Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3332203d3e20323637343439.roa
File:                     3138312e3139312e3232382e302f32322d3332203d3e20323637343439.roa (raw, json)
Hash identifier:          H8QjmD6kOp8Wye7+hai8fZVNX/KyVVVHWMmY6/vwGqk=
Subject key identifier:   D9:A4:BB:3B:92:D4:A6:A2:FF:EE:4B:F5:FD:99:CE:66:8E:6B:CA:47
Certificate issuer:       /CN=73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D
Certificate serial:       06765F914748821EDDB960C02A7B679ED9AC4F74
Authority key identifier: 73:E6:92:B6:D2:C4:B4:C4:E4:5C:9E:CC:BD:AD:DE:3F:8E:F0:B0:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3332203d3e20323637343439.roa
Signing time:             Mon 27 Apr 2026 18:13:35 +0000
ROA not before:           Mon 27 Apr 2026 18:08:35 +0000
ROA not after:            Mon 26 Apr 2027 18:13:35 +0000
asID:                     267449
IP address blocks:        181.191.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.crl
                          rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:5f:91:47:48:82:1e:dd:b9:60:c0:2a:7b:67:9e:d9:ac:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D
        Validity
            Not Before: Apr 27 18:08:35 2026 GMT
            Not After : Apr 26 18:13:35 2027 GMT
        Subject: CN=D9A4BB3B92D4A6A2FFEE4BF5FD99CE668E6BCA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:b8:37:3d:0a:0e:cb:6b:ab:90:77:f3:c2:
                    dd:3b:f7:82:22:76:f3:97:7d:d2:9d:f0:45:6b:8b:
                    cc:ee:89:89:63:bf:eb:36:2b:22:9b:62:87:e5:5a:
                    9d:31:64:20:b8:fb:6a:23:56:3c:bd:65:52:f2:2c:
                    e8:b4:95:ae:ae:62:de:af:86:07:16:44:53:02:8e:
                    d8:1e:03:e2:ca:55:ec:ec:95:df:98:6f:5c:05:ce:
                    c2:10:8e:40:94:60:20:f7:49:42:f9:75:92:61:6c:
                    9b:52:fb:66:db:86:90:3d:01:a1:b9:fd:73:11:a3:
                    61:fa:e4:03:06:0c:fb:38:cd:5b:12:8d:1b:6d:08:
                    d4:eb:cc:0a:3e:30:4b:1d:33:b3:fc:61:d1:17:da:
                    f1:5a:91:05:13:76:5a:62:c8:2d:85:07:4d:ec:50:
                    64:41:38:3d:98:4a:55:73:be:c8:6d:7c:88:41:e2:
                    cf:45:3a:af:8b:a3:49:f6:35:32:ee:05:85:77:e0:
                    80:10:bc:54:c0:8b:aa:b3:98:52:ee:51:b9:04:a2:
                    cb:a7:32:db:01:1d:47:c7:98:d2:12:05:4b:d9:8b:
                    32:39:e1:5e:46:55:3a:47:88:2b:1e:87:de:ef:12:
                    f1:ee:a3:8a:7c:a2:84:8b:15:89:34:12:76:e0:fd:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A4:BB:3B:92:D4:A6:A2:FF:EE:4B:F5:FD:99:CE:66:8E:6B:CA:47
            X509v3 Authority Key Identifier:
                keyid:73:E6:92:B6:D2:C4:B4:C4:E4:5C:9E:CC:BD:AD:DE:3F:8E:F0:B0:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73E692B6D2C4B4C4E45C9ECCBDADDE3F8EF0B02D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZ2CJc4GcT7Qkbb7XAuXmDKWjwmmFdwq2PMoWxfGsTfR/0/3138312e3139312e3232382e302f32322d3332203d3e20323637343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:06:4c:5c:70:44:40:96:9c:8e:73:04:96:98:ab:29:e9:34:
         d6:15:c9:89:9b:9b:3c:cb:af:3c:47:50:75:58:74:5a:29:a3:
         4f:99:27:19:76:51:88:5d:53:57:a7:3d:9c:0d:3b:6c:56:54:
         3b:c7:9d:ef:d9:66:7f:b5:7c:75:a7:e8:52:30:6b:e8:74:4c:
         a9:f1:0e:8f:82:74:0a:59:2b:c3:e1:62:06:0b:68:63:c8:bb:
         bf:9e:bf:90:b5:da:47:c6:14:3a:bf:26:d1:70:73:b9:e5:61:
         fe:fe:ad:96:2c:05:03:9f:32:8a:87:c0:28:fa:52:84:58:98:
         97:f0:7a:d7:8e:34:1b:f7:4b:d2:38:cc:42:38:f6:7e:b6:7c:
         3f:ea:58:66:8f:24:34:07:29:cc:03:14:bb:fc:1d:e3:3d:7f:
         df:5c:26:01:61:be:72:a6:d0:ad:7d:d6:e7:32:2a:c9:27:38:
         3a:94:3b:32:4d:f9:2c:5a:a3:aa:ac:26:8f:3f:87:0b:5c:0c:
         9a:e3:a0:c1:27:b4:56:5b:24:be:f9:72:77:15:f9:ea:3c:60:
         f6:48:23:6b:06:6f:e6:6c:2e:0e:a5:f4:9e:27:3a:03:a3:64:
         7b:dd:7f:87:cd:7a:60:4d:5d:34:13:ad:0e:d0:40:a5:78:71:
         3d:9a:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:35 2026 by rpki-client