Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa
File:                     3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa (raw, json)
Hash identifier:          +mkXeaWBvETVR9EqVxiUxNimAV0s2kSfzpDbh9PMIJU=
Subject key identifier:   26:DF:9D:7E:03:E1:57:7C:FC:AB:81:4A:A5:82:B3:00:68:07:3B:8A
Certificate issuer:       /CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
Certificate serial:       7EC2242A901B5E693170FE72D7BF0AEC50DFA812
Authority key identifier: 8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa
Signing time:             Fri 01 Aug 2025 15:11:44 +0000
ROA not before:           Fri 01 Aug 2025 15:06:44 +0000
ROA not after:            Fri 31 Jul 2026 15:11:44 +0000
asID:                     271516
IP address blocks:        181.232.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl
                          rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 02:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:24:2a:90:1b:5e:69:31:70:fe:72:d7:bf:0a:ec:50:df:a8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100
        Validity
            Not Before: Aug  1 15:06:44 2025 GMT
            Not After : Jul 31 15:11:44 2026 GMT
        Subject: CN=26DF9D7E03E1577CFCAB814AA582B30068073B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:00:65:20:6f:06:b7:6f:ef:e8:78:41:17:
                    4f:7a:ce:15:7e:38:78:11:16:20:24:f8:8a:af:a9:
                    7c:a0:a3:d2:f6:2d:b0:eb:70:ff:36:68:b4:c8:9f:
                    3d:3d:66:16:26:c8:a6:f1:89:82:54:b3:8a:74:b0:
                    27:26:54:1d:88:29:a8:04:5f:a4:22:24:9e:a0:93:
                    61:4e:a9:2f:b2:70:a8:4d:35:c9:d3:ba:dd:7c:a1:
                    2c:37:73:69:88:63:b6:e0:3c:ef:dd:cc:67:8b:fb:
                    95:68:21:85:13:98:c8:eb:ea:f7:3d:7e:d5:52:99:
                    ff:8f:0c:30:2f:03:c9:a2:75:1f:ec:df:fd:ae:d0:
                    9e:ad:22:fa:d0:47:b5:89:fa:95:e6:8f:ca:b3:80:
                    77:32:62:14:2e:6e:88:85:16:dc:e3:00:aa:10:fa:
                    a1:d9:75:b7:15:cc:4f:5c:7b:33:d5:0d:1b:be:21:
                    c3:fc:3b:d4:89:1c:2c:8b:4c:11:7a:e6:7b:bd:2b:
                    05:2f:44:74:8f:7c:ca:d9:32:79:55:ca:1f:6f:2a:
                    24:9a:63:84:75:4b:2e:b8:bf:8f:2a:6e:eb:42:da:
                    d0:ec:40:ea:fb:93:a4:01:99:c0:73:21:14:62:f0:
                    4a:e3:bf:b7:94:8e:d2:0f:a5:e3:02:f6:9c:2d:15:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:9D:7E:03:E1:57:7C:FC:AB:81:4A:A5:82:B3:00:68:07:3B:8A
            X509v3 Authority Key Identifier:
                keyid:8A:F0:30:45:F9:CB:7B:61:29:FF:D8:D6:A2:4F:2E:9E:06:72:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AF03045F9CB7B6129FFD8D6A24F2E9E0672D100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kJroYPZrjBYurkB1LK8DJNMBkJ2Rht6TtnRcTxktqnb/0/3138312e3233322e3137362e302f32322d3234203d3e20323731353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:9e:3d:84:df:72:d1:f9:97:5a:de:89:06:eb:e6:e5:a2:
         99:0d:1f:53:af:65:a3:ee:19:12:7f:ea:53:87:9e:9f:26:f7:
         a5:f1:a2:5d:1a:bf:69:c6:fa:80:fc:fa:b5:2e:99:86:eb:64:
         bd:1f:d9:2c:a7:08:2b:69:8d:a6:e7:3c:cb:49:eb:6c:fe:55:
         38:10:df:d0:c6:08:25:7d:21:a2:1b:4b:a4:fd:b3:6e:78:86:
         02:36:b4:9f:57:7c:49:2f:eb:35:e4:2e:a4:fe:1e:6c:98:cf:
         3a:a4:9c:f2:03:cc:95:ca:47:23:c6:7b:7b:57:1c:36:aa:72:
         97:5c:dc:e8:d7:d4:ed:07:14:93:96:9b:6f:c8:d4:d3:9f:04:
         5a:68:3d:91:f8:fc:51:11:51:91:c8:81:4b:0f:4b:a5:19:25:
         de:fa:fa:eb:03:b2:56:57:79:c4:21:76:d6:6d:9b:4a:f9:85:
         51:2f:8d:cf:9e:d9:9e:c5:34:7a:5d:57:f2:98:67:97:52:21:
         73:d2:3b:e0:fd:5d:91:0e:f1:c5:e7:67:b6:1d:91:2e:f5:64:
         ca:b4:33:c9:b6:19:2c:7e:f3:70:78:b0:bc:93:5d:73:26:15:
         7e:84:51:7f:3c:f9:e0:7b:ee:8b:27:58:4e:ec:45:f4:1c:75:
         36:03:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:58 2025 by rpki-client