Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa
File:                     3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa (raw, json)
Hash identifier:          DAsPXz3A80BnXBgtlMV/UqMhkaUVOx80TZ4k+723/xU=
Subject key identifier:   9C:A8:FA:ED:54:09:C7:A9:2E:F1:03:A1:64:42:5E:BD:5E:75:A0:82
Certificate issuer:       /CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
Certificate serial:       1926D050D8D75D6EB14FC29735025DC59510EDAE
Authority key identifier: D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa
Signing time:             Tue 09 Sep 2025 20:24:29 +0000
ROA not before:           Tue 09 Sep 2025 20:19:29 +0000
ROA not after:            Tue 08 Sep 2026 20:24:29 +0000
asID:                     271552
IP address blocks:        181.232.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 02:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:d0:50:d8:d7:5d:6e:b1:4f:c2:97:35:02:5d:c5:95:10:ed:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B2B50FFE147528A6BDBFA97590C52FA78DB496
        Validity
            Not Before: Sep  9 20:19:29 2025 GMT
            Not After : Sep  8 20:24:29 2026 GMT
        Subject: CN=9CA8FAED5409C7A92EF103A164425EBD5E75A082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:cd:92:4f:a5:d3:46:74:9e:31:ce:fa:40:
                    80:4c:dd:31:8e:ad:6c:9e:19:b8:0b:ee:79:3a:6d:
                    ab:0c:0e:b6:a9:54:e3:6e:95:d7:c0:ea:3b:ec:db:
                    13:50:73:6f:f8:0b:55:32:96:ee:56:2e:c2:24:32:
                    09:78:b6:72:63:b0:21:2e:7e:ec:8f:69:8c:02:b0:
                    5e:c4:74:46:92:52:8a:25:39:d6:70:82:1b:9f:5d:
                    62:bb:d8:cc:f6:bd:4a:c1:59:91:e9:aa:08:86:f3:
                    39:3a:66:60:4c:da:1f:55:32:2b:e9:84:e7:fe:a6:
                    33:78:d2:98:a1:67:f2:5b:21:ee:56:7e:df:12:f0:
                    0d:2e:57:59:35:59:51:0c:ff:a4:94:a3:8a:a4:ea:
                    00:94:6c:b1:bf:1e:76:ee:ef:32:fd:4d:42:9d:8e:
                    aa:ec:a0:b8:ea:ff:b1:3c:47:63:cb:8c:a9:3f:8a:
                    9e:4f:a2:0e:9a:0b:e5:25:0d:03:85:49:2d:2f:13:
                    87:34:43:7a:13:ce:51:a8:09:af:57:88:12:9d:3e:
                    92:a3:83:58:57:53:67:15:6f:fa:29:89:3c:e2:55:
                    66:90:a7:b3:6b:1a:1d:1a:d6:c8:d3:bb:34:55:e5:
                    f3:f4:42:8f:3a:73:64:f4:fb:c9:c5:62:e4:eb:d3:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A8:FA:ED:54:09:C7:A9:2E:F1:03:A1:64:42:5E:BD:5E:75:A0:82
            X509v3 Authority Key Identifier:
                keyid:D3:B2:B5:0F:FE:14:75:28:A6:BD:BF:A9:75:90:C5:2F:A7:8D:B4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B2B50FFE147528A6BDBFA97590C52FA78DB496.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231362e302f32322d3234203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:27:1a:99:30:f0:39:d2:53:4a:b4:f9:92:e1:85:03:22:0d:
         55:51:66:de:90:5c:1f:ca:b3:fb:34:80:05:f0:11:fd:57:43:
         3d:38:cb:86:72:ce:00:84:b4:a4:32:f6:e8:68:4d:05:ca:3b:
         f4:b8:b1:e8:fb:91:38:74:21:b1:92:99:84:6a:48:04:a7:4f:
         c5:53:08:94:39:47:c1:18:92:ec:ac:3d:f5:fb:66:d9:15:aa:
         ea:5a:4b:a9:21:39:cd:14:f9:1b:76:c6:4a:06:ec:57:06:a3:
         9c:35:40:45:cf:c9:63:d7:41:f0:9c:14:9c:29:92:98:8c:6a:
         8c:2d:35:45:7c:82:96:79:e8:47:8c:05:74:18:0d:a1:6c:c3:
         56:57:04:52:20:42:4e:12:d1:9e:52:8f:da:ee:8a:5e:cc:e0:
         28:05:7d:52:95:52:3f:4e:c5:a8:b6:04:c3:4c:98:c7:df:7b:
         e7:08:6a:46:72:f2:0b:0a:ed:b7:04:73:1b:44:2b:55:0b:c3:
         53:5c:c3:92:45:9d:a9:73:fe:bb:9c:a4:e7:53:8f:e0:c8:bd:
         6a:86:a2:a0:10:3c:5d:f6:a3:20:c9:7e:dd:67:e1:30:3d:3b:
         58:97:a5:5b:71:9c:d7:f3:b6:56:96:3f:36:f0:6c:b5:7e:27:
         a1:41:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:13:21 2025 by rpki-client