Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e312e302f32342d3234203d3e20323731343134.roa
File:                     3138312e3232342e312e302f32342d3234203d3e20323731343134.roa (raw, json)
Hash identifier:          +H+crMJaIHAUccIKVPRrkK+vpgB+M5+EV9lBWeA+b7M=
Subject key identifier:   DD:2F:00:C5:B9:81:33:28:E6:98:2D:53:43:44:6B:B5:8D:11:27:C2
Certificate issuer:       /CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
Certificate serial:       4A3D71ED9967A24F4F55E622F79901E2460C0E
Authority key identifier: D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e312e302f32342d3234203d3e20323731343134.roa
Signing time:             Thu 23 Jul 2026 18:09:53 +0000
ROA not before:           Thu 23 Jul 2026 18:04:53 +0000
ROA not after:            Thu 22 Jul 2027 18:09:53 +0000
asID:                     271414
IP address blocks:        181.224.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl
                          rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 Jul 2026 09:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:71:ed:99:67:a2:4f:4f:55:e6:22:f7:99:01:e2:46:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB
        Validity
            Not Before: Jul 23 18:04:53 2026 GMT
            Not After : Jul 22 18:09:53 2027 GMT
        Subject: CN=DD2F00C5B9813328E6982D5343446BB58D1127C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:31:69:66:cf:82:07:b5:91:a8:dd:ee:89:
                    5a:07:64:90:43:f8:4a:8b:b8:a8:5d:00:68:2c:29:
                    32:95:f6:24:78:17:bb:de:e5:61:0e:59:a4:dc:76:
                    a1:f1:46:85:8f:1a:79:26:39:2b:8c:2c:0b:b6:92:
                    89:7f:2c:cb:70:27:78:89:ae:d3:b8:8d:78:c5:39:
                    22:d9:bf:c2:fb:3c:7f:4e:b7:26:ed:fc:d6:c5:17:
                    a1:33:3b:97:07:f4:cb:5f:49:68:7d:3b:e6:b9:57:
                    26:d8:d4:05:cf:cf:a4:2b:b2:59:2e:df:aa:1a:1f:
                    6f:80:70:e2:e9:15:15:2d:6e:14:83:c0:8a:a5:b9:
                    bb:c1:45:c3:17:52:e8:7c:65:b5:e1:ed:da:e6:63:
                    42:28:86:6b:0f:9e:09:0c:d5:11:32:71:10:7d:95:
                    24:c6:eb:5a:59:ec:74:e7:c0:2f:d4:53:0b:b7:8b:
                    0d:8e:2e:0e:42:f1:86:d7:1b:0d:5e:8c:1e:e1:67:
                    76:79:9e:41:0c:73:f5:5d:64:37:ae:fd:1b:6f:73:
                    fb:f7:08:c5:f1:8c:46:d8:62:69:f1:ae:b0:3d:53:
                    53:c2:a4:cc:b4:67:23:6a:75:f4:f7:db:eb:d3:1b:
                    37:81:5c:a4:6a:6d:68:ab:6e:c2:d5:62:52:94:fc:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2F:00:C5:B9:81:33:28:E6:98:2D:53:43:44:6B:B5:8D:11:27:C2
            X509v3 Authority Key Identifier:
                keyid:D9:B8:DF:51:F2:E5:C9:66:D2:4B:11:78:F3:BB:78:C2:28:DB:1F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8DF51F2E5C966D24B1178F3BB78C228DB1FAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5i1AvrCF6JhrsCfjnMeRNmvd6VhuMKybcgsQG4UrmsXw/0/3138312e3232342e312e302f32342d3234203d3e20323731343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:de:29:65:13:40:b4:b9:d3:e7:e0:0b:4e:19:a4:1a:a9:
         f0:d4:9b:e5:f1:bc:e1:94:6b:c6:2b:90:8c:ef:96:09:76:c9:
         f5:42:f8:c5:2b:fc:5b:64:74:e5:2c:29:ae:2a:0c:54:f3:2d:
         92:9c:d2:d8:be:81:e2:3d:3d:fa:e2:b0:84:81:8a:6e:0f:e7:
         49:a9:00:16:d2:d4:90:12:23:46:f0:7b:69:f5:7e:ff:d5:c5:
         09:26:93:d1:20:8f:27:1c:c6:d6:81:c9:cf:0c:2e:53:40:c0:
         d8:8d:8d:b2:da:73:a6:c7:7c:01:86:7d:b1:5e:f7:6c:4a:38:
         5f:fa:7e:ef:c6:43:02:13:4e:e4:8b:34:23:02:68:1a:4a:50:
         f3:c8:9e:71:f7:26:f5:9d:2d:8b:99:ba:c6:d6:ce:62:cb:92:
         6c:77:ec:62:4c:6b:7a:91:9b:e4:9b:b2:f3:a8:9e:28:22:1d:
         9d:1e:46:1b:42:65:5a:66:69:8f:35:7b:84:fd:6b:e1:e9:51:
         39:d6:de:11:28:c1:fc:ee:bd:4d:9c:b1:85:cc:4f:30:43:6a:
         f6:fa:5f:88:b7:ce:91:de:6b:3b:0a:e7:9a:89:a8:b6:11:13:
         31:ca:35:70:23:5b:ea:c1:f3:1e:f3:77:c5:0d:c9:7d:25:89:
         be:e4:1a:fc
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITSj1x7Zlnok9PVeYi95kB4kYMDjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhEOUI4REY1MUYyRTVDOTY2RDI0QjExNzhGM0JCNzhDMjI4
REIxRkFCMB4XDTI2MDcyMzE4MDQ1M1oXDTI3MDcyMjE4MDk1M1owMzExMC8GA1UE
AxMoREQyRjAwQzVCOTgxMzMyOEU2OTgyRDUzNDM0NDZCQjU4RDExMjdDMjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALY+MWlmz4IHtZGo3e6JWgdkkEP4
Sou4qF0AaCwpMpX2JHgXu97lYQ5ZpNx2ofFGhY8aeSY5K4wsC7aSiX8sy3AneImu
07iNeMU5Itm/wvs8f063Ju381sUXoTM7lwf0y19JaH075rlXJtjUBc/PpCuyWS7f
qhofb4Bw4ukVFS1uFIPAiqW5u8FFwxdS6HxlteHt2uZjQiiGaw+eCQzVETJxEH2V
JMbrWlnsdOfAL9RTC7eLDY4uDkLxhtcbDV6MHuFndnmeQQxz9V1kN679G29z+/cI
xfGMRthiafGusD1TU8KkzLRnI2p19Pfb69MbN4FcpGptaKtuwtViUpT8agsCAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBTdLwDFuYEzKOaYLVNDRGu1jREnwjAfBgNVHSME
GDAWgBTZuN9R8uXJZtJLEXjzu3jCKNsfqzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby81aTFBdnJDRjZKaHJzQ2Zqbk1lUk5tdmQ2Vmh1TUt5YmNnc1FHNFVybXNY
dy8wL0Q5QjhERjUxRjJFNUM5NjZEMjRCMTE3OEYzQkI3OEMyMjhEQjFGQUIuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRDlCOERGNTFGMkU1Qzk2NkQy
NEIxMTc4RjNCQjc4QzIyOERCMUZBQi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
NWkxQXZyQ0Y2Smhyc0Nmam5NZVJObXZkNlZodU1LeWJjZ3NRRzRVcm1zWHcvMC8z
MTM4MzEyZTMyMzIzNDJlMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
NDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC14AEwDQYJKoZIhvcNAQELBQADggEBALlg3illE0C0
udPn4AtOGaQaqfDUm+XxvOGUa8YrkIzvlgl2yfVC+MUr/FtkdOUsKa4qDFTzLZKc
0ti+geI9PfrisISBim4P50mpABbS1JASI0bwe2n1fv/VxQkmk9EgjyccxtaByc8M
LlNAwNiNjbLac6bHfAGGfbFe92xKOF/6fu/GQwITTuSLNCMCaBpKUPPInnH3JvWd
LYuZusbWzmLLkmx37GJMa3qRm+SbsvOonigiHZ0eRhtCZVpmaY81e4T9a+HpUTnW
3hEowfzuvU2csYXMTzBDavb6X4i3zpHeazsK55qJqLYREzHKNXAjW+rB8x7zd8UN
yX0lib7kGvw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:09:31 2026 by rpki-client