Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137372e302f32342d3234203d3e20323731353136.roa
File:                     3138312e3233322e3137372e302f32342d3234203d3e20323731353136.roa (raw, json)
Hash identifier:          4e2WWbv9HgDBnZc/cw3n7mlBxS3DBjIaRpWstADRPu0=
Subject key identifier:   C3:7B:10:BC:D2:62:5F:5D:A0:FA:C0:B8:7E:4D:D9:16:FA:92:E5:2A
Certificate issuer:       /CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
Certificate serial:       6E9BDB966CA8468CD33A4909C7943783161BD908
Authority key identifier: EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137372e302f32342d3234203d3e20323731353136.roa
Signing time:             Fri 17 Jul 2026 14:02:01 +0000
ROA not before:           Fri 17 Jul 2026 13:57:01 +0000
ROA not after:            Fri 16 Jul 2027 14:02:01 +0000
asID:                     271516
IP address blocks:        181.232.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9b:db:96:6c:a8:46:8c:d3:3a:49:09:c7:94:37:83:16:1b:d9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
        Validity
            Not Before: Jul 17 13:57:01 2026 GMT
            Not After : Jul 16 14:02:01 2027 GMT
        Subject: CN=C37B10BCD2625F5DA0FAC0B87E4DD916FA92E52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:49:06:ad:71:14:4e:b6:5b:44:c0:46:ab:
                    9a:de:4d:55:77:1a:c9:69:29:21:be:d4:30:aa:01:
                    44:4f:d5:61:02:31:88:72:04:77:53:5a:9b:0a:b0:
                    bf:72:7f:b7:73:a6:f8:70:4a:22:d3:02:c4:34:90:
                    95:82:f2:81:9e:59:f1:90:a9:70:23:bf:73:ac:9a:
                    2d:0d:95:1d:b7:e7:10:d3:ef:5c:ba:64:09:a2:05:
                    1b:9d:31:0c:07:cc:06:1a:2f:23:84:72:1f:95:22:
                    41:8d:d2:90:16:ab:69:9f:8f:b8:3f:a8:1f:c2:61:
                    d7:b2:3a:f7:02:98:f6:16:66:f3:d6:50:ad:e0:d9:
                    c6:19:b6:e7:12:bb:d2:a2:8a:e4:85:e0:02:ef:5b:
                    08:0d:66:8f:b6:35:a2:dc:fb:07:7d:66:5f:32:1c:
                    69:7e:9b:82:c9:e6:4b:9b:c8:b1:43:e9:cb:b9:c7:
                    c6:1d:e3:6d:73:33:cb:80:22:d8:94:4d:f9:e7:d9:
                    a1:87:2c:9a:81:7e:0b:74:91:ca:95:4b:62:da:9f:
                    47:a6:02:44:3c:6d:ac:be:e9:50:08:2d:1a:2d:d1:
                    0a:88:3a:bc:89:3b:66:58:c3:9f:a2:05:2e:51:28:
                    b0:dd:4b:2a:14:3f:8b:ca:23:c6:9d:4e:43:27:56:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7B:10:BC:D2:62:5F:5D:A0:FA:C0:B8:7E:4D:D9:16:FA:92:E5:2A
            X509v3 Authority Key Identifier:
                keyid:EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137372e302f32342d3234203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9f:e9:1f:d5:81:e6:d1:d3:63:19:95:00:0f:f9:a8:25:12:
         6c:b3:47:71:25:74:32:c5:ca:17:09:06:2f:83:57:37:97:c9:
         1f:8b:bc:d6:0e:1d:83:8f:7b:3d:4d:e9:a2:cd:93:a7:ae:fc:
         0a:be:3a:e4:3b:1b:9b:e7:9a:4a:32:21:8f:5b:de:5b:36:fb:
         83:54:0b:77:86:0a:43:12:83:ad:b5:2b:2e:3d:a4:50:e2:f7:
         68:5b:5a:cc:8f:ee:5b:81:aa:e8:cd:05:47:38:c5:b8:43:f6:
         e1:ce:e7:ed:a6:75:bb:42:a7:a5:41:44:2b:ed:4f:18:55:b5:
         0e:26:39:85:93:05:44:38:49:e6:19:59:5b:a8:62:03:69:24:
         e8:ac:f1:29:b5:5d:cd:9a:a7:dd:64:fe:93:3b:9b:b6:80:41:
         d3:d5:74:04:5e:b6:07:44:ed:43:93:ba:b7:18:b1:f9:5a:24:
         f7:eb:96:ac:d6:f6:42:47:d2:c3:58:b1:16:99:14:bd:ff:84:
         a4:4a:7b:f3:9f:59:0b:6f:c8:3c:86:d6:cc:a8:09:ad:33:bc:
         8c:ce:4c:05:65:1a:3b:ff:aa:36:51:05:fa:13:88:8b:58:48:
         d4:a1:7d:f5:39:d8:55:d5:1f:6d:2b:9c:84:a1:4b:7b:df:f9:
         9a:ff:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:59:56 2026 by rpki-client