Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137312e302f32342d3234203d3e20323731333532.roa
File:                     3138312e3233322e3137312e302f32342d3234203d3e20323731333532.roa (raw, json)
Hash identifier:          7LSVzo6RvjVUTuzBXOGSyoSp7OkAht1PQdNRtXZBg6g=
Subject key identifier:   81:16:97:30:2D:86:BA:9C:93:80:CB:AB:02:7D:23:EE:E2:BD:17:50
Certificate issuer:       /CN=604CC86F51D78DE8F32943D7FAA159451D63781F
Certificate serial:       3F59586EA75591D3FE2C882804103F148DBB56AA
Authority key identifier: 60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137312e302f32342d3234203d3e20323731333532.roa
Signing time:             Wed 08 Jul 2026 21:09:14 +0000
ROA not before:           Wed 08 Jul 2026 21:04:14 +0000
ROA not after:            Wed 07 Jul 2027 21:09:14 +0000
asID:                     271352
IP address blocks:        181.232.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl
                          rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:59:58:6e:a7:55:91:d3:fe:2c:88:28:04:10:3f:14:8d:bb:56:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604CC86F51D78DE8F32943D7FAA159451D63781F
        Validity
            Not Before: Jul  8 21:04:14 2026 GMT
            Not After : Jul  7 21:09:14 2027 GMT
        Subject: CN=811697302D86BA9C9380CBAB027D23EEE2BD1750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:cb:90:1e:89:db:5e:be:b6:9f:18:b0:71:
                    ee:ee:fa:a6:0f:77:e7:fa:24:fe:88:75:93:81:55:
                    dd:d7:15:32:3a:43:03:d3:07:75:01:a3:f5:5e:86:
                    0c:2a:4f:5e:4f:c7:a1:fd:c3:d0:0b:ab:95:f1:2c:
                    fb:0b:6b:f7:f2:14:85:2f:c5:9f:f1:f8:e7:26:17:
                    5b:71:0f:bf:4b:de:a8:13:7f:43:b2:94:a9:66:16:
                    0c:10:43:2d:bf:23:d9:7a:e0:bc:44:2b:eb:37:e0:
                    1a:d4:46:83:79:4a:4e:8a:ee:8f:11:38:47:f3:95:
                    e7:57:2f:d8:6f:22:89:05:3d:4c:9e:07:5f:ef:6a:
                    2e:54:19:34:86:80:20:f3:05:8d:a5:c7:d1:71:45:
                    3f:0e:e4:2a:db:58:a2:bc:58:9a:54:17:57:c1:d6:
                    4b:1b:f8:c6:55:34:29:9b:31:9f:c8:ef:1a:b2:a2:
                    67:e9:aa:95:5c:55:b6:6f:b0:ad:2c:e6:30:bd:57:
                    df:14:e0:6f:fd:8c:1c:0d:f3:0a:3e:c9:c7:5b:d7:
                    1d:37:e5:f9:34:e7:87:87:72:7c:f8:6f:29:b4:e5:
                    5d:f2:43:82:60:93:fa:b8:3e:e5:e5:23:2c:07:81:
                    0f:86:ae:94:77:2c:90:47:88:3e:b4:7d:06:d6:ed:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:97:30:2D:86:BA:9C:93:80:CB:AB:02:7D:23:EE:E2:BD:17:50
            X509v3 Authority Key Identifier:
                keyid:60:4C:C8:6F:51:D7:8D:E8:F3:29:43:D7:FA:A1:59:45:1D:63:78:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/604CC86F51D78DE8F32943D7FAA159451D63781F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/604CC86F51D78DE8F32943D7FAA159451D63781F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RVjLRGZXVYP1Bh2Rpfky8AzLZxNSRpkNadx8XkemWEJ/0/3138312e3233322e3137312e302f32342d3234203d3e20323731333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:4c:87:75:fc:6c:c9:b8:e2:f4:5c:9a:56:b7:f3:c8:67:
         90:29:64:c6:7b:98:0c:47:c2:bf:bf:05:91:f5:b4:d2:4e:fe:
         30:c3:0b:66:39:2e:fb:ad:d1:3f:55:f6:77:50:89:e5:a0:2b:
         e1:5d:52:ab:56:ce:65:42:01:2c:42:fb:7d:3b:9b:89:07:10:
         4e:85:1e:8e:8e:42:ad:37:36:c4:af:ed:f1:42:ea:68:3f:e7:
         c9:96:6d:e1:7e:19:08:0c:b0:8b:5b:1b:dd:aa:4e:6a:8b:50:
         1d:60:9a:89:31:46:90:fe:aa:f5:70:3a:33:76:4d:06:7c:fc:
         cf:f6:db:4a:cc:21:06:2f:0c:0f:6c:37:6a:40:e3:a6:41:42:
         63:29:4b:d9:41:c8:76:cf:fc:97:79:6e:9b:01:80:77:a1:27:
         5f:36:de:b0:b8:70:cd:37:2b:28:39:ad:c5:60:c9:94:5b:e9:
         3f:46:85:d5:fe:2a:58:7e:29:61:0e:b0:39:28:b9:d4:1c:13:
         79:de:7b:5e:cb:06:17:fa:97:51:30:94:63:45:f1:fb:d4:c2:
         70:21:93:84:87:08:44:7d:2c:de:f1:3f:ab:55:92:bb:07:3a:
         8c:89:cb:ce:58:65:d2:b7:22:2d:ca:53:36:07:31:63:b6:05:
         2f:0e:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 23:55:16 2026 by rpki-client