Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231362e302f32342d3234203d3e20323639363334.roa
File:                     3138312e3232342e3231362e302f32342d3234203d3e20323639363334.roa (raw, json)
Hash identifier:          kL1h+hjsHZUNhqbwvA8CIf2DA0lHoeP+7VyBvUlK1yM=
Subject key identifier:   A8:E9:99:93:06:54:D9:05:EF:FD:1C:FB:EE:22:2B:79:56:DC:B2:85
Certificate issuer:       /CN=50C2292B12049D6ACB2039DB2D8BD765B7EE5F50
Certificate serial:       040E22E07AFC31A6C398893D8516D19BA8F33520
Authority key identifier: 50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231362e302f32342d3234203d3e20323639363334.roa
Signing time:             Fri 28 Aug 2026 19:13:29 +0000
ROA not before:           Fri 28 Aug 2026 19:08:29 +0000
ROA not after:            Fri 27 Aug 2027 19:13:29 +0000
asID:                     269634
IP address blocks:        181.224.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.crl
                          rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0e:22:e0:7a:fc:31:a6:c3:98:89:3d:85:16:d1:9b:a8:f3:35:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50C2292B12049D6ACB2039DB2D8BD765B7EE5F50
        Validity
            Not Before: Aug 28 19:08:29 2026 GMT
            Not After : Aug 27 19:13:29 2027 GMT
        Subject: CN=A8E999930654D905EFFD1CFBEE222B7956DCB285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1e:22:ff:0e:68:54:1f:85:0f:67:72:7e:48:
                    d5:a0:4e:5d:02:ed:cf:b6:f9:13:a2:a2:4b:b0:9f:
                    c1:be:6f:cd:e5:4b:13:c8:bf:4b:c5:4c:dd:f8:36:
                    2a:cb:1f:d2:4c:7f:49:d0:9f:a3:d0:d4:ac:b4:89:
                    21:83:cf:80:b9:3a:dc:15:80:1d:d5:64:62:51:48:
                    93:52:24:6e:79:7f:5c:ce:1b:88:69:c0:0b:c0:80:
                    c6:74:9e:30:bd:2f:a0:ff:35:13:5e:aa:b1:0a:56:
                    72:1a:2e:f4:ac:70:ea:73:87:2e:8b:c4:4e:cd:e5:
                    5b:22:93:28:20:ff:d6:dd:be:1e:d1:34:8e:90:2a:
                    e7:34:0c:e1:3f:bd:f5:38:ba:bf:c8:7e:be:3d:f3:
                    0a:a0:4b:23:23:bb:ce:8b:6c:ad:a8:5c:f8:f7:8f:
                    80:36:de:7b:6a:9c:50:68:e7:9a:4b:5a:5f:94:2f:
                    a8:9d:b2:78:87:64:45:f2:a8:bd:2f:fd:3a:c8:46:
                    00:0d:fe:52:a2:f7:3c:24:da:8e:24:b9:8b:92:60:
                    3d:b0:37:d9:8a:ef:a8:e5:5f:90:38:2b:7d:95:35:
                    94:c7:1f:67:1f:cd:62:14:df:ef:e8:05:aa:8c:53:
                    34:cc:8d:c5:7e:b3:da:33:16:12:3f:7f:35:7e:6d:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:99:93:06:54:D9:05:EF:FD:1C:FB:EE:22:2B:79:56:DC:B2:85
            X509v3 Authority Key Identifier:
                keyid:50:C2:29:2B:12:04:9D:6A:CB:20:39:DB:2D:8B:D7:65:B7:EE:5F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50C2292B12049D6ACB2039DB2D8BD765B7EE5F50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1z4zAvaJdyARMjeprC96Bov2gd886omcGyEcH21Z9fM/0/3138312e3232342e3231362e302f32342d3234203d3e20323639363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:cd:10:34:2e:76:1a:18:e2:0f:f8:eb:2c:d7:b3:1f:55:
         7e:25:ee:47:7e:42:8c:9a:96:1c:ab:bd:fc:69:03:e1:d3:49:
         62:7e:14:13:d3:7b:96:13:94:1a:6e:e3:63:fb:79:1a:8f:83:
         1b:95:56:59:a2:b6:05:88:f6:b5:27:75:f9:3a:04:ca:75:7c:
         e5:26:77:0e:db:42:96:8e:60:a1:e8:c6:c0:80:7a:60:f9:17:
         07:3b:26:92:7b:29:96:b2:d3:96:78:54:f2:c9:d4:0e:38:58:
         c3:df:90:ce:36:6a:1c:da:14:96:b4:db:78:67:2f:07:92:3b:
         af:f3:5e:5c:7a:10:df:0b:2a:fa:16:6d:9b:9c:27:9d:29:b2:
         55:4f:e9:68:f5:c4:31:a5:56:31:46:c1:05:b1:e2:6c:01:32:
         5e:e4:83:68:52:79:3c:c3:d3:c8:5c:51:bd:a1:1c:a4:81:ec:
         65:5f:3a:8c:36:22:25:1e:b2:e5:3c:77:c8:7b:4c:74:02:56:
         45:ce:0a:11:64:87:d1:1b:7e:b8:0d:55:8e:0d:86:a7:b0:ec:
         b9:bb:dc:89:77:cb:32:e2:e4:20:27:04:cb:19:5f:7c:06:8b:
         59:e8:2a:88:cc:0d:df:d3:13:76:3b:d6:b3:02:b7:b3:99:15:
         8b:90:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:46:12 2026 by rpki-client