Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa
File:                     3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          TcCzQ6XFOT9WILZayCXpy4lQwrnbM88ZYud0pXIx+vU=
Subject key identifier:   CB:E0:F4:7F:CE:DC:E7:20:87:D3:09:96:5F:1F:E1:91:F4:3F:58:3C
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       2BD1C65D0F66892270535A759CEB472327E2E9C0
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa
Signing time:             Fri 27 Feb 2026 02:39:11 +0000
ROA not before:           Fri 27 Feb 2026 02:34:11 +0000
ROA not after:            Fri 26 Feb 2027 02:39:11 +0000
asID:                     262875
IP address blocks:        181.233.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d1:c6:5d:0f:66:89:22:70:53:5a:75:9c:eb:47:23:27:e2:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Feb 27 02:34:11 2026 GMT
            Not After : Feb 26 02:39:11 2027 GMT
        Subject: CN=CBE0F47FCEDCE72087D309965F1FE191F43F583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:ce:1a:19:07:b5:e1:34:c8:c5:cc:e1:f8:
                    db:31:bf:e7:9a:b7:fb:f2:cb:d0:56:12:48:79:1a:
                    c1:1c:7f:84:c1:d4:28:ed:94:27:b7:8c:ef:3e:f0:
                    f2:62:03:af:36:7e:76:2e:c2:fc:ea:1b:42:ab:25:
                    49:88:d7:86:19:46:d4:e0:ef:6a:03:80:28:64:27:
                    5b:38:22:f6:26:f9:49:ba:7a:4d:07:08:de:f0:b9:
                    50:51:8e:35:fe:e5:69:86:c6:b3:7a:05:f1:ff:3a:
                    b1:5c:ee:98:cd:72:45:d8:7d:79:9e:76:e4:59:d6:
                    a6:9c:ab:f8:df:00:db:ca:ed:94:09:f7:5e:3a:3f:
                    a3:3a:56:d6:5e:b0:45:9a:3b:4a:73:d2:9f:a2:d0:
                    b8:65:1c:eb:67:e7:cc:46:52:ae:93:9e:6d:57:92:
                    5f:49:21:02:79:c6:83:83:f6:4e:15:8c:2d:ba:89:
                    58:48:bb:9d:c4:a3:71:c5:57:d2:8a:25:d0:49:1f:
                    4e:23:d2:71:4b:68:91:19:5a:94:35:27:87:f7:c1:
                    1b:ff:f2:0b:83:0b:95:d8:73:32:4d:8c:00:d7:fd:
                    0a:d5:c5:d9:4d:f5:8b:0a:ae:e8:00:00:3c:19:b4:
                    bb:e6:1b:f9:8a:fb:eb:89:fc:03:14:4b:4e:2f:96:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E0:F4:7F:CE:DC:E7:20:87:D3:09:96:5F:1F:E1:91:F4:3F:58:3C
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33332e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:be:f4:95:88:5c:a6:d4:c1:7a:88:19:1d:48:78:d5:f0:3d:
         fd:c1:03:d3:2c:50:2c:7d:59:e3:25:e4:e1:70:0c:23:11:95:
         b1:74:14:2f:d3:aa:48:c7:ab:b1:87:41:93:91:d8:38:70:cf:
         37:d2:c6:b6:6d:a6:37:38:dc:49:0c:53:61:b2:7c:1c:81:44:
         0b:94:20:e2:fe:ce:c5:73:7a:e7:27:20:00:43:e1:f3:c9:dd:
         4e:fa:1b:95:c1:b8:e2:01:4f:18:01:ef:40:3a:ff:ac:80:38:
         c8:9a:75:36:d3:44:01:df:97:0e:a4:73:42:11:26:c6:30:14:
         f8:ec:63:da:92:5f:09:f6:96:a7:0e:05:9d:2f:0f:e2:33:9b:
         91:ee:6b:66:3c:5c:80:38:6a:d0:48:f6:4c:e0:c4:c4:51:1f:
         f0:d7:e4:cd:25:c9:44:c5:06:52:28:0f:d6:b3:c6:5f:22:98:
         ee:da:3f:42:d2:8e:e7:60:e1:e6:8e:8e:2b:91:58:ae:15:a4:
         c4:90:14:f6:aa:42:7b:46:3a:c2:7f:c6:f5:54:d0:ae:66:3e:
         ca:48:4c:2d:09:5c:61:ed:57:dc:a8:86:71:9f:18:a4:d3:75:
         c5:f1:98:b1:16:e8:55:86:7a:d5:98:f8:11:d1:40:a4:14:e8:
         c9:fc:72:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK9HGXQ9miSJwU1p1nOtHIyfi6cAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFDMTI2RTIwNkQwODQzMEExM0VEQTJERkVBOUI2RjlD
NjFCQkY0MTAeFw0yNjAyMjcwMjM0MTFaFw0yNzAyMjYwMjM5MTFaMDMxMTAvBgNV
BAMTKENCRTBGNDdGQ0VEQ0U3MjA4N0QzMDk5NjVGMUZFMTkxRjQzRjU4M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFs4aGQe14TTIxczh+Nsxv+ea
t/vyy9BWEkh5GsEcf4TB1CjtlCe3jO8+8PJiA682fnYuwvzqG0KrJUmI14YZRtTg
72oDgChkJ1s4IvYm+Um6ek0HCN7wuVBRjjX+5WmGxrN6BfH/OrFc7pjNckXYfXme
duRZ1qacq/jfANvK7ZQJ9146P6M6VtZesEWaO0pz0p+i0LhlHOtn58xGUq6Tnm1X
kl9JIQJ5xoOD9k4VjC26iVhIu53Eo3HFV9KKJdBJH04j0nFLaJEZWpQ1J4f3wRv/
8guDC5XYczJNjADX/QrVxdlN9YsKrugAADwZtLvmG/mK++uJ/AMUS04vlnT/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy+D0f87c5yCH0wmWXx/hkfQ/WDwwHwYDVR0j
BBgwFoAU6sEm4gbQhDChPtot/qm2+cYbv0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDdaY3QyNW1TZml0UnBCTjJvWGhMUEc1bmp2WlRRc2tIOEwybk5Idmhh
WmUvMC9FQUMxMjZFMjA2RDA4NDMwQTEzRURBMkRGRUE5QjZGOUM2MUJCRjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQzEyNkUyMDZEMDg0MzBB
MTNFREEyREZFQTlCNkY5QzYxQkJGNDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3WmN0MjVtU2ZpdFJwQk4yb1hoTFBHNW5qdlpUUXNrSDhMMm5OSHZoYVplLzAv
MzEzODMxMmUzMjMzMzMyZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16SEwDQYJKoZIhvcNAQELBQADggEBAIm+9JWI
XKbUwXqIGR1IeNXwPf3BA9MsUCx9WeMl5OFwDCMRlbF0FC/TqkjHq7GHQZOR2Dhw
zzfSxrZtpjc43EkMU2GyfByBRAuUIOL+zsVzeucnIABD4fPJ3U76G5XBuOIBTxgB
70A6/6yAOMiadTbTRAHflw6kc0IRJsYwFPjsY9qSXwn2lqcOBZ0vD+Izm5Hua2Y8
XIA4atBI9kzgxMRRH/DX5M0lyUTFBlIoD9azxl8imO7aP0LSjudg4eaOjiuRWK4V
pMSQFPaqQntGOsJ/xvVU0K5mPspITC0JXGHtV9yohnGfGKTTdcXxmLEW6FWGetWY
+BHRQKQU6Mn8ch0=
-----END CERTIFICATE-----
Generated at Tue Mar 3 06:18:12 2026 by rpki-client