Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          bzpm5ujwsEP1NUT3Qskpvg24W6UlSat6Z7M22vp/oec=
Subject key identifier:   1B:17:5C:6F:26:75:E8:96:A6:4E:49:20:3D:A7:43:64:81:52:FA:13
Certificate issuer:       /CN=BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D
Certificate serial:       7F59A86AE05B4E3212B941D97A6AD3F1DFF42456
Authority key identifier: BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa
Signing time:             Wed 22 Jul 2026 15:32:28 +0000
ROA not before:           Wed 22 Jul 2026 15:27:28 +0000
ROA not after:            Wed 21 Jul 2027 15:32:28 +0000
asID:                     271468
IP address blocks:        181.224.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:a8:6a:e0:5b:4e:32:12:b9:41:d9:7a:6a:d3:f1:df:f4:24:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D
        Validity
            Not Before: Jul 22 15:27:28 2026 GMT
            Not After : Jul 21 15:32:28 2027 GMT
        Subject: CN=1B175C6F2675E896A64E49203DA743648152FA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:78:0e:da:6d:f3:8e:3e:4c:07:ec:82:95:
                    04:5a:b1:2b:8f:aa:8d:67:9c:10:43:09:f6:cb:1d:
                    02:22:8c:44:17:91:9b:7c:be:d5:db:46:5b:c8:96:
                    0d:8a:1b:f5:d9:c9:e8:b7:b6:5e:92:23:a4:cc:d6:
                    c4:96:07:b7:b3:2c:fb:40:98:25:3d:1a:67:fd:8c:
                    d0:19:db:13:80:be:00:68:39:ba:23:34:11:b4:a2:
                    1a:51:8b:74:79:9e:ab:91:14:0d:ce:de:70:e6:7e:
                    4c:8b:93:58:ea:30:ab:83:cd:bb:ac:34:8d:65:2f:
                    b8:83:c1:b8:41:0f:9b:c0:71:96:14:d8:e9:47:30:
                    e8:bd:f6:4d:37:52:61:42:d2:3e:16:51:c4:37:93:
                    96:6c:a0:ef:cc:dc:e4:2b:a9:3f:77:7d:20:73:a6:
                    ac:f1:1b:8c:b4:e8:d1:67:97:81:60:cd:0e:5f:6b:
                    17:3f:90:20:5c:38:fb:89:a5:80:30:5a:2b:87:35:
                    3a:15:fc:5c:cb:d3:28:c2:8e:18:09:3b:b0:68:20:
                    74:4d:dd:05:12:df:17:03:02:5d:2e:a5:6e:69:c6:
                    e3:9b:68:47:2f:9e:ae:87:9d:61:76:86:8c:15:48:
                    9b:a8:1a:31:3f:32:42:2e:af:ed:56:6e:83:ed:9d:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:5C:6F:26:75:E8:96:A6:4E:49:20:3D:A7:43:64:81:52:FA:13
            X509v3 Authority Key Identifier:
                keyid:BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31342e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3f:e2:aa:76:5a:d2:b6:71:96:3d:ac:7c:aa:76:b8:be:90:
         4b:dd:ae:89:09:17:fd:85:c1:67:f8:a7:ba:a3:54:6a:a0:af:
         7f:79:a7:6a:12:9a:08:d2:75:98:91:b7:00:69:2c:b9:25:3c:
         75:e6:65:2a:92:bf:e4:58:32:a7:58:64:97:e3:16:4b:e6:aa:
         be:a5:11:b5:3d:5d:f7:94:ae:4e:a4:b4:63:49:40:bf:18:1f:
         09:38:c2:33:33:87:23:d7:c7:ab:7d:4c:eb:82:69:12:53:8c:
         18:5e:09:df:74:d6:63:e4:10:ad:95:42:ea:92:35:60:28:09:
         1a:73:0e:d0:12:49:1b:88:87:bc:6a:f8:df:b7:99:0a:3e:ad:
         83:a1:81:9b:33:6a:46:99:ab:53:90:ea:5b:ab:12:4b:a9:ff:
         31:b3:b3:67:ba:fe:27:93:27:d7:b5:79:a7:ce:47:77:49:21:
         5c:3e:47:cb:78:40:0b:9f:77:cf:03:56:21:69:22:fb:ef:9b:
         b0:42:02:f7:a2:72:f9:c0:52:10:71:9c:7b:8a:3b:3f:b1:80:
         b9:5d:12:a5:8c:05:2f:d0:ef:3d:e9:a5:23:37:5c:8c:4e:c4:
         bd:0c:2e:62:45:44:2e:5e:05:09:3c:c9:d0:c3:2f:27:0a:8f:
         d7:07:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:12 2026 by rpki-client