Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          K5XwW2eEL1ehbdgm6U6xbAEA2v4bY3HDnqGzdNjXNEE=
Subject key identifier:   E7:4D:1F:67:DE:92:76:44:51:05:7A:3C:BD:77:69:6D:35:3B:2C:79
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       6B77A81B6F48D78C362FEEF6A54EEF4DCA40F714
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 29 Apr 2026 16:05:45 +0000
ROA not before:           Wed 29 Apr 2026 16:00:45 +0000
ROA not after:            Wed 28 Apr 2027 16:05:45 +0000
asID:                     266312
IP address blocks:        181.224.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:77:a8:1b:6f:48:d7:8c:36:2f:ee:f6:a5:4e:ef:4d:ca:40:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Apr 29 16:00:45 2026 GMT
            Not After : Apr 28 16:05:45 2027 GMT
        Subject: CN=E74D1F67DE92764451057A3CBD77696D353B2C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:9b:8d:f3:e1:18:4b:36:48:6f:34:24:33:
                    00:19:0e:42:f1:30:45:d0:b6:fc:a2:fe:cc:4b:2e:
                    df:46:4e:af:73:50:07:b0:a1:92:a4:01:b2:d5:6a:
                    9d:da:82:58:40:00:9f:fe:47:9e:09:7f:d3:96:87:
                    a5:44:7c:ce:33:3a:ca:f9:80:e4:c2:ac:c0:6f:29:
                    77:b9:8d:e2:b3:52:23:e4:47:62:67:bb:5a:6b:bf:
                    91:8d:d9:c5:d8:16:87:e4:d1:c5:ec:9e:58:89:7e:
                    2a:52:98:0f:85:09:7c:59:b3:98:27:f1:15:d4:7c:
                    0a:5f:e1:2f:29:cd:a9:4a:f3:6d:38:0b:88:0d:e5:
                    11:2c:f1:f8:41:26:0b:06:56:b8:42:3b:e0:67:8a:
                    e2:20:33:aa:bc:ef:89:aa:6c:0e:f9:87:04:e3:48:
                    b7:95:98:9f:05:96:43:19:04:06:d0:91:d6:ac:17:
                    c8:24:c6:9a:07:f7:8f:cd:98:32:2e:a4:66:d4:dc:
                    0d:08:9d:56:b0:8e:a4:56:be:50:07:82:12:b3:04:
                    da:14:a7:eb:a6:52:c5:85:ce:71:72:35:af:aa:e8:
                    53:31:7d:58:59:72:78:76:f3:0c:73:8f:a9:69:5a:
                    96:af:d9:e7:e6:1c:02:9c:c6:0f:60:b9:db:45:1f:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:1F:67:DE:92:76:44:51:05:7A:3C:BD:77:69:6D:35:3B:2C:79
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35322e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:4c:1a:51:d3:3e:9f:12:9a:27:0e:6c:54:8f:2d:24:ae:7a:
         57:71:97:7a:37:aa:4f:8f:3f:a2:2f:d3:32:e9:84:a0:bc:68:
         0c:a6:64:14:dd:11:e7:7a:0c:c9:05:15:d8:36:5f:45:ed:0c:
         59:4f:22:d9:84:f6:3c:6f:ba:24:57:b1:52:02:d8:66:f4:1f:
         73:61:31:78:3d:74:a9:e6:61:15:2f:04:e3:10:23:9b:61:86:
         de:19:a2:44:2c:ac:b6:7c:99:a6:6e:12:8f:8a:2e:73:41:ec:
         48:e5:23:96:50:ed:c8:55:4f:0d:ae:18:81:ff:66:4f:b1:53:
         ab:61:29:7d:38:f4:ae:69:be:6f:4c:dc:29:aa:6d:b7:e7:56:
         a4:9c:b1:7f:d1:48:f1:34:49:b8:4f:db:21:04:e8:72:33:be:
         4f:08:72:76:67:e0:ab:0b:0a:72:0d:e2:71:4e:e4:da:9f:30:
         e8:69:37:0c:c3:94:1b:76:69:8f:5a:e6:77:16:3e:24:df:b9:
         72:9d:93:36:eb:ca:c5:5c:c3:c7:97:59:6a:03:40:b0:99:84:
         e3:3c:1f:ea:98:c3:14:96:ee:c6:d7:11:fc:b2:e8:53:e8:09:
         cf:63:e7:85:ec:a8:4b:e3:e1:57:61:a4:08:1c:07:a4:bb:f8:
         50:6a:6a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:25 2026 by rpki-client