Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
File:                     3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa (raw, json)
Hash identifier:          aWB8zj1KXd07NREr22Xca5qX+EAxqUHPvgDcaMYh5/k=
Subject key identifier:   15:AA:0E:9D:FA:3F:32:50:55:EE:39:C8:1B:C3:CE:0B:88:AA:EF:1B
Certificate issuer:       /CN=7815341A1229226B045BA14CE69989047BDCE9B3
Certificate serial:       4AB50746F2732BCF75C05745EC1DD7292B8BE8C8
Authority key identifier: 78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa
Signing time:             Sat 27 Jun 2026 18:13:20 +0000
ROA not before:           Sat 27 Jun 2026 18:08:20 +0000
ROA not after:            Sat 26 Jun 2027 18:13:20 +0000
asID:                     271484
IP address blocks:        181.233.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b5:07:46:f2:73:2b:cf:75:c0:57:45:ec:1d:d7:29:2b:8b:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7815341A1229226B045BA14CE69989047BDCE9B3
        Validity
            Not Before: Jun 27 18:08:20 2026 GMT
            Not After : Jun 26 18:13:20 2027 GMT
        Subject: CN=15AA0E9DFA3F325055EE39C81BC3CE0B88AAEF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:de:59:01:4e:0a:da:91:61:34:b2:0f:ea:
                    be:cd:28:6e:ec:98:50:c8:81:1e:79:b2:1a:27:0d:
                    74:a5:63:a4:71:c2:56:ce:af:cd:bf:55:e0:6e:e9:
                    64:05:20:f3:08:9f:c5:23:94:73:77:8e:0f:2e:3e:
                    31:c5:07:63:79:44:2e:ae:fd:fc:a3:95:ac:70:9c:
                    42:d5:c0:f0:0f:8e:7b:a1:e8:be:f6:76:25:1b:ce:
                    0b:9f:5c:dd:b8:b8:41:57:46:48:12:33:ae:d4:eb:
                    e5:97:39:34:2c:1b:da:8c:93:1c:bd:50:84:3b:90:
                    e9:2b:e3:84:a9:fb:a6:81:67:a3:1b:40:b1:3c:e2:
                    53:ad:06:88:4c:c6:0b:ac:37:6a:96:52:21:27:a5:
                    58:7d:dd:25:3b:c6:99:08:ba:98:f2:35:d3:05:95:
                    b2:fe:75:8f:3d:c4:5b:f8:bf:f9:67:77:e1:de:eb:
                    94:50:79:06:9f:63:47:ec:6f:24:a0:76:93:db:49:
                    89:8d:62:08:ca:6c:03:e4:f8:35:df:b7:51:96:ae:
                    1b:7e:7e:9c:30:1f:74:d1:f9:f0:2a:0a:22:76:52:
                    a4:00:35:ba:27:d8:aa:f7:7d:d7:0e:22:22:9d:56:
                    96:25:d7:32:e0:9e:b8:9b:01:db:21:ed:32:7c:21:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AA:0E:9D:FA:3F:32:50:55:EE:39:C8:1B:C3:CE:0B:88:AA:EF:1B
            X509v3 Authority Key Identifier:
                keyid:78:15:34:1A:12:29:22:6B:04:5B:A1:4C:E6:99:89:04:7B:DC:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/7815341A1229226B045BA14CE69989047BDCE9B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7815341A1229226B045BA14CE69989047BDCE9B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3138312e3233332e31362e302f32322d3232203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:44:9a:49:79:d7:d1:ed:cd:e4:bc:94:66:08:85:b9:c5:63:
         12:18:2f:6c:37:0c:cb:6c:af:e8:33:b0:be:ae:bf:c6:45:1a:
         10:84:33:1e:b4:2f:cd:c7:11:c1:c9:83:65:86:30:14:91:66:
         e1:64:7f:46:2b:2e:61:c5:b5:28:71:b4:9f:f5:d6:43:51:b0:
         bf:6d:39:ce:a9:34:21:3f:dd:73:92:30:ce:51:f4:c8:fd:5a:
         93:c8:b1:4c:c8:04:2f:ca:68:d8:34:47:ca:ba:41:ea:99:b8:
         db:87:ae:e7:db:e6:9f:51:e0:59:9a:28:4f:c2:c0:d3:56:2c:
         a2:33:b3:64:72:ad:18:c0:a8:19:d0:05:7a:6e:f1:fe:00:3c:
         3b:26:29:83:93:1b:b1:02:cb:9a:5c:e0:63:d2:a3:da:e6:75:
         21:28:0d:10:b7:92:24:8f:21:4e:8b:b8:cf:5b:5b:7f:66:27:
         13:29:74:8e:db:34:9e:c0:43:8b:fd:59:6a:c8:20:ff:48:68:
         ce:1c:1f:eb:83:2c:f1:71:29:7a:79:4d:2f:73:de:d2:23:d3:
         03:c0:42:5a:5a:9a:e1:d2:35:82:8e:ad:90:c8:89:b3:21:82:
         86:dd:c9:d7:15:dd:41:f1:be:a8:a5:6c:2d:fd:7e:a3:8c:08:
         9e:10:32:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSrUHRvJzK891wFdF7B3XKSuL6MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxNTM0MUExMjI5MjI2QjA0NUJBMTRDRTY5OTg5MDQ3
QkRDRTlCMzAeFw0yNjA2MjcxODA4MjBaFw0yNzA2MjYxODEzMjBaMDMxMTAvBgNV
BAMTKDE1QUEwRTlERkEzRjMyNTA1NUVFMzlDODFCQzNDRTBCODhBQUVGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPgd5ZAU4K2pFhNLIP6r7NKG7s
mFDIgR55shonDXSlY6RxwlbOr82/VeBu6WQFIPMIn8UjlHN3jg8uPjHFB2N5RC6u
/fyjlaxwnELVwPAPjnuh6L72diUbzgufXN24uEFXRkgSM67U6+WXOTQsG9qMkxy9
UIQ7kOkr44Sp+6aBZ6MbQLE84lOtBohMxgusN2qWUiEnpVh93SU7xpkIupjyNdMF
lbL+dY89xFv4v/lnd+He65RQeQafY0fsbySgdpPbSYmNYgjKbAPk+DXft1GWrht+
fpwwH3TR+fAqCiJ2UqQANbon2Kr3fdcOIiKdVpYl1zLgnribAdsh7TJ8Icu5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFaoOnfo/MlBV7jnIG8POC4iq7xswHwYDVR0j
BBgwFoAUeBU0GhIpImsEW6FM5pmJBHvc6bMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFZyUGRDckJwdURwZnFVeWlKYkYyaWpSdmp0Y0tQclhVa1RWN3lMdmdv
azQvMC83ODE1MzQxQTEyMjkyMjZCMDQ1QkExNENFNjk5ODkwNDdCRENFOUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MTUzNDFBMTIyOTIyNkIw
NDVCQTE0Q0U2OTk4OTA0N0JEQ0U5QjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRWclBkQ3JCcHVEcGZxVXlpSmJGMmlqUnZqdGNLUHJYVWtUVjd5THZnb2s0LzAv
MzEzODMxMmUzMjMzMzMyZTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNDM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16RAwDQYJKoZIhvcNAQELBQADggEBADlEmkl5
19HtzeS8lGYIhbnFYxIYL2w3DMtsr+gzsL6uv8ZFGhCEMx60L83HEcHJg2WGMBSR
ZuFkf0YrLmHFtShxtJ/11kNRsL9tOc6pNCE/3XOSMM5R9Mj9WpPIsUzIBC/KaNg0
R8q6QeqZuNuHrufb5p9R4FmaKE/CwNNWLKIzs2RyrRjAqBnQBXpu8f4APDsmKYOT
G7ECy5pc4GPSo9rmdSEoDRC3kiSPIU6LuM9bW39mJxMpdI7bNJ7AQ4v9WWrIIP9I
aM4cH+uDLPFxKXp5TS9z3tIj0wPAQlpamuHSNYKOrZDIibMhgobdydcV3UHxvqil
bC39fqOMCJ4QMkg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:08:43 2026 by rpki-client