Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa
File:                     3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa (raw, json)
Hash identifier:          elB85AOt8djw8OUI41k+5jJH7RrxA9A03T0rDfwWdCg=
Subject key identifier:   4D:62:9E:F6:0C:9D:F5:7F:96:D9:79:09:1C:7C:C9:69:20:FB:1B:E1
Certificate issuer:       /CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
Certificate serial:       4060D493EF86C4F684506C4DEE16486D956B3E24
Authority key identifier: BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa
Signing time:             Tue 21 Jul 2026 20:40:10 +0000
ROA not before:           Tue 21 Jul 2026 20:35:10 +0000
ROA not after:            Tue 20 Jul 2027 20:40:10 +0000
asID:                     271552
IP address blocks:        181.232.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:60:d4:93:ef:86:c4:f6:84:50:6c:4d:ee:16:48:6d:95:6b:3e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
        Validity
            Not Before: Jul 21 20:35:10 2026 GMT
            Not After : Jul 20 20:40:10 2027 GMT
        Subject: CN=4D629EF60C9DF57F96D979091C7CC96920FB1BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:d1:21:bc:a9:14:23:9a:f2:3b:22:b5:54:
                    79:24:a6:27:a8:d9:fd:5c:13:0f:30:3f:b9:0c:b4:
                    e4:7c:af:57:b0:fb:0e:36:97:25:73:e2:5b:2d:32:
                    d9:3e:59:5d:a9:89:96:a5:62:b8:69:4f:62:2f:58:
                    a4:00:a6:6d:7f:2c:9d:f7:d8:b9:6b:e9:a2:ad:bc:
                    d1:28:ec:d6:ef:bc:a0:ac:2f:d7:5b:95:cb:bc:71:
                    53:89:24:6c:c8:ba:07:be:c3:07:e4:c3:91:79:c9:
                    42:eb:fc:50:f6:86:c4:73:3f:ad:00:20:5b:fe:9b:
                    65:11:4b:ae:b9:00:2f:50:a3:0e:f5:7e:1f:0e:1a:
                    f0:6a:20:99:28:65:27:e4:e2:f4:77:cc:fa:fa:36:
                    bb:8f:a0:f5:57:8b:6f:01:f1:5e:3c:d2:f4:cd:36:
                    cf:f3:68:d2:6b:58:81:ec:b6:8b:cd:23:3e:e4:43:
                    83:fb:4a:da:fd:46:ab:86:73:11:7f:61:a0:e9:15:
                    3e:c2:fc:0f:fe:ab:6b:41:08:12:08:77:c0:62:89:
                    9a:e8:29:7d:ce:dc:c9:93:2c:96:df:63:57:bf:30:
                    a8:19:fe:7e:7d:ff:8c:f1:7a:2b:9e:16:9c:01:c3:
                    10:94:ca:9d:d9:3b:ef:d4:f3:44:d6:a0:43:d6:f5:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:62:9E:F6:0C:9D:F5:7F:96:D9:79:09:1C:7C:C9:69:20:FB:1B:E1
            X509v3 Authority Key Identifier:
                keyid:BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:8b:13:45:21:51:3f:fd:cf:01:18:e0:c4:be:8c:57:f5:
         d2:5b:ce:7a:4e:b4:65:3a:f1:bc:2e:a9:2d:47:8f:f2:2f:7a:
         62:87:02:06:22:3a:26:54:84:a4:74:b4:47:4f:3d:24:6a:9c:
         ad:ca:5e:8c:0d:46:6c:1b:25:32:b6:6e:83:ee:c1:f6:06:7d:
         44:f3:6f:6b:22:d0:30:51:fd:0e:04:df:d8:57:ac:71:9a:8b:
         1f:0b:8b:b5:ce:20:07:a5:31:8c:9a:40:97:d0:46:2a:91:b1:
         1a:15:6a:b6:9b:ec:18:41:24:e9:1f:4c:2a:77:6a:a0:07:88:
         b1:06:df:79:20:b8:93:30:cc:34:9a:e7:ac:c4:8e:88:53:cc:
         23:e0:dc:6e:ab:c1:4a:a5:38:32:0d:8a:56:2f:df:a0:bd:70:
         b1:f0:52:99:9c:bc:22:56:cb:c2:19:91:f6:48:62:d1:d0:ef:
         1f:84:29:47:ec:7d:09:4e:1c:6e:5c:d0:e5:bc:8f:ee:6b:78:
         f4:33:b8:a1:b5:b2:c9:2e:c8:83:1f:bf:01:a9:e4:5e:d7:1c:
         2b:0e:b8:b8:8d:c7:d4:cb:f1:33:1d:02:a8:6d:85:51:7e:a5:
         e5:3e:16:82:a8:98:28:26:ab:43:5b:b7:b6:ee:18:4f:5b:6e:
         cf:d8:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:34:28 2026 by rpki-client