Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32342d3234203d3e20323731333532.roa
File:                     3138312e3233322e3137302e302f32342d3234203d3e20323731333532.roa (raw, json)
Hash identifier:          IjIotue92vy8u8Y36+TwixmGImot85ECB33DvYn1kAw=
Subject key identifier:   B8:43:EC:70:EF:06:09:60:CE:8C:70:EE:25:80:A3:90:96:5A:2B:CE
Certificate issuer:       /CN=604CC86F51D78DE8F32943D7FAA159451D63781F
Certificate serial:       5BD5BEA6862B33B60BB770809D2A60AFCAD4BF50
Authority key identifier: 60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32342d3234203d3e20323731333532.roa
Signing time:             Wed 08 Jul 2026 21:09:00 +0000
ROA not before:           Wed 08 Jul 2026 21:04:00 +0000
ROA not after:            Wed 07 Jul 2027 21:09:00 +0000
asID:                     271352
IP address blocks:        181.232.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d5:be:a6:86:2b:33:b6:0b:b7:70:80:9d:2a:60:af:ca:d4:bf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604CC86F51D78DE8F32943D7FAA159451D63781F
        Validity
            Not Before: Jul  8 21:04:00 2026 GMT
            Not After : Jul  7 21:09:00 2027 GMT
        Subject: CN=B843EC70EF060960CE8C70EE2580A390965A2BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:ba:a7:dc:83:1b:1c:b3:44:1c:1e:74:10:
                    1b:af:21:7f:8d:db:ae:57:31:5a:08:49:96:24:9c:
                    cf:9c:61:03:9f:74:94:77:e8:7d:b5:2c:8a:bb:70:
                    2f:1e:d2:91:d3:0c:c1:3a:8f:3c:65:ed:43:3e:b4:
                    42:1c:fb:e2:e8:7f:33:92:7f:49:b2:18:da:f0:fc:
                    bb:b4:5a:a7:9f:7a:5a:5e:51:8a:ae:2c:37:f1:dd:
                    32:90:01:a2:f8:55:d7:b5:5f:59:e8:f5:26:ac:84:
                    aa:11:99:d3:1c:b9:ab:3e:3b:0a:61:7e:dd:f0:5e:
                    05:fa:b5:45:65:be:6a:99:cb:f6:5e:fb:e7:e7:ab:
                    8a:09:f6:35:87:59:d3:24:13:e6:b3:ff:8b:e4:2d:
                    47:46:69:00:a1:85:77:12:84:b4:25:88:40:f9:8b:
                    af:04:7e:a4:03:b5:07:ff:8a:a9:a2:a0:13:42:9d:
                    0b:f7:30:04:01:d1:cc:06:b8:aa:8e:fb:fe:01:17:
                    d5:6d:fd:2e:0b:9b:9e:1f:e6:83:33:86:c7:ed:59:
                    d7:29:02:62:41:f1:04:ac:01:6a:27:bf:93:93:a8:
                    33:57:3c:35:56:5c:94:66:f9:58:09:a9:6b:e5:b0:
                    69:bf:51:58:64:0b:6a:e7:e9:f6:e2:79:4c:42:9a:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:43:EC:70:EF:06:09:60:CE:8C:70:EE:25:80:A3:90:96:5A:2B:CE
            X509v3 Authority Key Identifier:
                keyid:60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137302e302f32342d3234203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:b7:92:99:bb:b3:04:b9:47:97:bf:e9:ba:0a:38:5e:19:
         1f:6a:7f:92:ae:89:fd:2a:ca:05:87:dc:3b:b2:49:cf:45:1d:
         bf:7d:8c:ab:37:5c:d5:d4:1b:10:ec:0b:55:4f:04:7c:39:2e:
         cd:f0:e2:12:ea:36:17:a6:24:c0:41:25:9f:d4:f1:96:ef:0e:
         c1:a0:e9:e1:d3:c8:02:dc:d4:33:fb:56:71:f1:47:e7:83:48:
         57:5a:03:74:d9:c6:15:a3:1d:51:34:f9:50:b3:64:01:a9:2a:
         6e:f4:3c:e8:f3:e7:85:f9:63:25:27:f1:d4:f8:8e:ad:28:b6:
         e3:0b:e0:af:ee:0f:6b:c3:7b:b4:f1:11:31:dd:f4:18:be:27:
         76:63:d4:f5:3a:4d:59:a1:3d:ed:94:eb:c1:c3:42:2b:9c:5f:
         f8:3d:56:4e:eb:0b:d1:6c:64:a5:d7:df:dc:13:59:d0:dc:7b:
         10:8a:f0:e5:1c:b6:63:b6:c2:28:08:e5:4d:f6:ab:2d:0b:6d:
         3c:9a:98:4d:14:26:fe:b6:d7:44:f7:17:45:52:7c:21:d7:00:
         14:10:fa:1e:e9:80:1d:d6:46:af:b4:aa:ae:51:16:81:bd:79:
         1d:5c:51:00:26:00:5b:56:49:88:7b:b0:8d:de:6f:79:b6:57:
         76:09:58:62
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW9W+poYrM7YLt3CAnSpgr8rUv1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA0Q0M4NkY1MUQ3OERFOEYzMjk0M0Q3RkFBMTU5NDUx
RDYzNzgxRjAeFw0yNjA3MDgyMTA0MDBaFw0yNzA3MDcyMTA5MDBaMDMxMTAvBgNV
BAMTKEI4NDNFQzcwRUYwNjA5NjBDRThDNzBFRTI1ODBBMzkwOTY1QTJCQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVrqn3IMbHLNEHB50EBuvIX+N
265XMVoISZYknM+cYQOfdJR36H21LIq7cC8e0pHTDME6jzxl7UM+tEIc++LofzOS
f0myGNrw/Lu0WqefelpeUYquLDfx3TKQAaL4Vde1X1no9SashKoRmdMcuas+Owph
ft3wXgX6tUVlvmqZy/Ze++fnq4oJ9jWHWdMkE+az/4vkLUdGaQChhXcShLQliED5
i68EfqQDtQf/iqmioBNCnQv3MAQB0cwGuKqO+/4BF9Vt/S4Lm54f5oMzhsftWdcp
AmJB8QSsAWonv5OTqDNXPDVWXJRm+VgJqWvlsGm/UVhkC2rn6fbieUxCmnaXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuEPscO8GCWDOjHDuJYCjkJZaK84wHwYDVR0j
BBgwFoAUYEzIb1HXjejzKUPX+qFZRR1jeB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlJWakxSR1pYVllQMUJoMlJwZmt5OEF6TFp4TlNScGtOYWR4OFhrZW1X
RUovMC82MDRDQzg2RjUxRDc4REU4RjMyOTQzRDdGQUExNTk0NTFENjM3ODFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNENDODZGNTFENzhERThG
MzI5NDNEN0ZBQTE1OTQ1MUQ2Mzc4MUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJSVmpMUkdaWFZZUDFCaDJScGZreThBekxaeE5TUnBrTmFkeDhYa2VtV0VKLzAv
MzEzODMxMmUzMjMzMzIyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALXoqjANBgkqhkiG9w0BAQsFAAOCAQEApz63
kpm7swS5R5e/6boKOF4ZH2p/kq6J/SrKBYfcO7JJz0Udv32Mqzdc1dQbEOwLVU8E
fDkuzfDiEuo2F6YkwEEln9Txlu8OwaDp4dPIAtzUM/tWcfFH54NIV1oDdNnGFaMd
UTT5ULNkAakqbvQ86PPnhfljJSfx1PiOrSi24wvgr+4Pa8N7tPERMd30GL4ndmPU
9TpNWaE97ZTrwcNCK5xf+D1WTusL0Wxkpdff3BNZ0Nx7EIrw5Ry2Y7bCKAjlTfar
LQttPJqYTRQm/rbXRPcXRVJ8IdcAFBD6HumAHdZGr7SqrlEWgb15HVxRACYAW1ZJ
iHuwjd5vebZXdglYYg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 23:55:48 2026 by rpki-client