Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa
File:                     3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          jDULttkEFXnzlIEigWl3pCi4YeoTDQF5JO6EtaPEEKg=
Subject key identifier:   62:10:1F:79:C8:1D:52:E0:3A:0C:06:F7:4B:85:DB:F1:E7:69:CE:D4
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       57A714053B07A90B00BCFC26FEB2DF20A59F6FCC
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:39:04 +0000
ROA not before:           Mon 02 Mar 2026 15:34:04 +0000
ROA not after:            Mon 01 Mar 2027 15:39:04 +0000
asID:                     264120
IP address blocks:        181.232.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a7:14:05:3b:07:a9:0b:00:bc:fc:26:fe:b2:df:20:a5:9f:6f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:34:04 2026 GMT
            Not After : Mar  1 15:39:04 2027 GMT
        Subject: CN=62101F79C81D52E03A0C06F74B85DBF1E769CED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:b9:1d:70:fe:76:12:cc:c4:09:22:96:48:
                    9a:59:02:dc:5c:e6:c7:e7:21:f5:87:e3:5c:3e:54:
                    b4:5f:f1:bc:64:2a:07:0b:a5:16:0d:6e:8f:51:96:
                    49:75:0f:58:fb:9d:b7:d4:2f:f6:ca:b3:bc:96:e0:
                    05:46:fd:47:42:17:0e:4f:8c:02:1f:8c:ba:1d:ea:
                    a2:51:2c:02:24:55:bf:3c:88:8a:ba:bb:2a:0a:c0:
                    1e:16:85:52:b8:30:21:fa:7d:d1:77:f1:a9:ed:55:
                    35:c0:c2:4e:e5:db:97:5a:4a:67:eb:d1:77:db:b8:
                    23:bc:3e:9e:32:a4:76:24:1b:5d:c7:1c:d1:62:e1:
                    b6:c7:ef:bf:c8:78:f8:1e:0c:7b:80:77:8a:74:b4:
                    e8:04:b2:35:66:97:4f:35:2c:10:bc:70:45:01:ab:
                    92:2e:40:5a:18:53:f0:8d:5e:73:1c:e8:30:03:97:
                    2e:04:b7:46:8c:cd:90:2c:e0:a4:5a:84:ed:68:14:
                    7e:b5:a5:fd:39:ac:56:79:92:dd:7c:11:ce:1e:46:
                    09:de:05:5a:11:67:b7:97:17:46:af:85:df:2c:9a:
                    c8:b0:e6:60:28:9d:67:d6:44:dc:10:60:fc:6b:0a:
                    64:3e:b0:00:2d:c4:5e:46:c9:01:ec:b8:b2:3e:17:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:10:1F:79:C8:1D:52:E0:3A:0C:06:F7:4B:85:DB:F1:E7:69:CE:D4
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232342e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:5a:ce:d9:f4:ee:14:6e:e7:75:92:b2:7b:15:2c:38:c2:
         13:e0:21:82:65:f8:15:6b:69:0e:53:78:72:d9:19:12:18:3c:
         50:3f:9f:27:5b:0b:27:84:79:fa:e5:04:35:97:15:11:70:e6:
         aa:76:49:de:8c:61:07:e6:01:c0:2f:b1:88:dc:48:01:22:b7:
         8a:27:ac:9e:32:62:dd:65:b8:aa:e5:da:a2:78:9e:6b:9a:00:
         cc:2f:29:b5:35:ee:b6:f9:cc:fb:a8:e2:9b:ad:62:b1:06:f3:
         0f:74:0e:88:97:2c:01:0a:41:09:61:b2:53:fa:75:15:f9:4d:
         4e:d8:2a:84:6c:3f:1a:38:1a:62:b0:6f:d5:9c:6b:43:34:97:
         5b:6c:30:7c:bd:66:6c:4e:85:b8:9b:c1:36:86:7c:59:e0:41:
         65:d0:b5:f7:f2:66:45:5d:6c:e7:c2:d0:23:f9:53:f8:3f:c5:
         ac:0e:41:47:bf:47:53:18:71:61:92:2a:ef:5a:2e:a2:3e:4a:
         63:01:9c:25:b2:55:61:76:de:a7:ce:d7:20:40:d5:7a:2b:f6:
         86:4d:bb:9c:b9:d1:3d:af:ce:3d:cf:8e:b1:c4:fb:fb:31:66:
         eb:5f:93:59:85:2b:cc:62:70:89:d0:82:13:41:e5:12:e8:96:
         43:fc:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:34:33 2026 by rpki-client