Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/3138312e3139312e3137342e302f32332d3233203d3e20323637343434.roa
File:                     3138312e3139312e3137342e302f32332d3233203d3e20323637343434.roa (raw, json)
Hash identifier:          Dr2HSxPd73IghKPO+tenBeIvGycZ5qqNXitYV5kJ89w=
Subject key identifier:   67:B5:91:AE:7D:B8:1F:49:CF:FC:3B:A0:E8:C0:21:14:29:BA:AA:7D
Certificate issuer:       /CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
Certificate serial:       1856A202685DC5D3E905C49CE4F424F4BCD924CC
Authority key identifier: 23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/3138312e3139312e3137342e302f32332d3233203d3e20323637343434.roa
Signing time:             Wed 29 Jul 2026 01:07:21 +0000
ROA not before:           Wed 29 Jul 2026 01:02:21 +0000
ROA not after:            Wed 28 Jul 2027 01:07:21 +0000
asID:                     267444
IP address blocks:        181.191.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl
                          rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:56:a2:02:68:5d:c5:d3:e9:05:c4:9c:e4:f4:24:f4:bc:d9:24:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941
        Validity
            Not Before: Jul 29 01:02:21 2026 GMT
            Not After : Jul 28 01:07:21 2027 GMT
        Subject: CN=67B591AE7DB81F49CFFC3BA0E8C0211429BAAA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:59:60:af:8b:a7:a4:94:5d:d5:89:43:a8:24:
                    76:46:6f:ba:76:40:ab:f6:57:7e:04:82:c4:00:67:
                    6b:00:d6:c9:82:53:cc:9b:e0:54:64:69:66:59:9f:
                    b7:b6:8d:e3:3b:65:cd:a7:aa:e3:5f:88:2a:25:81:
                    80:a2:0e:bf:1b:7b:ee:14:f0:7d:9a:bf:d0:5f:38:
                    c6:e0:33:a1:20:6c:d0:2f:05:7e:7a:b0:3f:33:05:
                    8e:ff:22:4b:a2:c5:3a:94:3d:4f:ef:05:5e:08:94:
                    82:85:da:d8:17:25:82:cc:2d:b3:c5:33:ca:1f:a5:
                    39:e2:f3:35:af:fb:0c:4b:e9:cf:b1:45:35:cd:10:
                    30:9e:bc:d7:95:1e:3a:72:fa:a3:3f:e3:65:40:6e:
                    8a:5d:22:15:e1:21:7a:c5:71:2f:b8:72:00:bb:8d:
                    ec:18:c1:f6:f9:00:1b:7c:57:e9:9d:26:0a:31:28:
                    c0:9d:c5:41:1f:78:be:f3:6e:69:83:d1:c2:06:37:
                    73:0d:c8:08:d8:3e:26:17:4f:26:a2:0f:3c:69:4a:
                    59:d7:7d:0e:fa:35:eb:e3:12:04:2f:e6:c9:9d:fa:
                    76:fa:57:82:89:e1:40:61:32:ad:b7:68:d3:55:d2:
                    d6:8d:05:ff:c0:e2:a1:bd:95:12:eb:46:d8:62:d7:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B5:91:AE:7D:B8:1F:49:CF:FC:3B:A0:E8:C0:21:14:29:BA:AA:7D
            X509v3 Authority Key Identifier:
                keyid:23:05:E5:DB:BA:EB:23:4F:DC:D1:EE:E9:24:AB:E6:06:7A:2D:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2305E5DBBAEB234FDCD1EEE924ABE6067A2D6941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RkuESo9G5bXQYuQFUoQTkXqZ4ZEp5NpVuqdVPzkbDuA/0/3138312e3139312e3137342e302f32332d3233203d3e20323637343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:76:19:6c:a4:18:cb:77:29:92:b5:4c:ff:15:fa:83:8d:e5:
         49:c5:0f:fe:78:56:b8:60:ca:1a:3b:ea:e9:e6:07:57:70:2b:
         c4:85:96:b3:05:36:8a:aa:3f:d7:b4:43:0f:30:3e:ef:9d:f2:
         8d:a3:3b:7f:2b:5c:3d:e7:ec:74:f3:c7:fc:cf:b6:6d:4f:ed:
         be:cb:28:ae:0b:9f:d4:84:ac:35:c9:93:77:df:ba:22:43:5b:
         3a:5b:27:a4:1b:35:fe:29:7a:3b:d5:4c:42:e4:f5:b2:7b:b4:
         5d:70:b4:41:1e:c4:a6:b4:27:c9:e9:42:3a:6f:1b:65:0c:2f:
         2d:b6:a7:02:c9:72:77:a5:96:a8:f7:57:5a:87:8f:65:ea:1f:
         2c:ef:5b:bc:48:98:1c:99:6b:17:92:94:e1:bd:e3:cd:89:fb:
         5e:33:f0:ab:c4:f4:fd:36:65:a6:7f:c2:6f:57:97:42:35:32:
         f3:00:cc:17:f6:59:53:92:4c:06:18:b1:5b:77:2b:d6:7f:bd:
         e5:73:a0:2f:ed:be:c2:e8:3b:5e:64:bb:64:9f:66:46:4c:89:
         2e:4b:a8:31:03:27:8e:4b:16:26:06:99:96:ae:5f:98:af:65:
         0b:7f:68:16:8f:39:05:09:e1:dd:c1:f5:30:99:eb:1b:11:ca:
         8a:47:f5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:29:12 2026 by rpki-client