Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32342d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137362e302f32342d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          dkelYuCKKxEDIjFxMRi1QK0eJs1QpgaOrpS8a7ZN6kI=
Subject key identifier:   93:AD:B2:B2:76:9E:3F:F8:C4:9C:83:DE:92:18:31:C3:5B:C7:C5:27
Certificate issuer:       /CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
Certificate serial:       56991AF896C264D216CDC4862A2813499620E452
Authority key identifier: 72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32342d3234203d3e20323731353030.roa
Signing time:             Tue 24 Feb 2026 23:22:34 +0000
ROA not before:           Tue 24 Feb 2026 23:17:34 +0000
ROA not after:            Tue 23 Feb 2027 23:22:34 +0000
asID:                     271500
IP address blocks:        181.233.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:99:1a:f8:96:c2:64:d2:16:cd:c4:86:2a:28:13:49:96:20:e4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
        Validity
            Not Before: Feb 24 23:17:34 2026 GMT
            Not After : Feb 23 23:22:34 2027 GMT
        Subject: CN=93ADB2B2769E3FF8C49C83DE921831C35BC7C527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:51:96:e0:60:9c:78:bf:2c:8b:1a:8a:62:
                    c8:13:90:06:3e:ef:36:a9:2e:5c:39:82:6e:b0:d3:
                    93:93:52:07:25:07:73:9e:be:92:f0:4a:5e:4b:71:
                    c8:55:08:fb:c5:78:68:cd:03:9b:97:d9:94:97:51:
                    0c:09:40:f9:83:70:2d:b3:9a:de:fc:67:4d:2b:88:
                    f3:f2:e4:ec:51:b5:65:44:06:e1:87:05:e8:dd:54:
                    95:98:29:3d:a6:95:5b:6a:34:ca:4d:27:87:21:46:
                    74:b4:01:9c:9b:96:c4:14:51:82:e2:92:79:7b:94:
                    21:39:bc:07:c8:d6:28:d9:76:51:96:fc:20:13:13:
                    68:2c:e3:24:ba:f9:2e:a1:36:b1:bb:a5:0c:30:96:
                    32:35:d8:ab:21:69:54:a0:c4:7a:3c:a1:89:e8:9c:
                    8a:3c:81:68:a8:56:1c:0e:7d:72:30:ef:ee:c1:d4:
                    07:88:59:65:82:b7:1c:79:1f:67:39:b3:2b:9e:1f:
                    ce:82:a6:68:56:20:cb:87:4b:cc:cd:d4:2f:ed:86:
                    31:9d:b2:cc:e9:0a:57:ca:5d:a8:9d:db:8c:1f:9d:
                    8d:d9:31:45:29:cc:8a:c7:9b:c5:06:0c:b9:c4:79:
                    d0:77:93:e0:48:df:34:c4:ac:6b:04:56:cc:cc:c4:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:B2:B2:76:9E:3F:F8:C4:9C:83:DE:92:18:31:C3:5B:C7:C5:27
            X509v3 Authority Key Identifier:
                keyid:72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137362e302f32342d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:df:14:99:e4:ab:67:8e:6c:6e:c9:59:26:0f:28:83:ee:
         45:f3:c8:f3:2a:e7:d8:d5:84:d5:f2:60:4c:b4:b0:f7:97:ed:
         bc:9a:2b:1b:12:be:81:6e:75:d8:d0:ab:22:f4:ec:38:e3:9d:
         c3:60:53:7e:20:bd:a1:13:93:58:c1:09:4e:de:fb:d4:cf:c2:
         cd:b7:31:da:aa:7f:22:65:6d:1c:e0:d3:30:79:d0:27:ba:32:
         72:5c:f3:6a:a0:47:a0:62:15:bb:a8:52:37:d6:9c:cc:4f:ff:
         e4:21:95:1d:ff:c9:7f:9d:18:19:27:d7:62:9b:3e:83:31:cc:
         a4:f6:84:09:55:47:5a:82:92:62:c6:f9:90:a0:46:38:43:e7:
         62:47:48:d6:69:9d:37:ba:0c:58:77:05:9a:c0:d6:5b:a1:c7:
         2f:c3:ad:bc:8a:d1:d2:67:3a:b6:ff:b2:32:d5:0c:ea:09:e4:
         24:85:89:3e:4a:bd:40:9d:64:cc:02:f4:50:5e:fd:db:53:6f:
         16:0a:24:c9:d9:ee:92:95:91:bd:4f:5c:e1:5f:af:ac:0a:63:
         7e:19:46:a7:29:3f:1e:1d:6c:0a:9f:14:49:c0:36:e2:71:a7:
         3c:58:9f:36:87:9a:56:9f:dd:ef:c4:61:66:80:9e:a7:ab:83:
         7e:84:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:11:04 2026 by rpki-client