Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          xHGQgrNUzj6BGeBFGP9U6p5l5sz9MO7FBjmO7yPG9YU=
Subject key identifier:   1C:5F:7D:F6:20:B4:8C:A8:25:AF:A9:01:CD:2D:61:FB:94:46:DD:D1
Certificate issuer:       /CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Certificate serial:       1F0A91D082FC95B0BDB6CD3A3A52189DD4239137
Authority key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa
Signing time:             Mon 16 Mar 2026 19:10:40 +0000
ROA not before:           Mon 16 Mar 2026 19:05:40 +0000
ROA not after:            Mon 15 Mar 2027 19:10:40 +0000
asID:                     265181
IP address blocks:        170.233.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0a:91:d0:82:fc:95:b0:bd:b6:cd:3a:3a:52:18:9d:d4:23:91:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
        Validity
            Not Before: Mar 16 19:05:40 2026 GMT
            Not After : Mar 15 19:10:40 2027 GMT
        Subject: CN=1C5F7DF620B48CA825AFA901CD2D61FB9446DDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:02:92:09:f8:bc:42:a3:65:71:25:da:c5:
                    05:13:de:da:85:10:1b:0f:34:b6:50:37:be:c2:1d:
                    27:eb:26:25:dc:af:21:64:19:b0:5b:8f:9d:91:27:
                    17:c1:cc:72:41:51:2e:33:89:4e:db:e1:47:0a:0a:
                    5d:f4:f9:53:56:7e:8f:6c:40:50:43:f7:5f:a2:b1:
                    13:fc:56:12:c4:ee:a9:d4:16:e4:36:41:2a:91:e5:
                    96:34:e1:df:5e:5d:2c:5a:b1:c9:3b:2d:45:8e:c3:
                    f4:e1:cf:2a:1a:61:f4:71:61:1a:64:e8:ae:ac:70:
                    8f:8b:01:e7:7d:7c:d0:c4:dc:dd:23:c5:e0:d3:27:
                    96:dd:3d:7c:e7:1e:dd:50:f6:18:1a:d7:18:15:06:
                    e5:ac:41:41:a8:e3:90:37:96:2e:5a:a0:f1:1b:69:
                    1b:48:4c:47:02:81:55:c7:52:38:56:94:29:ed:fb:
                    31:ee:ec:ae:ed:8a:bb:f2:32:bd:2f:19:ef:92:fb:
                    61:44:c4:c0:86:e3:ec:0f:ff:85:2b:28:d3:59:84:
                    6d:f5:af:f4:ca:54:e4:4a:e3:d0:a6:2f:c6:44:fd:
                    c1:95:00:01:26:ad:1b:9f:7e:88:c2:ff:88:a9:0a:
                    09:74:62:34:72:fb:fd:ca:c7:18:fb:47:00:ae:19:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5F:7D:F6:20:B4:8C:A8:25:AF:A9:01:CD:2D:61:FB:94:46:DD:D1
            X509v3 Authority Key Identifier:
                keyid:D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3137302e3233332e33382e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:74:7a:d1:13:fc:69:c2:43:9f:ce:fb:e5:f7:90:11:8a:5b:
         3f:cd:52:7e:8b:ae:a9:1f:87:f3:99:e6:7d:cf:bd:14:ae:60:
         8b:e0:e1:89:db:8c:dc:59:88:ff:f4:ee:64:e8:e0:4a:45:0d:
         cb:76:bb:b8:eb:f9:43:fc:12:41:09:91:af:a8:c3:f4:8c:57:
         aa:01:57:41:c3:30:60:2c:6b:15:90:0a:b4:49:d0:0f:0a:f0:
         8c:28:ed:9a:14:b3:84:f5:7e:ec:80:8d:b1:b9:8a:7f:92:9a:
         bd:7b:07:8c:e6:62:30:10:12:0d:90:02:78:bf:62:4d:2c:af:
         29:17:a6:54:ac:a6:b5:82:1f:b6:0c:b5:3c:56:72:c4:03:c8:
         f0:48:f4:b2:e4:5d:82:8a:b0:ea:ba:74:26:b2:9a:7f:6d:d5:
         e6:fc:aa:18:ac:64:fd:e6:b7:57:d9:63:bd:43:af:c6:d3:6f:
         6b:b0:33:89:89:a3:b2:5c:5f:79:a3:87:b4:31:b6:a3:68:a5:
         76:dd:74:9c:dc:8f:15:03:be:52:4c:4f:28:70:8f:2f:d5:8e:
         4d:da:1c:67:61:ab:a8:7f:74:14:dc:59:78:47:f4:00:7b:69:
         49:5f:9c:a6:1c:db:ec:7f:6d:21:99:eb:1c:36:15:b0:fe:42:
         d6:a3:74:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:06 2026 by rpki-client