Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231372e302f32342d3234203d3e20323731353532.roa
File:                     3138312e3233322e3231372e302f32342d3234203d3e20323731353532.roa (raw, json)
Hash identifier:          qMpFg2LYRSzhB7w5xOY4413egEgzc6cFnmLd0a4490g=
Subject key identifier:   A6:34:59:97:9C:E8:5E:E3:6C:FA:23:F8:7B:8A:5C:B9:A3:7C:4B:1C
Certificate issuer:       /CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
Certificate serial:       7004B53A08BA8DB97008528356B58F281CD35425
Authority key identifier: BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231372e302f32342d3234203d3e20323731353532.roa
Signing time:             Fri 14 Aug 2026 12:59:39 +0000
ROA not before:           Fri 14 Aug 2026 12:54:39 +0000
ROA not after:            Fri 13 Aug 2027 12:59:39 +0000
asID:                     271552
IP address blocks:        181.232.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl
                          rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 01:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:b5:3a:08:ba:8d:b9:70:08:52:83:56:b5:8f:28:1c:d3:54:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF01EDEC817946FEE3E062E65259E1F2FD9BB42E
        Validity
            Not Before: Aug 14 12:54:39 2026 GMT
            Not After : Aug 13 12:59:39 2027 GMT
        Subject: CN=A63459979CE85EE36CFA23F87B8A5CB9A37C4B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:8a:1b:b8:91:c2:96:53:89:35:20:4e:2a:
                    d6:bc:ae:72:1c:54:0e:b4:b9:59:fe:c2:33:21:1a:
                    ec:9e:24:f5:08:fb:d3:11:69:5c:31:6f:4c:ce:8e:
                    60:dd:02:fd:5c:04:8d:a4:a5:0f:30:60:1f:2d:8d:
                    9f:ef:8c:77:0b:3f:13:5b:26:4a:bb:15:32:65:11:
                    e6:a2:27:4d:f8:45:ac:05:af:fd:19:ac:12:79:69:
                    0e:08:89:a0:06:ff:bf:0b:d3:aa:b8:93:d0:bf:f3:
                    4c:88:8e:0d:42:0e:14:93:d9:79:14:5a:5b:30:6b:
                    ed:a0:40:4d:2b:3e:34:0f:52:f3:61:d8:01:61:a5:
                    ce:01:fc:0f:90:55:9f:ba:cf:b2:96:d3:12:e1:e4:
                    0e:43:c6:eb:a7:ee:df:c5:2d:97:41:b3:86:72:e6:
                    cf:31:66:3d:af:80:79:6e:f2:d5:9e:e1:53:31:91:
                    ef:d4:3a:fe:b9:06:87:35:5a:46:82:a1:24:22:4c:
                    b1:b7:6b:cf:a5:e8:cb:7f:58:5e:fe:ba:9c:d1:e5:
                    e5:9f:b2:2c:ba:89:d4:db:ad:57:e3:4c:fe:6c:46:
                    0f:35:76:48:61:bc:6b:6b:f2:da:b0:57:95:89:12:
                    26:bf:c4:81:2a:74:b3:0e:ab:8a:d5:4d:77:b7:96:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:34:59:97:9C:E8:5E:E3:6C:FA:23:F8:7B:8A:5C:B9:A3:7C:4B:1C
            X509v3 Authority Key Identifier:
                keyid:BF:01:ED:EC:81:79:46:FE:E3:E0:62:E6:52:59:E1:F2:FD:9B:B4:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF01EDEC817946FEE3E062E65259E1F2FD9BB42E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/3138312e3233322e3231372e302f32342d3234203d3e20323731353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:96:71:49:a7:72:b4:b7:65:4d:12:42:99:47:d1:72:89:
         fc:7e:d0:52:d8:0e:e0:f1:2a:9f:06:0f:d3:1a:4a:9c:12:71:
         50:82:25:24:b6:37:21:a4:13:24:f8:f9:c9:18:52:e2:9d:d0:
         7d:79:f2:11:fe:ab:6f:a9:38:de:d8:1e:e6:d2:59:94:61:15:
         98:ed:f6:df:9b:65:5e:83:bf:5c:01:2d:2a:9d:88:a9:81:22:
         18:f8:0c:aa:f9:90:5e:0d:fc:aa:96:24:8a:f2:99:f8:8d:9b:
         0c:92:92:cd:ca:e6:41:7b:58:56:f9:e7:2c:70:da:85:c4:5f:
         42:8a:1b:37:ef:a8:61:0d:af:f8:f4:0b:96:ae:84:fa:cd:ab:
         d3:2c:cc:0f:9b:71:9a:1f:ae:98:88:83:39:0b:3c:c0:4e:3b:
         df:9d:c2:3a:9c:be:90:4f:13:58:54:24:94:d0:3d:b6:e6:55:
         8f:05:06:0e:5a:33:1e:ce:14:9f:51:da:90:cc:17:ed:bc:c0:
         37:96:19:a3:e3:74:2d:8f:9e:be:2e:f6:4d:8f:b2:54:87:08:
         05:b7:68:b9:e5:60:23:0b:52:15:90:b5:5f:98:fa:b5:62:03:
         1f:d3:9c:2f:0b:07:79:78:5c:42:a7:03:3c:8b:1c:ac:bc:33:
         8e:cf:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:11:29 2026 by rpki-client