Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa
File:                     3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          TphvTaSRWcqNUR6m3SXRxlFwpI6OotYh1k9iH59ay5I=
Subject key identifier:   75:73:D8:89:7E:C0:CA:DF:39:CD:DE:35:74:9D:B0:14:EA:B3:8D:AD
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       487ADB1AB3F9481631B6D96512C4E598F8300A1D
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa
Signing time:             Sun 08 Mar 2026 19:39:15 +0000
ROA not before:           Sun 08 Mar 2026 19:34:15 +0000
ROA not after:            Sun 07 Mar 2027 19:39:15 +0000
asID:                     262462
IP address blocks:        181.224.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:db:1a:b3:f9:48:16:31:b6:d9:65:12:c4:e5:98:f8:30:0a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Mar  8 19:34:15 2026 GMT
            Not After : Mar  7 19:39:15 2027 GMT
        Subject: CN=7573D8897EC0CADF39CDDE35749DB014EAB38DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:e9:a0:0b:60:40:21:b0:a7:7b:21:0c:11:
                    d2:25:d6:5f:86:4e:62:a2:bf:f1:01:d4:41:77:27:
                    d5:02:c8:1a:55:f1:5a:09:26:9e:69:df:b9:05:a8:
                    e0:b3:43:bd:81:fc:35:59:10:88:fb:bd:48:62:6d:
                    3b:79:62:94:40:9a:90:71:6a:f4:75:07:d4:91:6d:
                    9f:b1:e7:82:b3:a0:0e:f1:53:e0:78:28:23:42:b6:
                    05:47:2b:02:d8:6c:96:ce:cd:56:b7:eb:dd:87:b0:
                    21:03:81:17:77:cf:9f:1c:b3:74:d3:03:85:03:67:
                    6d:7e:92:a8:10:b0:e6:15:00:bc:c8:c5:bd:57:59:
                    ed:95:58:5e:de:d2:c1:93:4f:f6:34:d6:8c:cf:47:
                    65:d7:ee:ee:1c:38:05:f1:10:11:03:20:ce:67:c4:
                    20:3f:6d:52:39:de:3f:8a:26:0c:87:e2:9a:ee:b3:
                    41:81:5c:9d:9f:36:46:31:66:d4:7d:e3:f7:52:ab:
                    fd:68:04:f1:ca:71:b6:ec:d4:f4:7b:20:ef:17:54:
                    ed:ae:6a:3b:d0:49:2a:bd:93:86:55:4e:9d:e0:8d:
                    34:fc:a9:c3:fd:30:9e:e3:00:6c:70:23:c9:6c:8f:
                    98:12:96:ee:e0:5e:79:76:1b:cb:c8:dd:e5:77:1f:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:D8:89:7E:C0:CA:DF:39:CD:DE:35:74:9D:B0:14:EA:B3:8D:AD
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:2f:7a:d5:93:60:f3:40:dc:7d:06:36:ed:20:2a:88:1f:
         a7:8f:9a:d6:19:74:7e:a5:0a:f9:70:db:19:80:6b:b5:b1:7b:
         4f:db:13:ad:26:e8:ec:9f:21:4b:49:c4:f4:ec:3e:a7:87:32:
         89:be:ec:0e:a2:d4:45:c8:fa:2d:25:83:bd:b8:24:f2:88:36:
         af:ee:23:c3:90:75:12:67:60:07:82:7c:95:a2:95:72:3c:67:
         a9:42:fd:61:7c:83:c7:4f:5f:af:bd:4d:3c:35:93:71:e3:b9:
         99:f3:c9:3b:83:da:63:74:c7:d5:21:62:38:bc:df:28:0d:0a:
         76:74:74:76:f9:e6:52:3d:a6:39:a9:37:8b:11:55:30:33:74:
         86:9d:28:a0:1c:ea:06:ea:c4:92:48:5f:40:2d:d2:d4:19:7b:
         ed:b3:c9:fd:2c:92:91:a0:ba:1d:10:24:92:4b:de:6e:fe:51:
         4d:dd:e7:3a:84:02:b3:c2:fc:65:d5:32:83:41:4d:71:80:29:
         fb:25:33:93:fd:fe:8f:90:f8:82:fd:cb:36:97:81:49:20:f8:
         b9:eb:6d:90:b2:8a:dc:c5:83:9f:ce:5b:5e:dc:08:42:c6:37:
         8e:4d:06:5e:cf:d6:9c:c3:0c:f0:dd:1e:6a:65:6a:31:46:62:
         67:be:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:50 2026 by rpki-client