Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232352e302f32342d3234203d3e20323634313230.roa
File:                     3138312e3233322e3232352e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          GKS/wiNT0gkujM5HuhS0Vqk4LLF8L6L4GqiPcVuGFDk=
Subject key identifier:   9A:B2:AE:41:D5:A5:A2:38:FA:04:63:BF:24:D9:0D:FB:D0:1A:DD:80
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       4CE068E60309FA9D5B2E757C7DF7487215843943
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232352e302f32342d3234203d3e20323634313230.roa
Signing time:             Mon 02 Mar 2026 15:39:17 +0000
ROA not before:           Mon 02 Mar 2026 15:34:17 +0000
ROA not after:            Mon 01 Mar 2027 15:39:17 +0000
asID:                     264120
IP address blocks:        181.232.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 17:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:68:e6:03:09:fa:9d:5b:2e:75:7c:7d:f7:48:72:15:84:39:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Mar  2 15:34:17 2026 GMT
            Not After : Mar  1 15:39:17 2027 GMT
        Subject: CN=9AB2AE41D5A5A238FA0463BF24D90DFBD01ADD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:46:5c:a0:0e:54:88:63:f1:e9:38:59:a1:
                    1a:fe:44:6c:84:1d:8b:ac:9a:d0:eb:7a:22:e2:04:
                    ef:d2:8a:ca:27:ed:84:ef:07:42:7e:ff:70:57:98:
                    5c:e7:d6:7e:5e:1a:15:91:ae:6d:b1:04:07:81:88:
                    7b:a0:b2:19:ec:e4:54:3b:ff:0b:6b:7e:50:d0:3b:
                    bd:8f:62:59:05:6c:dd:de:e2:38:65:c1:a0:fa:47:
                    05:41:f2:df:db:4d:77:4f:a2:60:93:44:51:bc:ce:
                    0b:e2:63:d5:a5:27:16:40:e6:0f:df:01:73:30:50:
                    22:fb:bc:34:6d:c1:f6:4b:5e:b1:7d:79:f3:e6:ea:
                    c0:22:66:02:9e:6e:6f:35:ba:d8:26:fd:d4:05:00:
                    ec:c0:73:11:6c:69:2c:d5:8d:65:6a:e8:c9:6c:bd:
                    0a:bb:aa:0c:e7:cb:07:9b:a1:e4:e5:ec:63:e6:f5:
                    ca:e1:fe:9a:97:9e:47:56:4d:29:5e:cf:cd:b9:6e:
                    09:a0:68:66:ee:ad:73:b1:3c:07:a4:ca:62:c0:c2:
                    cb:8b:0a:9a:c0:49:28:a4:8f:eb:1f:72:98:73:5b:
                    0a:af:af:06:6b:e7:cb:bc:78:59:57:24:e9:b4:66:
                    c8:36:a6:3b:99:48:31:3a:34:52:85:ee:06:6c:cd:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B2:AE:41:D5:A5:A2:38:FA:04:63:BF:24:D9:0D:FB:D0:1A:DD:80
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3138312e3233322e3232352e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:93:81:b0:75:bf:5b:a7:27:e5:1e:33:59:c1:55:05:ce:24:
         8a:b5:2e:d3:c1:a0:ab:49:b6:79:d3:7f:2c:0c:46:55:30:fe:
         fd:7f:cf:cc:f1:8d:38:f7:c3:53:73:62:f0:72:c8:e0:1f:12:
         b2:1a:ed:ef:8d:e9:84:87:70:d8:0f:41:05:12:4c:4b:fa:5c:
         6c:bc:22:78:a4:dd:58:4d:1a:54:bc:a8:ab:17:99:de:d7:aa:
         6e:68:0c:31:ad:df:8e:2c:66:9b:64:43:5e:78:f6:e5:50:e7:
         10:ce:2f:93:77:3c:94:a1:83:48:5b:a1:2c:b7:49:dc:7b:0a:
         4f:48:2c:0e:da:b9:1d:91:0b:4b:c2:82:55:d4:03:79:11:c5:
         01:e7:b8:8d:3a:fc:a3:63:b0:d8:c5:c0:59:1a:af:82:55:85:
         02:49:23:09:6c:78:5a:0b:b7:20:72:7a:4a:7a:cd:63:f7:6e:
         21:6c:42:41:ef:01:df:c8:f8:2f:a2:91:42:88:d4:5b:20:ae:
         f9:2a:fa:98:a0:f2:a5:92:43:d7:c8:03:10:3a:9a:26:0d:15:
         09:0b:3e:66:74:87:0f:3f:93:43:40:f1:fb:22:97:24:ba:74:
         f1:9e:b8:6f:d8:7d:6e:6b:d4:c2:53:d1:b6:18:d1:03:fe:a4:
         06:bc:0a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:33:03 2026 by rpki-client