Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa
File:                     3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa (raw, json)
Hash identifier:          S2E/htmuyPxkIP5cFxJyWkfFZqu4BwhtUIj+5Pl1rF0=
Subject key identifier:   43:35:53:28:38:22:55:46:BF:66:57:B3:0C:84:B6:25:9D:80:EB:CC
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       33E761DAC2C238E6A56A1958FB56A3EE8C24AF19
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa
Signing time:             Thu 12 Mar 2026 16:03:00 +0000
ROA not before:           Thu 12 Mar 2026 15:58:00 +0000
ROA not after:            Thu 11 Mar 2027 16:03:00 +0000
asID:                     270968
IP address blocks:        181.225.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e7:61:da:c2:c2:38:e6:a5:6a:19:58:fb:56:a3:ee:8c:24:af:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Mar 12 15:58:00 2026 GMT
            Not After : Mar 11 16:03:00 2027 GMT
        Subject: CN=4335532838225546BF6657B30C84B6259D80EBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:63:fc:12:17:cd:dc:20:b0:24:74:77:f0:
                    38:40:10:97:f4:ae:1b:c8:fd:1e:a8:bb:e9:2a:25:
                    d4:b8:4b:dc:54:41:66:b9:2b:70:69:5b:02:92:a5:
                    39:1f:40:b8:53:14:42:54:32:3e:37:82:8e:52:f7:
                    51:f1:73:2a:00:59:c8:d1:09:31:41:98:2a:f1:b4:
                    0d:87:f6:0a:d2:ae:e6:4a:ae:18:e1:5e:73:4d:9d:
                    d0:e6:f5:f2:98:61:5f:1f:40:47:8f:46:8b:59:9d:
                    e0:41:1a:f3:2c:ba:e7:a5:6c:5d:6d:da:94:f2:98:
                    58:a1:3a:20:d3:49:65:c4:25:2a:df:38:43:e4:1f:
                    83:a4:92:43:5c:ea:04:08:b8:55:05:c5:87:cf:df:
                    ad:fb:c9:a6:45:82:91:ef:ee:a0:c5:87:4c:74:19:
                    88:3b:c4:bc:42:17:83:8a:55:3a:4c:f9:9f:23:df:
                    c9:29:64:02:c8:64:bc:59:6b:ab:44:dc:a4:7a:e3:
                    d5:fa:41:ae:89:45:4f:d1:20:4a:81:70:12:8b:09:
                    8f:84:84:4d:17:ab:ae:a0:08:79:a9:0d:e3:9f:d0:
                    5e:6d:2f:28:53:39:0f:18:88:48:35:4f:47:76:ac:
                    d9:d7:ca:fd:42:21:bb:f0:40:b4:a1:03:82:36:1b:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:35:53:28:38:22:55:46:BF:66:57:B3:0C:84:B6:25:9D:80:EB:CC
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136382e302f32332d3233203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:81:18:fa:2e:c6:1c:71:f7:b8:62:55:91:32:20:61:ab:78:
         9b:df:6f:21:d3:07:15:d1:d1:35:c2:ea:53:6d:99:d1:e3:cc:
         dd:e4:75:02:24:56:be:df:80:67:09:36:3b:25:a6:a4:42:c6:
         04:cd:d7:49:76:c7:c3:6c:e3:99:46:a3:8f:88:40:3d:10:44:
         a6:56:70:1b:db:f7:d1:34:8c:15:f7:14:89:cd:14:1b:7d:ef:
         82:8c:b2:f4:35:42:e7:67:c0:fd:5c:41:88:97:84:12:de:62:
         b6:9a:05:8d:5a:be:87:42:96:a9:4d:c5:f2:d6:87:20:46:9c:
         7b:12:6e:88:88:2e:f6:2e:b4:ba:d6:7b:e2:8a:27:d2:bd:24:
         d7:02:d0:5f:9a:63:bf:bc:50:e5:17:1e:74:f7:2e:d7:e4:5f:
         2e:e3:3a:3b:4e:9e:4b:1c:9b:5e:30:07:74:17:15:32:bf:7a:
         1f:9b:d2:9a:08:50:f7:d9:b3:12:f3:57:3e:a1:d0:8a:b3:b4:
         3f:ca:e9:51:01:5c:83:a2:cb:d0:3c:6e:c3:ab:a6:08:4f:e0:
         e5:ad:d7:02:85:32:5a:8b:79:e9:d0:de:87:a1:c5:4f:85:4e:
         d6:0d:02:31:f0:b8:20:57:67:6b:c0:14:12:14:6e:e5:40:6d:
         1e:05:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:45 2026 by rpki-client