Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa
File:                     3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa (raw, json)
Hash identifier:          ULi4FYYWXFlCDZDpBCYZVSTISsenxy/YJAuvKwr9m8g=
Subject key identifier:   57:5C:9E:1B:A2:E7:29:F4:45:1D:EC:20:F9:6F:41:19:98:DE:C5:65
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       4EFEF44EBD30FDBB1C6BDC069FE91497C38EEA14
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa
Signing time:             Thu 05 Mar 2026 14:07:27 +0000
ROA not before:           Thu 05 Mar 2026 14:02:27 +0000
ROA not after:            Thu 04 Mar 2027 14:07:27 +0000
asID:                     270690
IP address blocks:        181.225.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 04:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fe:f4:4e:bd:30:fd:bb:1c:6b:dc:06:9f:e9:14:97:c3:8e:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Mar  5 14:02:27 2026 GMT
            Not After : Mar  4 14:07:27 2027 GMT
        Subject: CN=575C9E1BA2E729F4451DEC20F96F411998DEC565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:36:0e:20:f5:88:78:62:1e:bd:1f:88:a8:
                    84:2c:01:27:ae:4c:2e:42:04:fb:82:d8:43:50:f1:
                    5b:ba:7c:9d:e4:cf:30:8c:b1:14:20:de:07:79:a7:
                    ff:23:93:04:da:86:e1:d2:49:87:b6:d5:66:77:66:
                    26:85:bc:63:fd:0e:ed:0a:ac:6b:73:fa:2b:65:fe:
                    5e:ed:fa:39:b5:96:dd:6d:70:0f:a7:bd:65:44:9d:
                    8b:fa:4c:fe:f9:89:a9:e1:42:55:ee:79:58:e6:fb:
                    9c:e6:8f:f6:f1:d7:1e:4b:59:14:9e:eb:8f:eb:0e:
                    9b:58:75:c3:29:07:69:a1:20:5b:83:ab:0f:41:6e:
                    60:be:d8:d3:f1:f8:6a:1f:37:bd:34:b2:56:14:e8:
                    bc:3a:52:fc:fc:65:d4:51:09:3d:47:77:21:b3:44:
                    77:6d:2b:0c:79:45:a8:ec:78:9d:88:8f:bb:6d:a4:
                    48:d3:6c:c6:23:a3:ee:10:90:32:ec:9f:04:41:2d:
                    2f:db:75:f2:fd:cf:36:84:ef:3c:54:58:0e:de:da:
                    c4:c8:69:29:bc:24:0f:5e:e1:59:5f:a6:08:a3:74:
                    5d:60:67:0b:ed:0c:60:ae:56:79:5b:95:80:67:78:
                    30:d2:22:c5:ee:9a:15:76:88:d0:73:57:77:df:cd:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5C:9E:1B:A2:E7:29:F4:45:1D:EC:20:F9:6F:41:19:98:DE:C5:65
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3138312e3232352e3135362e302f32322d3232203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:ba:0e:36:17:48:6d:c6:d8:8a:ab:7f:c0:ac:a2:86:7b:
         c7:a1:00:a4:22:d4:e1:1d:2f:cc:a3:42:14:41:ab:71:8c:e2:
         ed:7a:8e:75:84:b7:45:c2:d7:8b:4c:ee:b9:ae:55:5b:e1:d8:
         9e:b2:e5:d8:50:f6:50:1d:45:f3:21:cc:07:e0:fd:c5:8c:84:
         c8:64:ee:66:ed:7e:36:75:60:32:89:8f:b0:a3:0f:c4:50:97:
         07:c0:7a:42:d7:83:6e:9a:81:1d:e9:f1:0f:56:57:1b:5c:40:
         21:83:d4:ff:8f:5e:29:31:12:32:8b:63:a6:38:3a:cd:38:ee:
         7b:8a:e4:78:6d:9a:e1:6c:94:ce:68:32:97:88:9b:ae:ec:27:
         78:a7:e0:84:47:5a:34:1a:bf:5f:1e:5d:94:36:37:ab:33:c4:
         55:44:4d:a8:c1:46:7a:d7:58:95:e2:e7:39:2b:1e:0b:80:98:
         29:38:4b:e8:7f:69:1d:aa:b3:32:b1:d6:d6:19:b8:68:f5:4c:
         0c:2d:71:73:e1:a8:16:47:54:c9:2c:4a:ae:95:6a:f0:cc:0d:
         60:85:a8:2d:7c:82:58:0b:e2:cd:35:08:98:72:f2:a3:4a:ed:
         04:8e:05:19:7f:da:ed:65:2f:b0:36:4f:64:f0:98:95:83:ef:
         3d:77:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:37:21 2026 by rpki-client