Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33352e302f32342d3234203d3e20323632383735.roa
File:                     3138312e3233332e33352e302f32342d3234203d3e20323632383735.roa (raw, json)
Hash identifier:          /WjKrLcjVseZQpbbwjbS0WH31CWhxp3lNdH7SdLH2+Y=
Subject key identifier:   D3:92:49:D9:05:5C:83:33:21:61:E2:B0:5D:B8:E8:62:7D:79:FD:A2
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       51F49FD8744CA3C1569DBAF6CB0E7274C75A7649
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33352e302f32342d3234203d3e20323632383735.roa
Signing time:             Fri 27 Feb 2026 02:39:11 +0000
ROA not before:           Fri 27 Feb 2026 02:34:11 +0000
ROA not after:            Fri 26 Feb 2027 02:39:11 +0000
asID:                     262875
IP address blocks:        181.233.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f4:9f:d8:74:4c:a3:c1:56:9d:ba:f6:cb:0e:72:74:c7:5a:76:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Feb 27 02:34:11 2026 GMT
            Not After : Feb 26 02:39:11 2027 GMT
        Subject: CN=D39249D9055C83332161E2B05DB8E8627D79FDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:89:92:9e:0d:cc:82:58:0f:5f:fd:67:b4:
                    00:89:11:6a:6b:ca:ff:8a:58:cb:06:f3:1d:ac:f0:
                    da:60:f3:b0:9a:29:c7:ec:1e:19:04:56:83:46:de:
                    cd:ba:b3:40:5a:3a:57:84:e4:4a:2e:f8:88:22:9b:
                    f6:4f:df:cd:5b:03:c1:4c:2c:66:04:cd:29:24:c6:
                    70:30:b1:60:cf:d6:00:22:33:7f:b2:5e:8b:d7:f8:
                    c4:48:28:fc:18:39:c6:cf:d4:25:69:fe:d4:74:8b:
                    1c:9e:cb:40:49:8d:9f:9e:21:93:b2:73:85:9b:a7:
                    29:2b:3c:45:c1:16:c1:1f:0f:ad:05:19:a4:80:93:
                    63:83:f7:5a:c5:c6:8e:19:2b:41:46:19:ff:03:a0:
                    5c:6a:ea:64:1f:71:43:a5:a3:3c:55:fe:96:fe:19:
                    12:c2:e6:17:51:7b:11:db:83:47:54:64:de:13:81:
                    af:5d:79:8a:a9:43:24:d5:67:83:4a:e6:88:5b:04:
                    77:ea:4a:21:a5:08:03:64:73:52:03:4d:24:f1:3c:
                    41:ca:77:15:6a:e5:79:cc:0a:7a:54:39:0e:27:ab:
                    1e:fa:b6:a8:7d:e4:9c:f9:18:05:22:8e:6e:1d:13:
                    46:1b:58:60:6a:31:4f:7b:ae:f1:4b:c2:70:c5:7d:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:92:49:D9:05:5C:83:33:21:61:E2:B0:5D:B8:E8:62:7D:79:FD:A2
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/3138312e3233332e33352e302f32342d3234203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:25:73:b8:99:a0:fb:90:d2:17:dc:87:ef:bd:1d:5d:4c:
         62:5f:12:ea:7b:46:35:7a:b0:ea:ca:c7:c5:76:4a:c6:1f:24:
         ff:f9:09:90:9a:08:b6:f0:48:c1:30:92:0d:5a:4b:11:29:ba:
         0a:d4:0d:97:e1:90:66:90:35:1c:98:72:cf:b5:e6:37:76:f2:
         51:de:e0:80:11:0a:b0:69:e2:7e:3b:d6:58:dd:14:58:90:5f:
         c7:65:03:30:37:8b:12:99:11:ea:bc:aa:b1:2a:c5:cd:7e:cc:
         37:d1:aa:43:7b:a6:18:7e:af:a1:77:d1:3f:47:7f:f7:57:7e:
         4e:81:71:84:12:6c:6a:d8:8e:78:ef:0b:34:6a:2b:4b:2d:06:
         e2:ca:77:57:51:8b:96:98:d4:06:13:c7:3b:01:4e:5e:ab:4c:
         fe:67:94:49:d7:32:f9:e6:c5:8b:d8:9d:1f:fd:9b:fe:2c:3d:
         48:d2:55:1c:1b:ca:32:7a:a8:b8:d9:1f:96:a4:80:45:b2:de:
         b2:95:fc:58:7e:7c:3e:45:7c:d4:85:57:59:db:75:b8:b9:c6:
         85:1a:df:b2:85:66:e7:28:9f:94:88:55:3b:41:5d:f1:e0:0f:
         87:8b:16:f9:e0:6d:9f:ea:dc:71:3f:b0:73:32:4f:43:e5:3a:
         02:d4:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:17:11 2026 by rpki-client