Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137382e302f32332d3233203d3e20323731353136.roa
File:                     3138312e3233322e3137382e302f32332d3233203d3e20323731353136.roa (raw, json)
Hash identifier:          vu+6wLlFOJ0qfG8MFOpQ2HDG9COimPbZJYZAaUEgS4c=
Subject key identifier:   72:49:8D:4B:AE:15:B4:7C:74:C0:E6:82:C1:CA:95:B7:2C:E5:EF:E5
Certificate issuer:       /CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
Certificate serial:       6578F550C75A603A2202B783A6B7D5C9F1B19806
Authority key identifier: EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137382e302f32332d3233203d3e20323731353136.roa
Signing time:             Fri 17 Jul 2026 14:02:00 +0000
ROA not before:           Fri 17 Jul 2026 13:57:00 +0000
ROA not after:            Fri 16 Jul 2027 14:02:00 +0000
asID:                     271516
IP address blocks:        181.232.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:f5:50:c7:5a:60:3a:22:02:b7:83:a6:b7:d5:c9:f1:b1:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45
        Validity
            Not Before: Jul 17 13:57:00 2026 GMT
            Not After : Jul 16 14:02:00 2027 GMT
        Subject: CN=72498D4BAE15B47C74C0E682C1CA95B72CE5EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:2d:a7:43:7d:64:e1:3d:fc:3e:27:cd:74:
                    e5:2d:f8:9c:67:fd:07:3f:8a:1e:2a:d9:e0:14:4e:
                    cf:c3:a2:f2:b2:d0:a0:0f:64:d5:46:c7:12:12:21:
                    69:93:17:e4:63:ec:df:62:a0:e5:38:be:92:ad:25:
                    16:70:2c:ea:0e:0e:b2:88:17:17:47:97:24:f7:53:
                    78:d3:c8:01:8d:61:94:07:bd:20:dd:89:fd:7b:28:
                    ac:e6:2f:21:f8:d5:1b:07:f3:1b:c7:1b:36:61:d7:
                    04:50:d1:ce:de:5b:cf:dc:53:b4:4a:14:43:ec:df:
                    65:fc:8d:97:47:bf:94:d6:99:5a:2e:a7:f3:fc:67:
                    a6:92:6e:a9:b8:bb:68:b6:2d:c6:5e:32:22:9e:57:
                    af:bc:b3:cd:85:fe:95:65:a9:d2:16:d8:fd:72:9f:
                    83:5c:ea:f9:1d:93:dc:c4:e2:11:47:5c:4c:2d:54:
                    b2:67:01:62:c5:34:1d:30:14:61:60:1c:2c:fd:bd:
                    bb:f1:80:64:8f:38:5f:fd:e9:1b:04:e5:cb:ba:f8:
                    24:42:18:05:b8:17:75:57:e9:b8:61:9d:ff:6b:3b:
                    ea:8d:3f:12:e8:c0:f4:e4:c9:7c:f2:69:dd:f1:32:
                    e3:7e:c9:97:c2:ca:dd:3d:00:7f:f8:18:57:2b:e9:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:8D:4B:AE:15:B4:7C:74:C0:E6:82:C1:CA:95:B7:2C:E5:EF:E5
            X509v3 Authority Key Identifier:
                keyid:EC:30:90:F1:DA:B0:9A:D2:B6:D2:95:F6:B0:F5:C0:F2:1E:DC:4D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3090F1DAB09AD2B6D295F6B0F5C0F21EDC4D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137382e302f32332d3233203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:34:a5:16:e1:31:21:43:93:43:06:d0:f8:65:73:eb:22:
         42:a1:ff:3d:29:33:c0:aa:7e:68:5c:50:1d:f1:0f:e7:9b:6d:
         58:c3:9e:4d:67:8a:e9:9f:75:7d:19:5c:13:19:d3:f9:41:1e:
         dc:43:99:95:62:97:b2:da:cd:31:0d:55:f8:8b:e1:11:d1:5c:
         f4:16:f3:13:40:51:22:48:ce:e1:da:6e:de:68:d0:0d:a9:e9:
         d6:ac:e9:b7:fc:28:1a:42:93:25:8d:d3:92:f4:1f:93:1f:e9:
         fc:20:33:ae:4f:e2:04:c2:af:8d:d6:c1:58:93:b7:c3:34:b3:
         f0:59:6c:78:f4:9f:21:e8:65:b7:58:7e:67:4d:8f:65:25:b6:
         73:62:10:72:fa:65:b4:b6:c1:c9:e1:12:7e:59:a6:54:d3:fa:
         a3:35:17:0e:40:b8:d2:9c:20:5c:b4:e0:49:8c:75:05:11:1f:
         2b:06:80:53:a8:96:50:8b:46:ee:96:f4:3e:c9:a3:0a:f8:69:
         c9:e7:95:b9:4e:92:1c:13:8c:7d:18:bc:58:94:32:a2:9c:49:
         aa:3f:73:d3:49:d7:a5:f6:04:82:73:95:26:e5:1c:44:87:77:
         09:06:f1:38:8b:3f:e5:3a:1b:ff:dc:51:6a:b2:be:0c:68:a9:
         86:0f:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:05:20 2026 by rpki-client