
                    bb:4f:cc:9b:ef:87:72:d7:1d:dd:e0:ca:b8:3f:d7:
                    e4:25:1b:1b:b7:77:ab:f9:f5:44:5a:30:00:d6:a4:
                    67:6a:16:81:1e:1d:09:c2:bd:eb:9a:21:e6:13:15:
                    ea:5d:56:ac:a4:ac:cc:31:5b:40:7c:29:1b:60:21:
                    87:d2:8a:de:73:fa:c1:cf:44:ba:79:6e:20:07:10:
                    79:15:c8:5f:a7:2e:e5:bf:31:4e:98:75:7d:2b:da:
                    c6:90:db:18:de:84:e2:28:f8:81:af:53:ff:c7:6a:
                    54:62:d7:93:c8:ab:20:94:9b:8f:4b:aa:47:b9:0a:
                    4e:42:13:a6:0b:8e:a1:70:25:a7:58:31:35:d0:4c:
                    ed:0b:bb:e1:c1:2d:4d:22:9f:12:c7:81:df:3a:c6:
                    2e:26:6e:a6:50:58:05:ac:23:25:14:59:f6:b9:6b:
                    fe:52:a4:fd:88:5a:7f:df:fd:16:4a:48:b0:3a:94:
                    fb:f2:bd:d6:21:21:ba:ab:8e:6f:5d:da:36:ea:2b:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:AD:B4:44:C0:08:89:5A:EA:05:FF:A4:97:C3:8B:57:D5:97:0D
            X509v3 Authority Key Identifier:
                keyid:60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32332d3233203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:a4:29:60:cb:52:77:38:a7:c3:ec:f1:b0:6c:a0:f8:0b:47:
         94:1b:09:b7:c2:b7:a7:d5:8f:ec:20:0b:79:fa:08:58:4d:57:
         2b:14:94:7f:17:15:33:8f:fd:63:a8:1b:8b:3c:07:be:ef:9b:
         a8:66:66:9f:e2:40:74:ae:46:83:2d:c4:a3:a8:2c:3e:8a:29:
         11:a9:28:10:69:0e:f2:85:78:db:ce:49:2b:06:ef:43:b6:fc:
         a0:ca:d2:3c:f4:76:b7:b0:74:e8:ae:07:d6:d4:b1:c0:0e:aa:
         65:f8:03:e5:2d:a0:f0:b2:69:ae:af:b0:07:d4:8e:2a:14:44:
         46:f7:31:56:7b:51:48:b8:b1:d4:af:2a:f3:9b:da:21:8c:5d:
         07:c1:c4:e1:7f:ed:f5:a0:cc:27:33:6f:2b:87:43:6e:9d:31:
         1f:77:c9:fc:54:c5:4f:a1:59:87:93:16:47:c5:b9:66:38:42:
         19:7c:63:9a:8b:43:ea:57:d3:bc:8f:db:44:34:73:1a:5a:8b:
         a4:d5:60:7a:7a:d9:f4:da:1d:ba:e1:b1:14:b3:3d:cd:28:e9:
         d7:36:25:7e:fc:08:5a:03:b0:e6:84:1e:8b:6d:7e:1c:61:97:
         af:ce:9d:3a:f0:8b:14:bc:b2:e7:a6:ed:14:d9:46:ad:17:71:
         06:dc:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:09:09 2026 by rpki-client