Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa
File:                     3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa (raw, json)
Hash identifier:          bqhSwLH8IDoOw4WSabV++qqadz/xRZ0lIDbTpO498ho=
Subject key identifier:   C6:73:45:7A:6E:14:54:6A:A7:77:1E:A0:1C:AF:03:AF:74:D4:8A:64
Certificate issuer:       /CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
Certificate serial:       29527978DEB392FAFD5282FC4FBC00D196253D36
Authority key identifier: 66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa
Signing time:             Tue 19 May 2026 14:01:27 +0000
ROA not before:           Tue 19 May 2026 13:56:27 +0000
ROA not after:            Tue 18 May 2027 14:01:27 +0000
asID:                     271352
IP address blocks:        181.232.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:52:79:78:de:b3:92:fa:fd:52:82:fc:4f:bc:00:d1:96:25:3d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66CDB035108BA5CAF5AF8D476FF862F54C5DE911
        Validity
            Not Before: May 19 13:56:27 2026 GMT
            Not After : May 18 14:01:27 2027 GMT
        Subject: CN=C673457A6E14546AA7771EA01CAF03AF74D48A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:3b:59:9c:f5:33:41:bd:bf:1e:03:3c:4c:
                    98:97:36:b4:80:a8:c4:89:28:55:a9:e8:a5:fe:e1:
                    0a:0b:f9:6a:2e:e2:98:50:33:68:be:00:e3:b9:e9:
                    36:3a:be:1d:45:b2:f7:78:74:58:ce:4b:1e:be:d7:
                    82:7f:9c:59:ac:58:b5:67:a3:d0:3a:da:49:a0:47:
                    2a:87:ca:61:d7:87:59:73:21:58:0b:95:c4:fe:06:
                    e4:64:46:9a:21:77:28:05:05:75:85:ce:79:7c:18:
                    00:61:05:4c:fa:8b:bd:4c:7a:a6:9a:1e:ff:83:82:
                    1b:86:00:0f:9d:e9:da:0a:5a:1d:e5:9a:b1:60:e9:
                    65:2d:ee:35:d3:23:fa:32:3c:1c:89:82:e5:13:27:
                    3a:c2:c3:15:9e:83:d3:79:57:7f:ff:32:b5:53:ec:
                    59:7f:1f:fa:9d:68:f1:44:d6:0a:2c:a7:20:af:28:
                    19:c4:ca:48:1b:0d:f0:32:d7:b9:68:ac:f0:de:9b:
                    e8:1f:c9:80:16:79:7a:36:ca:d0:11:7e:a1:ab:e2:
                    d5:ff:ef:9d:3c:76:67:8d:77:28:bb:76:39:68:4b:
                    73:7b:1c:ae:fe:e6:45:20:56:74:e4:82:c6:8b:7f:
                    5d:5d:a6:31:be:21:2d:10:51:9e:27:73:2a:31:54:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:73:45:7A:6E:14:54:6A:A7:77:1E:A0:1C:AF:03:AF:74:D4:8A:64
            X509v3 Authority Key Identifier:
                keyid:66:CD:B0:35:10:8B:A5:CA:F5:AF:8D:47:6F:F8:62:F5:4C:5D:E9:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66CDB035108BA5CAF5AF8D476FF862F54C5DE911.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3136382e302f32322d3232203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:c0:d2:55:72:1b:20:f5:62:31:e1:11:3f:bf:59:98:3d:fc:
         6e:31:36:c3:a5:7d:22:5b:bf:3d:70:4a:ed:84:59:f0:b1:8a:
         30:5f:c4:c0:db:b8:84:28:28:5e:de:ed:a3:cf:4f:d5:57:90:
         94:a9:58:05:61:b0:e3:55:97:17:41:19:20:0e:b4:a8:eb:c8:
         11:d6:96:19:f5:56:77:d5:2d:b0:c8:1d:a5:ce:ff:25:2c:70:
         46:22:5a:a5:7a:fd:91:8e:bd:92:89:fa:69:c9:76:8f:93:5d:
         42:11:2a:4d:2c:cf:2c:fb:9f:63:7d:54:a9:f2:a6:18:8c:aa:
         a6:ce:58:0f:50:d9:1f:56:00:32:33:38:bc:fb:90:34:f7:43:
         5d:b5:79:74:83:c4:c6:ac:de:d2:67:ca:e3:67:e7:a7:ef:6a:
         2e:ed:12:b3:32:1d:cd:24:61:c7:71:31:6c:9e:fd:af:f7:eb:
         86:57:2a:39:5c:7e:71:02:a2:d0:f5:9d:67:16:db:08:1c:b9:
         15:23:b2:8f:99:6c:40:e9:6c:e6:9a:a4:6a:48:3f:10:67:16:
         32:04:c9:14:7b:a3:c7:27:93:e2:22:52:da:5a:84:cf:8d:e7:
         02:9c:fa:10:5c:04:d3:30:93:7d:45:7f:46:12:b7:30:c5:71:
         3f:3b:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:26:43 2026 by rpki-client