Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa
File:                     3138312e3232342e302e302f32322d3232203d3e20323731343134.roa (raw, json)
Hash identifier:          wpORYgg8buS7elh4MtNpfpGQsgUIHW3EDQXrIYFX4Qk=
Subject key identifier:   D7:02:88:8D:B8:E2:99:E6:3D:AB:98:8D:FF:8F:F1:C3:FB:A4:82:EE
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       10187563B26DAC86ED4862A98D2BC77C1C7EFA6B
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:06:22 +0000
ROA not before:           Thu 23 Jul 2026 18:01:22 +0000
ROA not after:            Thu 22 Jul 2027 18:06:22 +0000
asID:                     271414
IP address blocks:        181.224.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:18:75:63:b2:6d:ac:86:ed:48:62:a9:8d:2b:c7:7c:1c:7e:fa:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:01:22 2026 GMT
            Not After : Jul 22 18:06:22 2027 GMT
        Subject: CN=D702888DB8E299E63DAB988DFF8FF1C3FBA482EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:0d:84:0f:7a:52:e2:8c:a9:1d:87:83:f0:
                    f2:b9:ed:dd:55:36:62:b0:dd:3f:d2:ec:16:49:b1:
                    a9:d8:ba:24:da:5b:29:14:c5:b3:96:2d:a3:ec:c7:
                    e4:e6:26:cd:63:f6:b4:f1:da:c2:b4:16:30:e7:1f:
                    1b:bb:cc:fc:53:15:a1:2c:f0:21:5f:c4:0a:db:36:
                    85:7e:5a:11:37:18:fe:c5:bb:aa:c1:71:0f:b2:6e:
                    8a:a6:54:d8:94:56:24:c3:01:ba:49:e7:80:c8:8f:
                    29:07:ae:c4:f8:f9:9b:53:5c:e5:e7:e9:15:0e:ed:
                    98:8b:3b:f0:a8:ba:16:30:a6:a9:35:15:5b:b7:a2:
                    60:63:14:24:f0:02:a4:db:d8:c2:9d:70:8d:1b:d9:
                    29:d7:da:81:67:77:0b:d0:de:5c:8b:bc:dd:b4:b3:
                    8c:58:5d:ba:1a:3a:bb:fa:cb:d3:1c:62:ce:6f:61:
                    4b:f6:e3:22:c4:07:0a:8e:3e:77:b1:2b:de:60:03:
                    e3:92:fe:7e:e0:36:aa:2a:92:c6:17:23:47:33:27:
                    8c:ac:fc:71:4d:87:05:9b:9a:0c:c4:5c:57:ca:05:
                    08:3d:90:bc:12:5b:cd:3d:e1:4b:73:59:28:48:70:
                    8d:16:09:2b:db:d6:11:44:a4:a1:54:8f:b8:06:e8:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:88:8D:B8:E2:99:E6:3D:AB:98:8D:FF:8F:F1:C3:FB:A4:82:EE
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e302e302f32322d3232203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:99:64:99:61:dd:d8:f8:7a:98:b2:97:83:63:22:ef:16:
         8e:c1:06:be:84:5b:29:cd:8f:f8:3e:76:77:cb:6c:d8:92:6e:
         88:c2:60:ae:c6:d0:7f:aa:31:79:ad:aa:5c:1d:c1:e4:43:e5:
         0b:ef:d6:c7:a8:20:16:78:fb:2e:8a:1d:bd:ef:41:8b:a5:5d:
         0e:7d:19:36:70:4e:13:02:32:a5:34:d5:36:be:78:e9:b5:bf:
         36:f0:ae:a2:6b:e9:42:dc:21:f1:67:c0:a9:57:2a:69:5c:d0:
         81:52:43:76:29:12:70:c8:20:c0:6a:a5:ef:92:fe:48:02:12:
         1b:82:07:6a:09:6f:b8:69:02:54:a5:5e:a4:54:6a:12:cc:86:
         00:ae:1d:5e:46:71:ab:79:b5:7d:f0:08:b3:5c:34:75:20:01:
         08:f9:7a:5a:17:f4:7d:56:b8:89:3f:a9:3e:45:6c:a0:48:f1:
         05:91:e9:94:ad:9c:79:44:07:8e:04:75:0b:15:e6:89:c8:43:
         d5:db:36:1d:2e:bc:87:86:18:ea:ce:62:2e:3f:38:23:be:5d:
         68:d2:e2:0e:91:1d:04:14:b7:74:81:92:65:6c:6b:60:f9:4c:
         9f:32:08:14:90:12:95:8f:6b:01:8d:88:f1:29:56:95:64:d1:
         85:d2:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:32:12 2026 by rpki-client