Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
File:                     3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          dYWJrOi+DUT609y4v9smYFoepGW+M7WpdJDY691zOkw=
Subject key identifier:   C5:9C:F7:F4:1F:00:30:E1:2C:AF:9C:8A:EF:51:39:67:18:00:6D:8D
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       2DBD9581E33E3697998918FB224C88BEA010E85C
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 29 Apr 2026 16:05:42 +0000
ROA not before:           Wed 29 Apr 2026 16:00:42 +0000
ROA not after:            Wed 28 Apr 2027 16:05:42 +0000
asID:                     266312
IP address blocks:        181.224.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bd:95:81:e3:3e:36:97:99:89:18:fb:22:4c:88:be:a0:10:e8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Apr 29 16:00:42 2026 GMT
            Not After : Apr 28 16:05:42 2027 GMT
        Subject: CN=C59CF7F41F0030E12CAF9C8AEF51396718006D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:ea:e0:d9:98:42:e0:49:c8:90:2c:22:08:
                    5e:46:42:cd:ee:1e:18:1a:1a:bc:70:4a:0f:29:04:
                    19:12:02:e1:70:90:05:bb:1c:6b:57:79:4e:ab:ea:
                    be:c3:66:8d:06:a9:17:ac:a3:87:2a:9a:48:71:34:
                    7a:7a:a1:c0:4d:d2:8d:73:9e:3e:c8:08:1e:2d:c2:
                    9f:e7:45:64:2a:d4:fe:76:b3:fc:9a:43:43:f5:ff:
                    f4:07:a2:74:21:81:4f:2f:a9:6d:15:54:fc:dd:78:
                    eb:56:1b:68:26:8a:97:db:8b:f9:87:39:65:0e:18:
                    78:fc:13:25:05:84:09:f0:b7:57:d1:db:f7:da:d2:
                    25:f5:17:69:99:ae:14:47:da:9a:11:99:4e:5f:75:
                    28:90:5d:90:0c:46:e2:65:bf:f9:9c:b3:cb:8a:25:
                    da:c1:e9:cc:b1:2d:fb:8a:cf:ed:49:88:b9:af:27:
                    d8:b0:15:65:80:78:db:37:d4:7b:f7:c3:6d:b4:ab:
                    db:0d:ac:24:a7:f9:df:f6:cd:82:7d:80:a4:4a:34:
                    12:a5:8d:82:a8:53:f6:37:d0:a7:1f:1f:d9:d3:3e:
                    ce:4a:a3:38:81:f3:4e:34:4d:96:85:0a:91:b0:c0:
                    d1:67:b1:83:0d:d9:4e:bc:42:85:3b:25:b8:e4:95:
                    8b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:F7:F4:1F:00:30:E1:2C:AF:9C:8A:EF:51:39:67:18:00:6D:8D
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138312e3232342e35332e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:84:a4:fd:0f:16:0a:7c:fd:1d:b8:54:80:4f:fa:c5:d6:96:
         f9:18:ac:ee:49:ca:0d:9e:0d:45:05:ed:e0:1e:24:e8:3d:c5:
         87:bf:78:2a:c0:13:f1:53:3a:bb:fa:f1:73:35:08:9e:c5:db:
         19:23:17:76:69:94:e6:d3:3a:27:31:13:83:8e:f7:d6:ac:05:
         d5:c3:5a:37:df:db:df:2a:79:37:7e:3f:f3:75:75:15:51:40:
         4b:b1:2c:4f:6c:69:6a:df:0c:67:5f:ee:bd:39:a4:41:95:75:
         d0:8f:41:6f:68:e7:83:61:37:46:66:0c:7f:43:a6:55:bf:6b:
         f0:f2:77:e7:d5:78:03:a5:93:ed:e4:45:53:a1:bc:22:07:bf:
         62:8e:43:72:59:11:a1:62:bd:e6:69:6b:95:15:a8:77:7d:48:
         2b:4b:98:0b:75:90:f3:2a:c9:71:db:19:41:91:63:8f:c1:98:
         e3:85:ac:e0:06:94:15:be:49:0d:6f:27:cb:4d:4f:9e:ae:ee:
         03:e7:f8:e6:06:1b:38:8f:40:39:87:0e:89:14:db:cf:55:f2:
         d4:5e:a8:b2:e0:a9:da:49:67:9f:71:55:8c:60:68:f1:28:15:
         91:db:3c:fa:38:19:0a:a8:3e:62:1f:01:d2:11:16:63:97:f4:
         7f:ff:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:03:15 2026 by rpki-client