Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa
File:                     3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa (raw, json)
Hash identifier:          xUQHiOGjGgXag6Okvc+LlNtlx/rN0wE4bW4lcGXjf8A=
Subject key identifier:   58:1F:5D:31:93:94:C7:EA:D6:85:89:38:B6:DE:9F:6F:E2:82:00:24
Certificate issuer:       /CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
Certificate serial:       362D427474A912F578F5EC98674C1DEA01F40DE4
Authority key identifier: F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa
Signing time:             Wed 01 Jul 2026 18:32:29 +0000
ROA not before:           Wed 01 Jul 2026 18:27:29 +0000
ROA not after:            Wed 30 Jun 2027 18:32:29 +0000
asID:                     271496
IP address blocks:        181.224.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.crl
                          rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2d:42:74:74:a9:12:f5:78:f5:ec:98:67:4c:1d:ea:01:f4:0d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C375D471B4D722362E4ABDD82A797ED63216FF
        Validity
            Not Before: Jul  1 18:27:29 2026 GMT
            Not After : Jun 30 18:32:29 2027 GMT
        Subject: CN=581F5D319394C7EAD6858938B6DE9F6FE2820024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:24:bf:9d:75:d8:09:ef:e3:af:a8:4a:73:
                    ca:9a:e8:62:3f:bf:a3:47:9d:f4:29:a7:e0:aa:b7:
                    cc:42:7b:1f:a8:4a:be:23:e4:0d:2f:84:42:bd:ed:
                    9e:62:fe:3f:ed:b9:b5:3b:cb:0e:ba:8f:ee:0a:b0:
                    d1:5a:3a:b2:a7:78:2a:61:e9:2f:b9:e7:44:f6:56:
                    d0:7d:82:8c:fd:fc:f3:68:77:9c:ee:a1:d9:d7:bb:
                    fd:41:c9:0a:30:44:71:5d:1a:14:18:80:75:c1:e6:
                    8d:bc:2f:a0:b9:04:48:fa:0a:11:23:78:cd:61:e1:
                    65:1c:f7:b9:9c:86:6b:67:08:90:d6:eb:8f:3d:80:
                    46:5a:81:5b:47:ec:fa:ee:2c:9a:04:7e:af:02:21:
                    1e:7c:14:53:91:de:6e:9c:06:81:84:34:c2:d5:39:
                    23:2f:5a:d6:79:23:58:7a:da:26:70:fc:94:b0:90:
                    ce:5e:fe:1f:a6:41:46:f8:cf:b2:4f:bb:77:19:13:
                    51:f6:e4:f5:81:f9:ca:36:71:2b:0c:f0:d6:d6:03:
                    8a:a3:fd:2a:ef:db:5c:f7:9f:74:96:97:68:c0:03:
                    83:29:08:d2:00:13:95:e5:0b:18:dc:e3:a2:d7:4d:
                    65:17:8c:f8:67:3c:99:e4:02:32:6b:3d:bb:7e:28:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:5D:31:93:94:C7:EA:D6:85:89:38:B6:DE:9F:6F:E2:82:00:24
            X509v3 Authority Key Identifier:
                keyid:F1:C3:75:D4:71:B4:D7:22:36:2E:4A:BD:D8:2A:79:7E:D6:32:16:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/F1C375D471B4D722362E4ABDD82A797ED63216FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1C375D471B4D722362E4ABDD82A797ED63216FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwK6yuAwj6aH5TncBsDaJSJtMqbT3DMvNGwCfJRBsnQc/0/3138312e3232342e35302e302f32342d3234203d3e20323731343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:ea:f6:43:1e:76:74:7b:6b:fd:c0:bd:c4:cf:02:80:ab:
         8d:ea:0e:e8:42:4a:2a:c8:57:5a:bf:07:6d:bd:3f:f1:a0:53:
         17:13:97:db:0c:d3:00:8e:c1:04:7a:2f:74:8b:35:39:8f:e0:
         79:e2:52:ca:2b:54:32:74:39:be:83:f6:91:e3:a3:da:8c:6d:
         21:a8:57:99:f9:b6:42:68:03:9d:86:57:d7:38:5a:d0:47:88:
         02:86:37:fb:b1:16:4e:e9:fc:67:34:6e:ec:91:f2:1d:a8:3e:
         ff:d6:68:50:70:cd:a5:7e:fb:35:30:61:d8:55:4d:dd:80:0e:
         be:b7:8f:2b:c9:27:7a:ad:ca:eb:f1:22:fe:b1:37:ba:b5:8e:
         3a:ce:b5:f5:2d:67:d9:85:e2:f4:9a:ee:c2:fa:c8:97:3d:de:
         ea:51:41:11:a1:1b:f8:a8:20:a8:9b:21:f0:c2:15:81:b6:d1:
         18:da:ba:1b:cf:c0:97:69:01:97:8f:6a:68:ad:2a:4b:b6:05:
         75:c2:c3:ed:e4:5c:22:be:3d:b0:1b:5c:32:e5:85:8c:5f:93:
         f0:93:b7:3c:5e:80:30:02:ff:f0:90:b9:dd:d9:8b:ba:d2:08:
         e9:1e:df:94:bc:f4:30:f3:ed:24:6a:ea:da:81:64:9c:47:0e:
         84:67:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:41:54 2026 by rpki-client