Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/3138312e3233332e3130342e302f32342d3234203d3e20323637353633.roa
File:                     3138312e3233332e3130342e302f32342d3234203d3e20323637353633.roa (raw, json)
Hash identifier:          JNYj4IxwFxcDK6HiNyXKpqhOh5xD1w3x2P4NHLVY+Kg=
Subject key identifier:   3A:55:C9:21:A1:5E:DA:18:D1:78:B5:59:3D:FA:23:1E:F3:F2:F1:35
Certificate issuer:       /CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
Certificate serial:       2F3EB1C3B0A8B1B0826C52092B1503A35864FC01
Authority key identifier: D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/3138312e3233332e3130342e302f32342d3234203d3e20323637353633.roa
Signing time:             Tue 10 Mar 2026 21:37:21 +0000
ROA not before:           Tue 10 Mar 2026 21:32:21 +0000
ROA not after:            Tue 09 Mar 2027 21:37:21 +0000
asID:                     267563
IP address blocks:        181.233.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl
                          rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 07:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:b1:c3:b0:a8:b1:b0:82:6c:52:09:2b:15:03:a3:58:64:fc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D158C3BF05B29EB9F5393618B97CD510D1DA2355
        Validity
            Not Before: Mar 10 21:32:21 2026 GMT
            Not After : Mar  9 21:37:21 2027 GMT
        Subject: CN=3A55C921A15EDA18D178B5593DFA231EF3F2F135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:a6:61:21:08:d0:be:1d:44:ac:41:bc:86:
                    b0:18:ba:3c:70:95:46:d2:70:d9:d4:41:49:96:b2:
                    43:1f:26:d9:d8:12:36:c6:f6:12:d0:da:77:e6:38:
                    ad:6e:73:74:21:a4:8d:ec:83:9d:72:e5:88:13:c3:
                    40:54:9c:20:a7:3e:a3:9d:61:65:cc:b7:77:2a:ff:
                    76:09:fb:9d:94:57:ac:5e:9b:43:7b:96:77:a0:fe:
                    d9:81:7f:a9:9e:db:af:bd:b4:b1:2d:97:99:d2:9b:
                    cb:ec:e5:df:3e:38:da:76:d5:66:3a:92:d6:81:0b:
                    62:38:ee:e7:fe:b1:63:67:da:af:ef:9f:dc:db:0d:
                    8a:88:da:88:5a:c1:61:cb:fe:1e:a1:21:c4:fd:28:
                    67:ef:da:65:06:e0:99:15:db:73:93:79:01:68:ee:
                    a5:8c:5d:7b:96:ec:f9:fe:3b:5e:d4:57:85:f8:8c:
                    eb:72:d6:be:0f:7b:4f:9f:98:65:56:8d:7b:ae:6c:
                    b3:d2:e1:40:df:d2:6b:4f:97:70:00:b8:fe:6f:c0:
                    24:cb:c6:8f:23:f4:ad:93:ed:8a:ab:03:58:22:ff:
                    b0:5c:96:ce:22:8d:f5:a7:4f:96:f0:1a:94:c2:a2:
                    7b:e5:e8:4c:3a:38:9d:64:49:2a:5a:4a:73:31:81:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:55:C9:21:A1:5E:DA:18:D1:78:B5:59:3D:FA:23:1E:F3:F2:F1:35
            X509v3 Authority Key Identifier:
                keyid:D1:58:C3:BF:05:B2:9E:B9:F5:39:36:18:B9:7C:D5:10:D1:DA:23:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/D158C3BF05B29EB9F5393618B97CD510D1DA2355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D158C3BF05B29EB9F5393618B97CD510D1DA2355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z8THJ36D6PjmDSZrKDsw85CgCnrH7nskjzYhbxfgGM9/0/3138312e3233332e3130342e302f32342d3234203d3e20323637353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9a:6f:d2:26:3a:58:b4:6f:fd:4d:79:f1:bf:27:49:54:f5:
         70:c1:63:cd:4c:35:07:13:a6:fc:e1:56:a5:d9:43:c5:8a:9e:
         12:e2:28:26:f8:fb:72:c0:ef:5b:73:45:b4:f8:89:2a:5a:af:
         1c:b7:40:5a:a4:a5:b6:8c:30:0c:90:95:82:21:7a:4f:15:4d:
         63:f3:a6:1b:d0:e3:61:65:34:f8:5b:5d:26:69:d2:a9:b0:46:
         a1:85:0e:b7:46:55:56:c1:17:de:68:32:2d:99:d3:c2:8c:9d:
         27:ab:83:40:74:ed:38:f7:c4:65:c8:c0:f4:1d:c4:a7:a7:61:
         b7:81:a0:97:86:a3:c7:13:05:b1:d2:b2:b5:fc:93:17:4d:ad:
         6d:65:a3:41:ec:e3:c8:8f:06:53:24:e8:2f:e8:a3:bd:85:fa:
         b1:fd:55:9f:e4:b7:71:6d:c1:7c:5f:c7:9f:0e:79:e0:8b:94:
         11:9c:40:85:3d:72:93:a5:fb:2a:82:97:a6:c5:f7:75:f1:a7:
         53:80:f1:b1:e2:9a:b1:4c:76:c7:c1:dc:88:8e:1b:53:07:45:
         fd:41:84:b4:fa:4c:27:e9:d9:d2:b4:fb:f7:3e:2a:4c:4d:25:
         89:52:e3:6c:6f:5f:86:a2:55:37:e0:0e:ad:87:c0:c0:aa:89:
         f3:bd:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:19:51 2026 by rpki-client