Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32342d3234203d3e20323731353030.roa
File:                     3138312e3233332e3137382e302f32342d3234203d3e20323731353030.roa (raw, json)
Hash identifier:          K+AHKqLffH/92M/7rMZC+Cuhq5YMHhhn5Uq0ndL7FGQ=
Subject key identifier:   6C:BA:65:0F:35:7A:27:34:40:E4:B9:2F:0A:D3:7D:2E:2C:1E:6F:BD
Certificate issuer:       /CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
Certificate serial:       16C44A7F895514B8F1C5530426627A27E6E59CC9
Authority key identifier: 72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32342d3234203d3e20323731353030.roa
Signing time:             Tue 24 Feb 2026 23:22:34 +0000
ROA not before:           Tue 24 Feb 2026 23:17:34 +0000
ROA not after:            Tue 23 Feb 2027 23:22:34 +0000
asID:                     271500
IP address blocks:        181.233.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl
                          rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c4:4a:7f:89:55:14:b8:f1:c5:53:04:26:62:7a:27:e6:e5:9c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7
        Validity
            Not Before: Feb 24 23:17:34 2026 GMT
            Not After : Feb 23 23:22:34 2027 GMT
        Subject: CN=6CBA650F357A273440E4B92F0AD37D2E2C1E6FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:d2:b5:c4:2d:eb:e3:c5:64:8c:45:90:25:
                    0d:94:1b:53:0a:b5:b8:ad:6b:f6:43:f5:cc:7b:21:
                    18:0e:42:45:04:2a:82:bb:c8:c5:32:d7:88:40:d3:
                    13:01:6b:9b:37:1c:68:15:e4:91:59:93:3d:49:9e:
                    2d:61:74:fa:6a:c8:00:58:3a:d6:2c:33:9d:58:9e:
                    2d:b5:6f:55:7c:5a:c0:88:a2:29:d3:ca:19:2c:b0:
                    29:21:da:3b:b1:c0:5b:b2:d0:db:a0:0e:1b:6a:90:
                    30:3a:5b:bc:12:ad:5b:ac:fa:72:3a:d8:a1:7f:c6:
                    93:ce:47:a4:e6:ae:c5:c8:1c:28:6a:0c:cf:b3:82:
                    b6:72:97:b1:a5:c0:d0:fb:9f:ca:f5:30:d3:ed:ad:
                    19:5f:80:0d:ca:77:85:6d:72:5c:0c:da:44:10:59:
                    42:98:d6:61:0c:79:79:75:1e:3b:d3:a6:2e:3c:ff:
                    7c:18:ec:d2:c1:ba:f2:95:45:08:3d:70:b2:bf:d3:
                    9b:dc:da:ff:5f:cc:d9:48:83:e7:e4:2e:3d:29:e5:
                    e8:76:33:c8:b8:f6:95:cd:7e:bf:68:dc:68:19:cd:
                    73:ec:c6:4f:9a:47:83:c3:c5:b3:43:ee:14:29:a6:
                    73:fb:85:8c:fb:44:dd:f8:cb:13:81:10:22:6d:06:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:65:0F:35:7A:27:34:40:E4:B9:2F:0A:D3:7D:2E:2C:1E:6F:BD
            X509v3 Authority Key Identifier:
                keyid:72:50:E2:7A:73:2B:D8:2B:F0:BE:AE:DA:E0:F0:9A:FC:45:29:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7250E27A732BD82BF0BEAEDAE0F09AFC45292EA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtA8ky2nh8ptasrUnkpiMAAz1K6dwyM2f6z7s6WxwJL6/0/3138312e3233332e3137382e302f32342d3234203d3e20323731353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:38:42:69:16:e0:ae:35:ce:68:40:2c:57:8d:41:5e:e3:20:
         d7:40:a8:01:69:46:a0:fc:57:18:cc:2c:41:9d:49:34:2a:d5:
         36:d9:69:9e:e6:21:81:32:9e:c7:cc:a0:ac:2d:6d:5f:b5:34:
         64:e8:1b:65:85:11:fa:1a:ad:d2:e5:6f:1b:1d:a8:aa:f4:6f:
         6c:4f:e9:ab:e0:6c:36:1d:97:ff:d8:bd:57:10:73:59:02:97:
         e7:e5:95:74:42:43:7a:90:c2:3f:5b:a5:84:d5:dc:3b:28:b2:
         c8:b1:bd:27:c8:1b:7f:d9:14:8f:8c:f8:3b:3a:cb:17:60:55:
         87:1d:b5:a6:e0:52:73:a3:33:5a:3a:44:8f:18:e0:bb:58:c1:
         96:6d:d9:7d:df:cc:f3:50:df:8c:9b:4d:fb:e1:e7:c9:11:b7:
         a5:30:4b:bc:fc:f1:f4:4d:0d:0f:05:e3:cc:ff:f5:a7:3c:25:
         65:96:18:e3:22:9f:9f:84:75:61:ff:7f:a9:78:59:1c:d6:3e:
         5f:39:1e:68:fc:a1:79:01:dd:81:32:4c:f4:45:dd:d2:a0:a4:
         15:5e:04:5f:61:7d:17:77:d0:a0:19:49:35:fa:b5:4f:db:bd:
         c2:87:1b:89:2f:09:b0:51:3d:e3:a5:ac:ac:44:d0:9f:c7:fc:
         dc:a5:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:18:38 2026 by rpki-client