Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3332203d3e20323731333535.roa
File:                     3138312e3233322e3133362e302f32322d3332203d3e20323731333535.roa (raw, json)
Hash identifier:          iwidnrG2KEnIq3PWIlPLlGi8f1/ddilTwPHNOU3fOV8=
Subject key identifier:   4A:8C:F5:B9:25:A5:15:49:72:45:57:D4:E8:B4:85:92:CC:6F:4E:0A
Certificate issuer:       /CN=44FF02D14A3E5B4D48A49890BDF5F2617E82D713
Certificate serial:       102E2360F25EB63817DC8BA35A1268A94CAA50B7
Authority key identifier: 44:FF:02:D1:4A:3E:5B:4D:48:A4:98:90:BD:F5:F2:61:7E:82:D7:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3332203d3e20323731333535.roa
Signing time:             Tue 28 Jul 2026 12:47:13 +0000
ROA not before:           Tue 28 Jul 2026 12:42:13 +0000
ROA not after:            Tue 27 Jul 2027 12:47:13 +0000
asID:                     271355
IP address blocks:        181.232.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.crl
                          rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 13:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2e:23:60:f2:5e:b6:38:17:dc:8b:a3:5a:12:68:a9:4c:aa:50:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44FF02D14A3E5B4D48A49890BDF5F2617E82D713
        Validity
            Not Before: Jul 28 12:42:13 2026 GMT
            Not After : Jul 27 12:47:13 2027 GMT
        Subject: CN=4A8CF5B925A51549724557D4E8B48592CC6F4E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:a1:d1:69:4d:2b:cd:30:b5:fd:28:c4:62:
                    d1:af:d9:25:ec:72:d3:10:d4:f7:eb:a7:96:16:69:
                    88:7d:39:ec:b9:91:95:41:c8:5e:03:b2:75:fc:b1:
                    ce:8c:7d:8b:30:49:d8:ef:83:05:20:b8:12:f4:40:
                    5e:fd:b1:05:72:a8:7a:6a:79:30:a3:ff:90:53:3f:
                    a2:b5:4c:5f:e0:de:f9:b5:6c:d2:1a:b7:76:e4:4a:
                    e9:73:01:0c:9b:a4:ed:57:94:d6:25:c2:4e:10:83:
                    2d:b1:f2:f0:87:76:65:f4:a7:c5:39:4d:db:b8:cd:
                    ec:14:28:52:c6:6d:5a:8a:d2:8b:fb:9d:54:ef:39:
                    72:37:b4:32:be:51:61:cb:e0:46:e5:1d:9f:60:3d:
                    dd:8f:4c:b3:47:e6:d0:ae:3a:86:29:a2:3c:ac:19:
                    d3:cf:88:d8:2e:91:fb:06:6e:52:0e:7a:22:ea:69:
                    76:2b:a4:1b:b7:66:6f:aa:e8:2e:47:b0:0d:23:7f:
                    4a:9a:96:93:66:e5:74:08:15:32:ad:a7:c7:1c:5b:
                    b8:b1:88:99:de:96:a3:f8:f7:f1:36:5c:07:1d:31:
                    0b:15:ab:ff:ae:9b:33:7e:f0:79:e2:62:f3:ca:4b:
                    34:09:be:e6:94:5c:ba:ba:2c:1e:91:98:49:05:0f:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8C:F5:B9:25:A5:15:49:72:45:57:D4:E8:B4:85:92:CC:6F:4E:0A
            X509v3 Authority Key Identifier:
                keyid:44:FF:02:D1:4A:3E:5B:4D:48:A4:98:90:BD:F5:F2:61:7E:82:D7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44FF02D14A3E5B4D48A49890BDF5F2617E82D713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32322d3332203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:51:57:21:43:30:06:3a:46:4e:fd:ba:02:2a:5e:1d:f8:5b:
         3f:61:18:e2:98:a6:fe:3c:f5:11:d6:7c:ea:85:6b:1e:de:f1:
         a5:ee:4c:e0:2a:35:29:60:65:17:8a:db:23:33:4e:ea:5d:6e:
         a9:e4:69:f5:4a:d2:af:01:5c:8d:4b:f1:18:be:ce:1c:08:52:
         f2:70:af:c2:24:6b:1c:d0:c7:c5:5b:2e:10:39:50:db:1f:d1:
         29:1b:c0:4c:7c:03:8f:68:7a:a7:a0:d1:d2:97:b5:7b:be:d3:
         7a:d9:c9:75:dc:e9:87:2a:0f:4c:ac:6c:98:fa:e2:34:4c:3d:
         4b:db:cd:ea:6e:c3:df:c3:cf:02:62:8a:0e:be:58:b4:77:cb:
         d4:6f:62:5d:e5:34:ab:fa:9c:c9:d0:4f:45:ae:2f:aa:a5:c4:
         ba:04:29:6e:e6:3d:4e:9a:8d:b1:66:84:4f:c0:f4:c1:2f:1f:
         a8:2e:44:9e:ba:fd:6a:17:5a:37:bc:4c:44:c0:89:cb:d2:e2:
         4a:af:9f:4d:49:b3:a3:1d:ee:79:61:86:aa:98:c5:ac:dd:9c:
         33:e4:28:e9:4e:b7:cf:df:cf:3b:b9:56:98:64:1c:b8:a8:75:
         bd:2a:8e:1b:6c:5b:55:d7:8d:42:aa:bd:5d:07:5a:ec:53:d9:
         1e:ae:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:54 2026 by rpki-client