Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa
File:                     3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa (raw, json)
Hash identifier:          RhH0mPP5rGhKF5eirNXLsbtt9mkxJKI98jhxKTvRg4g=
Subject key identifier:   A7:9E:2D:88:D2:7F:96:0D:30:E2:88:F6:9D:FD:CC:2F:93:26:DA:79
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       023D5C2E765994240DE8EE608425FF76E965B147
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa
Signing time:             Mon 16 Mar 2026 22:03:02 +0000
ROA not before:           Mon 16 Mar 2026 21:58:02 +0000
ROA not after:            Mon 15 Mar 2027 22:03:02 +0000
asID:                     270968
IP address blocks:        181.225.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3d:5c:2e:76:59:94:24:0d:e8:ee:60:84:25:ff:76:e9:65:b1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Mar 16 21:58:02 2026 GMT
            Not After : Mar 15 22:03:02 2027 GMT
        Subject: CN=A79E2D88D27F960D30E288F69DFDCC2F9326DA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:30:4e:52:05:6e:12:8e:30:d4:00:8b:0c:
                    ad:60:ca:af:9f:5e:aa:61:54:80:82:99:36:48:8f:
                    cc:bb:85:cb:7f:0d:b9:40:bc:43:55:15:be:e5:e7:
                    08:d2:a3:27:8e:54:82:9f:33:86:bd:e0:48:08:f7:
                    75:fd:c2:a5:d9:64:64:be:f2:10:56:ea:18:d2:15:
                    7f:95:26:85:ad:03:75:b0:62:96:07:8a:70:4a:6f:
                    42:6f:dd:09:6b:6e:cc:d1:ed:f8:dd:aa:c0:54:43:
                    aa:ab:43:78:b6:9d:39:1f:9b:83:25:ea:ec:03:8b:
                    ff:d0:6b:b2:2d:66:b9:40:51:05:8c:1c:3f:92:42:
                    b6:11:ab:85:90:c1:95:95:d5:e7:f7:83:56:45:db:
                    fe:52:f4:52:c9:c3:2c:b7:c5:47:76:8e:62:5f:6b:
                    07:bf:6a:2f:aa:4a:e9:4d:9d:48:3f:ce:b5:94:c9:
                    f1:14:4f:b6:7c:03:58:b0:ff:df:09:aa:b8:56:ff:
                    70:cd:96:5a:39:0a:a5:ca:11:fa:6c:65:f5:7c:a6:
                    35:62:c6:c7:78:0b:1b:5d:32:bd:3c:86:47:7f:62:
                    54:b9:93:e8:ee:d9:fc:b3:4b:40:12:39:ec:19:60:
                    2f:1b:00:ef:78:26:aa:0a:9c:ca:bb:93:ff:9e:72:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:2D:88:D2:7F:96:0D:30:E2:88:F6:9D:FD:CC:2F:93:26:DA:79
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3136392e302f32342d3234203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:20:82:d6:73:f6:f9:a5:ef:1d:c8:59:b2:18:3a:a8:a2:9b:
         a7:33:64:33:90:06:1c:25:64:2e:d3:fe:8f:ff:b0:a4:59:31:
         16:1d:06:61:c1:cc:ad:bf:f4:08:ee:12:83:ef:f9:33:6f:03:
         6b:e8:69:a3:ae:b1:45:db:a5:25:87:7c:7c:fb:00:e9:9d:7f:
         07:e6:f3:57:ad:c0:96:84:9e:31:16:bf:65:a9:dc:96:56:08:
         21:3e:f9:73:53:58:56:1e:45:ad:45:fa:fc:4d:e6:26:60:1a:
         cc:20:27:51:43:44:73:a2:70:6c:78:ae:b1:10:73:d9:db:41:
         b3:85:20:15:89:b2:9c:91:bd:31:98:c6:dc:3e:12:af:5b:07:
         c3:87:17:8b:f6:df:6d:f4:31:81:f8:ed:96:66:9a:05:08:8a:
         c5:ed:c9:c8:6b:12:91:b3:94:f2:e2:cf:5e:10:00:74:80:f0:
         7b:97:04:d1:9b:b8:30:d5:15:3c:02:47:29:c0:96:2b:c5:ff:
         ec:9a:18:76:51:e8:55:93:24:bc:e8:d2:85:81:f0:18:be:ec:
         df:1c:28:4e:cf:f1:e3:22:7f:b2:0a:09:45:49:b2:9a:99:6d:
         d1:1f:e1:36:cb:74:65:66:66:57:eb:86:0e:c1:5e:cb:d6:42:
         d1:e3:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:11:02 2026 by rpki-client