Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
File:                     3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa (raw, json)
Hash identifier:          35ppfl0yEV5K6TIuv4VrpTWUQA/e4+W3O+caLL650gA=
Subject key identifier:   74:BA:29:D8:8C:E1:8B:32:34:61:3D:8A:E6:73:C6:60:E4:C5:63:A1
Certificate issuer:       /CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
Certificate serial:       5418D2C5655AA26EEFB9971FDDEAB67BDF841C58
Authority key identifier: BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa
Signing time:             Thu 12 Mar 2026 16:03:00 +0000
ROA not before:           Thu 12 Mar 2026 15:58:00 +0000
ROA not after:            Thu 11 Mar 2027 16:03:00 +0000
asID:                     270968
IP address blocks:        181.225.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl
                          rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:18:d2:c5:65:5a:a2:6e:ef:b9:97:1f:dd:ea:b6:7b:df:84:1c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD729FD9CBD5A0A9946D6068C63DEC839E9765EF
        Validity
            Not Before: Mar 12 15:58:00 2026 GMT
            Not After : Mar 11 16:03:00 2027 GMT
        Subject: CN=74BA29D88CE18B3234613D8AE673C660E4C563A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:5a:30:e2:df:c0:74:f1:67:6c:7e:08:35:
                    a6:7d:a1:77:4f:e8:72:3d:34:27:61:5f:c1:37:d3:
                    12:ca:ea:65:fc:ef:a0:52:b8:f5:e8:3c:4b:2b:bb:
                    45:66:0d:6e:27:7c:08:f3:34:d1:03:91:fa:bb:8f:
                    ee:6a:3a:12:41:81:10:51:d4:a9:f6:10:45:62:d7:
                    4f:09:07:c7:f4:8a:ec:51:3f:f1:6d:fc:b3:81:22:
                    54:80:a4:09:13:27:74:46:51:11:12:bf:5b:01:63:
                    77:b1:0e:10:c7:fc:a9:3e:4f:2f:e2:1d:55:f0:d8:
                    4a:a8:d7:ad:20:fb:86:7c:cd:5e:4f:f2:5a:a7:13:
                    d1:79:fa:08:44:16:13:83:a8:f9:34:2c:ea:7c:1c:
                    51:e8:58:86:b2:a2:d0:ce:93:27:d6:ed:f0:73:31:
                    8a:99:97:c7:9a:2f:26:d8:ab:96:ef:a0:c4:3f:6f:
                    f7:7e:21:0f:41:6d:8e:1e:a7:64:c9:80:d4:52:73:
                    80:9e:a1:3f:d7:06:52:96:71:be:bf:ee:44:57:3c:
                    a8:0a:18:72:21:b2:6c:7f:0f:4c:8c:56:a7:51:ca:
                    15:2d:77:9a:e7:8d:3b:b4:d2:17:49:bd:dd:50:f8:
                    d6:60:a5:3d:8f:26:99:43:02:7e:be:79:0c:d8:25:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BA:29:D8:8C:E1:8B:32:34:61:3D:8A:E6:73:C6:60:E4:C5:63:A1
            X509v3 Authority Key Identifier:
                keyid:BD:72:9F:D9:CB:D5:A0:A9:94:6D:60:68:C6:3D:EC:83:9E:97:65:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD729FD9CBD5A0A9946D6068C63DEC839E9765EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86haAZas1chARfzxBwe9C64r2B2aJ4sDBrovPp6bgeA4/0/3138312e3232352e3137302e302f32332d3233203d3e20323730393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:61:15:fa:5e:44:c6:d1:b7:33:a2:e6:c4:c4:a2:95:1e:
         7d:77:ef:e5:d9:f7:db:5e:2d:1a:90:bc:93:0d:5e:da:91:6f:
         b3:d4:6b:1b:09:75:b8:eb:37:48:b9:a9:ab:79:de:1b:70:f9:
         c1:a3:27:f6:4c:f0:c2:74:89:85:31:1f:f0:a0:00:0b:dc:a3:
         91:e7:10:f9:bf:47:c3:8f:35:2d:3d:b6:95:55:78:24:41:37:
         d9:da:97:3a:f7:3a:a6:ce:e1:6e:4b:db:ce:ce:52:58:38:ff:
         b2:a4:c6:32:95:8f:6e:e6:5d:86:ff:c3:98:95:79:82:08:12:
         aa:0d:66:20:95:86:43:72:76:5f:68:9a:74:9c:48:a7:36:b4:
         b2:1f:55:20:66:6f:bb:2e:68:25:99:33:16:22:50:ad:56:c8:
         cf:f2:48:d3:c7:bd:cb:fa:6f:56:69:98:ff:35:b6:f7:ff:69:
         b1:30:70:c9:28:fd:5e:64:c2:b0:e8:cb:2b:d5:72:65:64:8f:
         c6:e7:68:2f:73:e4:91:0e:ce:3d:74:19:66:96:78:f8:c7:cc:
         35:ae:4e:71:0f:0b:00:77:8c:2e:f6:fa:f7:fc:46:8d:fb:1d:
         ce:01:76:f7:5a:31:d2:91:90:0c:2b:08:ff:1b:ed:97:9e:41:
         4a:d0:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:46:53 2026 by rpki-client