Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3232203d3e20323731353532.roa
File:                     3138312e3233322e3231362e302f32322d3232203d3e20323731353532.roa (raw, json)
Hash identifier:          XvhqdltCmDy9QtCRQt10F93lBJKrfFNfDdXMZJflj2s=
Subject key identifier:   E1:77:BC:B9:58:08:DA:63:24:BA:24:02:61:A2:8C:C6:F8:A2:12:6C
Certificate issuer:       /CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
Certificate serial:       0992B5C22DB722AA7115DD5D72A2DE98C4213843
Authority key identifier: BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3232203d3e20323731353532.roa
Signing time:             Fri 14 Aug 2026 12:43:49 +0000
ROA not before:           Fri 14 Aug 2026 12:38:49 +0000
ROA not after:            Fri 13 Aug 2027 12:43:49 +0000
asID:                     271552
IP address blocks:        181.232.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 19:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:92:b5:c2:2d:b7:22:aa:71:15:dd:5d:72:a2:de:98:c4:21:38:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
        Validity
            Not Before: Aug 14 12:38:49 2026 GMT
            Not After : Aug 13 12:43:49 2027 GMT
        Subject: CN=E177BCB95808DA6324BA240261A28CC6F8A2126C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:52:71:39:68:51:06:f4:6f:22:c4:c1:10:
                    c9:09:da:dd:46:79:31:c7:37:94:e9:15:87:57:ee:
                    07:2d:56:35:7f:95:69:22:b4:12:4c:34:19:b0:47:
                    77:dd:aa:95:72:11:a9:20:bc:46:05:79:7c:8b:26:
                    ac:cc:4a:34:f2:17:9e:50:db:a1:9e:b6:c8:12:84:
                    e8:c0:13:51:ed:f5:c2:64:01:9d:ae:0c:65:22:14:
                    10:9f:34:e9:a1:ce:bc:8f:ab:1c:98:d7:a4:39:1f:
                    14:d5:5b:aa:7d:4c:14:13:4e:44:ec:a3:d1:a6:06:
                    7a:b5:37:57:5e:f8:27:2b:e2:8a:3f:85:e4:f5:0b:
                    f7:60:16:2e:8b:24:81:14:0c:e9:4d:f2:ee:dd:40:
                    43:11:1c:d2:4e:49:e6:5c:8c:6a:cd:60:0a:0c:2b:
                    f9:86:5c:5c:63:1b:bd:ac:ae:ce:a2:55:b7:e3:7d:
                    df:6f:69:1e:53:66:8e:07:27:f7:9a:0e:2f:a2:4f:
                    1f:7e:c6:05:e8:35:76:d5:09:44:d5:62:9a:04:70:
                    be:85:48:74:b0:6e:8c:22:58:7e:ba:36:f7:8f:f1:
                    55:1c:25:54:a2:a1:33:18:0b:dc:47:1e:9d:77:9c:
                    2b:ee:8a:e0:f0:a6:a4:4f:ca:50:14:ce:ee:06:c0:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:BC:B9:58:08:DA:63:24:BA:24:02:61:A2:8C:C6:F8:A2:12:6C
            X509v3 Authority Key Identifier:
                keyid:BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3232203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:0e:21:8e:f2:95:d0:58:69:2d:2f:d2:74:bf:3e:cb:fd:
         97:e7:2b:0c:42:9d:1e:4c:32:d0:35:78:64:70:20:da:fe:8c:
         76:c9:4f:e1:d3:f2:87:23:ca:e9:54:d5:24:8a:41:f4:50:4e:
         8b:be:15:70:ee:2e:18:e5:dc:08:5d:12:f8:77:54:b5:b9:92:
         a0:b3:ac:80:7d:ae:f7:db:ce:5f:7d:97:46:62:74:0b:2a:93:
         96:8f:fc:ac:25:c5:c3:09:ad:bb:33:8b:e2:f7:19:4d:a7:fd:
         9d:20:4c:a0:87:83:ba:c8:5c:7c:bc:6f:1e:04:a2:bf:4c:02:
         65:21:59:4e:4d:da:cf:4e:08:6f:e1:cb:f1:38:0e:42:0a:cc:
         26:47:9d:d1:c0:c9:95:c6:cb:bc:e2:5b:3f:86:d1:36:4c:9b:
         b8:fb:d9:f6:18:80:78:96:36:34:72:94:ac:b2:8d:e4:4e:21:
         d8:dc:0d:dc:61:8b:65:3c:c4:fd:19:4f:87:d8:0d:b1:02:dd:
         e2:64:f8:fe:09:ec:f6:d6:a0:34:30:88:7c:90:e9:49:8e:b7:
         3a:bf:56:0b:86:7d:3a:8e:cd:6c:9c:70:9b:a2:d1:41:58:87:
         d0:19:ec:a5:75:a0:85:c8:d5:2f:84:7e:a9:0b:d4:5e:0e:1d:
         76:9f:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 22:42:03 2026 by rpki-client