Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3138312e3233332e3137322e302f32322d3234203d3e203532393734.roa
File:                     3138312e3233332e3137322e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          IwGCJAbqNhXx+m+FXjDrxDmTKNtcfaDAynTFS4C9ZwI=
Subject key identifier:   75:F4:58:ED:B4:8D:7C:F3:D1:74:75:56:8D:34:7D:AC:F7:ED:CB:5B
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       631B5C0E53943CF489718D16C29A514590C093BD
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3138312e3233332e3137322e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:51:55 +0000
ROA not before:           Mon 13 Apr 2026 13:46:55 +0000
ROA not after:            Mon 12 Apr 2027 13:51:55 +0000
asID:                     52974
IP address blocks:        181.233.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1b:5c:0e:53:94:3c:f4:89:71:8d:16:c2:9a:51:45:90:c0:93:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:46:55 2026 GMT
            Not After : Apr 12 13:51:55 2027 GMT
        Subject: CN=75F458EDB48D7CF3D17475568D347DACF7EDCB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:0f:b7:db:1b:77:8e:91:da:19:c7:ef:75:
                    5b:c2:4d:18:3c:13:4a:d9:e6:d4:8b:b1:6d:08:00:
                    52:47:15:e1:56:f1:ba:f9:7e:c6:e6:0b:2f:2f:3a:
                    93:e9:ec:4b:6a:91:fd:34:90:25:8a:30:f3:3d:95:
                    c4:75:8f:ee:a8:ab:34:26:aa:e4:e1:46:1f:99:1a:
                    4b:70:86:fa:ab:20:6c:a9:11:59:fd:61:46:9b:56:
                    94:95:67:be:12:d3:7a:cd:8a:d7:d5:df:58:68:c6:
                    8c:23:06:0e:f4:e6:73:4a:ea:29:4d:db:ec:43:4c:
                    5a:0d:e4:3a:86:6c:e0:7f:85:a8:6a:d0:8b:c6:d3:
                    b9:f1:41:09:3e:ac:bd:38:cc:4d:e4:f5:4a:10:cc:
                    52:36:cc:ae:c4:92:b2:8c:dd:70:14:a6:c1:0f:84:
                    9c:ee:8b:42:17:c2:9d:4e:ed:bf:f3:f8:63:34:79:
                    79:22:05:c0:96:37:95:40:ec:65:3d:c4:89:ad:08:
                    85:16:73:12:a4:31:12:8f:ef:18:62:24:45:61:92:
                    67:ba:78:bb:de:dd:00:77:69:54:65:66:be:82:70:
                    56:4b:70:74:b1:ad:f3:3b:a3:de:9a:a8:c4:f8:c6:
                    d0:e2:3d:ed:e2:30:60:52:00:45:3a:16:d1:94:b0:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:58:ED:B4:8D:7C:F3:D1:74:75:56:8D:34:7D:AC:F7:ED:CB:5B
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3138312e3233332e3137322e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:3f:4b:ae:39:e5:e4:a9:81:2e:e6:63:15:04:56:c6:cd:
         22:08:86:47:2f:08:67:b9:8c:9b:c0:11:5f:19:65:f5:ff:93:
         54:37:df:c2:95:ee:3e:bd:ba:37:51:cc:3b:d2:3c:fe:d6:cb:
         57:2a:58:28:1a:1c:70:04:c6:47:3e:c9:07:a5:a4:24:c7:06:
         ad:8e:47:2c:77:11:20:54:c5:32:5c:f0:85:d8:3d:c7:2c:f7:
         43:07:84:f2:47:3f:36:12:a6:49:a0:e8:bf:84:49:be:77:e2:
         af:1c:7d:78:2c:da:54:fc:37:03:01:17:fe:2a:d3:4f:47:1d:
         2f:69:d9:a3:09:7f:5a:c8:f9:f8:9d:a1:89:3c:2d:80:bc:e0:
         51:3a:ce:6e:bd:2e:3a:73:88:0e:bd:d1:7e:09:2c:8b:bf:4c:
         43:74:6f:3b:35:c9:1f:4c:3a:d1:83:3d:53:4f:42:5a:d8:c6:
         cc:ff:38:04:6b:b5:7c:64:8e:81:95:98:ab:b9:a4:f0:32:4d:
         f4:20:25:79:54:f4:08:76:3b:41:5a:73:32:3b:3e:5e:c0:c2:
         61:79:5a:ac:a8:23:0a:67:ba:99:0e:70:e8:e3:28:51:6e:40:
         74:6c:cc:b8:4b:69:6f:3f:dc:1d:43:27:a7:94:14:1b:7e:db:
         67:67:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:03:20 2026 by rpki-client