Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa
File:                     3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa (raw, json)
Hash identifier:          OXuspukn3LHEYt2f0zvE0ffGJ5vvlKSYGjC83CbJCLs=
Subject key identifier:   1A:A3:92:AD:C9:78:FF:83:C6:73:48:DA:3B:98:4A:D4:75:D6:F8:95
Certificate issuer:       /CN=BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D
Certificate serial:       0EC88888B9F866C4423DCC20665B241FC43F63CA
Authority key identifier: BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa
Signing time:             Wed 22 Jul 2026 15:32:29 +0000
ROA not before:           Wed 22 Jul 2026 15:27:29 +0000
ROA not after:            Wed 21 Jul 2027 15:32:29 +0000
asID:                     271468
IP address blocks:        181.224.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.crl
                          rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:88:88:b9:f8:66:c4:42:3d:cc:20:66:5b:24:1f:c4:3f:63:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D
        Validity
            Not Before: Jul 22 15:27:29 2026 GMT
            Not After : Jul 21 15:32:29 2027 GMT
        Subject: CN=1AA392ADC978FF83C67348DA3B984AD475D6F895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:90:48:04:72:16:66:52:61:2e:67:d3:94:
                    9c:c3:a0:c7:3a:8d:ff:73:65:8b:05:3a:a7:72:d2:
                    49:8a:6b:9c:67:26:5e:0e:b9:8c:40:b3:4e:7f:1b:
                    75:33:f7:e7:a4:db:cf:6e:b2:bb:31:b3:d5:3a:ee:
                    21:70:75:9f:7b:2a:df:a0:b9:2d:2e:db:c7:26:a2:
                    69:fe:28:63:0a:c6:1d:d4:5e:be:0a:76:b1:d2:e5:
                    5f:2a:b8:29:df:e5:c7:89:fd:26:b4:02:1b:f8:fb:
                    68:5a:5c:06:ed:74:9f:a8:58:93:b2:35:de:cb:b2:
                    54:53:90:4c:9c:fb:6d:56:b5:c5:73:ee:ee:5f:d3:
                    e6:09:48:11:5b:5d:54:f2:6d:1e:85:54:ce:de:c9:
                    06:36:75:e2:08:64:ca:33:63:2f:e4:6b:a2:11:7d:
                    4d:7d:3e:ac:a9:b9:68:56:b9:00:9f:aa:23:e6:04:
                    03:68:31:e8:66:f4:e0:2c:42:3a:60:c7:c3:d3:62:
                    78:e1:7a:17:5f:73:a7:90:9d:a9:91:8c:bd:26:f8:
                    74:41:33:45:3c:08:0a:9e:dc:92:7e:6f:cb:54:61:
                    46:d8:39:71:3d:e9:b0:58:7b:fb:7d:17:eb:85:61:
                    d3:fb:11:3b:89:19:49:f5:4a:47:76:d4:05:76:be:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A3:92:AD:C9:78:FF:83:C6:73:48:DA:3B:98:4A:D4:75:D6:F8:95
            X509v3 Authority Key Identifier:
                keyid:BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/3138312e3232342e31352e302f32342d3234203d3e20323731343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:e9:97:76:f5:44:0e:4d:b1:d9:bb:16:f5:96:87:7d:2e:
         1a:62:b6:f1:54:2a:0d:ac:02:d3:ca:a3:91:88:59:2c:e9:cf:
         b6:df:d4:d3:68:2a:5f:0a:85:b1:9e:b2:e6:a5:13:ce:c6:ee:
         cb:60:86:86:18:66:28:7f:52:96:42:71:f8:19:ab:6f:05:b0:
         61:c4:48:48:69:5a:d3:a4:b7:88:ac:b5:52:f4:d4:75:fc:b1:
         75:4b:94:25:8f:c0:ae:0f:93:80:8e:ac:5d:35:df:e6:45:54:
         ca:99:ee:c6:9c:0c:46:63:33:7f:76:e9:d8:7a:e7:aa:c9:dd:
         cd:bc:4a:6d:a1:21:cf:29:74:4c:eb:10:6d:ba:39:12:b1:1e:
         04:45:3e:32:b0:ac:34:16:54:be:dc:8e:f8:0a:c9:cc:32:e0:
         56:71:6c:37:89:76:90:86:23:3c:61:80:f2:09:24:9b:eb:59:
         f2:e0:81:d7:0e:1e:3f:a0:65:d9:2e:4c:65:4c:6e:14:cf:70:
         ee:d5:9b:bb:b4:3c:2c:b6:d7:89:c2:23:6a:a4:6c:18:52:e4:
         26:74:85:7a:df:ce:69:59:df:92:f8:64:69:f1:38:04:91:34:
         2f:d0:6f:84:8d:be:52:c2:bf:49:95:02:6b:72:4b:6e:98:53:
         1e:7c:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:39:43 2026 by rpki-client