Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/3138312e3233332e39332e302f32342d3234203d3e20323734373635.roa
File:                     3138312e3233332e39332e302f32342d3234203d3e20323734373635.roa (raw, json)
Hash identifier:          lD8B72lpps00K7WWLVZDig4d9V79c5Gvo0gGhLjRIIA=
Subject key identifier:   B3:0E:3B:D8:B3:86:E8:89:91:59:DE:63:F9:CB:1A:DF:02:A8:05:63
Certificate issuer:       /CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
Certificate serial:       5D46A6642BE9DD01ECDB29FA56A982E21921A3E0
Authority key identifier: B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/3138312e3233332e39332e302f32342d3234203d3e20323734373635.roa
Signing time:             Fri 01 May 2026 03:14:22 +0000
ROA not before:           Fri 01 May 2026 03:09:22 +0000
ROA not after:            Fri 30 Apr 2027 03:14:22 +0000
asID:                     274765
IP address blocks:        181.233.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl
                          rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:46:a6:64:2b:e9:dd:01:ec:db:29:fa:56:a9:82:e2:19:21:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB
        Validity
            Not Before: May  1 03:09:22 2026 GMT
            Not After : Apr 30 03:14:22 2027 GMT
        Subject: CN=B30E3BD8B386E8899159DE63F9CB1ADF02A80563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:7d:a9:5b:b1:ea:26:66:a9:89:3d:57:a7:
                    34:a9:ef:22:4c:48:55:96:d5:40:37:e7:21:64:ee:
                    7e:a2:93:ea:99:e4:f9:ee:a3:45:37:81:ae:62:64:
                    0b:9c:05:77:13:5b:77:17:2b:bc:63:5c:bc:ed:06:
                    1e:7b:d4:04:1f:93:00:3e:07:cd:d8:b6:d1:57:bf:
                    42:67:52:5a:32:71:82:53:6a:ea:23:f0:15:31:ff:
                    40:85:b0:36:5e:92:3c:08:b2:d2:68:40:c6:9e:92:
                    82:6f:9a:ee:b1:dc:14:91:26:20:77:89:16:2f:a4:
                    33:48:7f:2d:db:16:a5:bb:8d:9d:41:3c:79:c5:a7:
                    7a:63:32:54:8f:db:63:12:b4:f7:0b:ce:0a:4d:c2:
                    92:06:84:83:65:da:f1:21:ca:11:eb:78:f0:d9:e1:
                    a8:57:2b:46:71:a9:7c:cd:bf:21:ee:70:d8:c4:65:
                    1d:5c:22:c6:b9:94:4b:40:17:07:3f:77:7b:fa:34:
                    cc:42:54:11:dc:d5:9e:74:85:e2:ba:d1:92:1f:be:
                    d4:1a:e9:fd:67:cb:17:e8:12:a8:7c:2c:aa:0b:ac:
                    02:ff:10:58:f2:7b:18:93:1d:2c:22:4b:4c:31:ff:
                    45:af:ee:ba:7a:9b:11:4a:71:5b:4f:b3:36:86:aa:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:3B:D8:B3:86:E8:89:91:59:DE:63:F9:CB:1A:DF:02:A8:05:63
            X509v3 Authority Key Identifier:
                keyid:B0:2C:7E:4B:AD:2C:4D:04:ED:A1:3A:A1:D8:68:43:22:2B:03:1C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B02C7E4BAD2C4D04EDA13AA1D86843222B031CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8grffuSVE2z9P7q7vmPoZpu88Cud4ZgFZFnDiF85NPJN/0/3138312e3233332e39332e302f32342d3234203d3e20323734373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:69:98:16:f0:03:7e:d2:69:a3:2d:52:e5:5e:31:ea:64:
         76:ea:96:72:a1:39:3e:20:cc:b8:ee:4f:79:05:5b:5d:04:6f:
         ed:3a:55:ba:fb:c2:bb:f1:f3:bb:c7:4b:da:76:df:db:b6:b1:
         6c:aa:05:0b:af:12:db:99:8e:42:60:08:68:80:1d:38:58:8b:
         b3:27:3b:08:74:30:63:f2:61:7c:49:21:00:9c:25:b6:80:62:
         c3:f2:96:2f:ae:8f:c1:b1:33:46:1f:af:5c:06:99:58:d9:85:
         36:ee:01:01:8b:ef:ee:21:08:af:59:bb:56:63:6c:d9:4f:77:
         94:ab:39:55:6a:62:f2:f8:ae:52:db:30:00:9e:5f:e1:1c:d0:
         86:1f:81:4a:db:d1:c6:b3:b4:ac:55:af:18:91:0b:f8:34:86:
         7e:63:3d:6b:84:4c:b4:2d:a6:25:3a:81:32:0d:f4:4b:d5:cd:
         f7:95:56:b3:42:b8:0d:17:8d:e9:c6:1b:9b:c1:97:c7:f4:d3:
         ae:60:96:51:77:18:f0:74:5d:45:79:b0:57:27:13:e2:84:bc:
         74:dc:1a:50:c1:81:d6:cc:a7:f7:f2:cb:21:d0:06:93:1b:10:
         8f:32:7f:f5:ac:41:11:d5:88:5e:a4:45:19:3f:51:7f:9c:b5:
         32:ae:42:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXUamZCvp3QHs2yn6VqmC4hkho+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjAyQzdFNEJBRDJDNEQwNEVEQTEzQUExRDg2ODQzMjIy
QjAzMUNFQjAeFw0yNjA1MDEwMzA5MjJaFw0yNzA0MzAwMzE0MjJaMDMxMTAvBgNV
BAMTKEIzMEUzQkQ4QjM4NkU4ODk5MTU5REU2M0Y5Q0IxQURGMDJBODA1NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86X2pW7HqJmapiT1XpzSp7yJM
SFWW1UA35yFk7n6ik+qZ5Pnuo0U3ga5iZAucBXcTW3cXK7xjXLztBh571AQfkwA+
B83YttFXv0JnUloycYJTauoj8BUx/0CFsDZekjwIstJoQMaekoJvmu6x3BSRJiB3
iRYvpDNIfy3bFqW7jZ1BPHnFp3pjMlSP22MStPcLzgpNwpIGhINl2vEhyhHrePDZ
4ahXK0ZxqXzNvyHucNjEZR1cIsa5lEtAFwc/d3v6NMxCVBHc1Z50heK60ZIfvtQa
6f1nyxfoEqh8LKoLrAL/EFjyexiTHSwiS0wx/0Wv7rp6mxFKcVtPszaGqhDbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsw472LOG6ImRWd5j+csa3wKoBWMwHwYDVR0j
BBgwFoAUsCx+S60sTQTtoTqh2GhDIisDHOswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGdyZmZ1U1ZFMno5UDdxN3ZtUG9acHU4OEN1ZDRaZ0ZaRm5EaUY4NU5Q
Sk4vMC9CMDJDN0U0QkFEMkM0RDA0RURBMTNBQTFEODY4NDMyMjJCMDMxQ0VCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwMkM3RTRCQUQyQzREMDRF
REExM0FBMUQ4Njg0MzIyMkIwMzFDRUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhncmZmdVNWRTJ6OVA3cTd2bVBvWnB1ODhDdWQ0WmdGWkZuRGlGODVOUEpOLzAv
MzEzODMxMmUzMjMzMzMyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzQzNzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16V0wDQYJKoZIhvcNAQELBQADggEBADHtaZgW
8AN+0mmjLVLlXjHqZHbqlnKhOT4gzLjuT3kFW10Eb+06Vbr7wrvx87vHS9p239u2
sWyqBQuvEtuZjkJgCGiAHThYi7MnOwh0MGPyYXxJIQCcJbaAYsPyli+uj8GxM0Yf
r1wGmVjZhTbuAQGL7+4hCK9Zu1ZjbNlPd5SrOVVqYvL4rlLbMACeX+Ec0IYfgUrb
0caztKxVrxiRC/g0hn5jPWuETLQtpiU6gTIN9EvVzfeVVrNCuA0XjenGG5vBl8f0
065gllF3GPB0XUV5sFcnE+KEvHTcGlDBgdbMp/fyyyHQBpMbEI8yf/WsQRHViF6k
RRk/UX+ctTKuQh0=
-----END CERTIFICATE-----
Generated at Wed May 13 18:29:48 2026 by rpki-client