Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          WqBryr8qxt+bYTVdPLZWrxYFiaGjPNYIO+OUwcepRlQ=
Subject key identifier:   DB:74:A9:D6:DD:03:E0:8A:F2:CE:BF:9C:BB:04:3F:3B:91:8F:5F:57
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       2B2CD975675F35AE64820F21D4B898651DEFF878
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa
Signing time:             Tue 19 May 2026 12:38:11 +0000
ROA not before:           Tue 19 May 2026 12:33:11 +0000
ROA not after:            Tue 18 May 2027 12:38:11 +0000
asID:                     271420
IP address blocks:        181.233.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:d9:75:67:5f:35:ae:64:82:0f:21:d4:b8:98:65:1d:ef:f8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:11 2026 GMT
            Not After : May 18 12:38:11 2027 GMT
        Subject: CN=DB74A9D6DD03E08AF2CEBF9CBB043F3B918F5F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:d7:70:ac:89:e3:5b:ec:02:0c:68:a4:66:
                    fb:32:7b:74:6e:6f:94:7f:5f:11:ae:e9:ce:13:23:
                    53:4c:27:8f:a8:2e:27:45:01:27:9c:ab:29:91:31:
                    bc:20:f1:6b:ce:03:a9:f5:a1:6c:31:88:c5:e8:f2:
                    b9:45:56:9a:9d:67:d3:46:7e:42:03:2e:63:bf:62:
                    b2:ff:fb:07:45:5a:15:c6:53:2d:27:e8:c9:4f:ff:
                    78:68:43:87:e2:df:a0:07:86:d0:0e:8e:d0:47:7d:
                    ab:94:7b:f5:46:a9:ee:9e:61:26:c6:11:01:e2:56:
                    a3:3b:14:e5:ad:a0:b6:ff:cd:43:68:5c:4f:1c:14:
                    46:10:c5:82:8c:bf:d6:a2:ac:49:c1:34:72:33:63:
                    86:96:94:72:ba:ce:aa:59:88:28:d2:46:cf:ae:4c:
                    1c:bb:f9:29:91:da:35:fc:48:4b:06:3f:a9:a7:d5:
                    6e:59:a4:97:49:75:e3:45:ad:1d:5a:86:5e:ae:81:
                    2f:13:4a:0f:7c:cc:ce:44:c1:07:56:5b:21:e1:a8:
                    41:2b:87:37:ff:c1:38:b0:b4:f4:26:84:ed:81:22:
                    73:3b:28:f0:68:20:04:fc:50:33:f3:f3:bc:bd:4a:
                    e4:07:91:83:a1:8b:33:c1:88:1c:a8:db:16:d7:ca:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:A9:D6:DD:03:E0:8A:F2:CE:BF:9C:BB:04:3F:3B:91:8F:5F:57
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34342e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:de:4a:eb:b3:c6:32:9a:1c:7e:ed:df:17:fa:04:d3:45:05:
         8a:8e:db:ed:6e:e4:d0:9b:18:fe:dd:62:5d:d0:76:5e:0b:67:
         d6:2d:8e:42:a8:8d:79:78:dc:42:14:6e:24:5f:ee:73:d8:dd:
         b7:08:5f:4a:ca:57:a1:2e:72:da:40:2e:24:a3:6b:3e:8d:62:
         a5:66:68:cc:c9:02:c9:e9:ca:bc:47:9b:f4:e6:b9:e1:e9:04:
         ef:f2:2f:d6:38:26:65:c3:3e:31:4b:b0:9f:7c:12:67:8d:98:
         89:ca:d3:e5:27:8e:16:ea:b3:5c:b8:e6:a9:1f:9a:ca:0a:78:
         08:4e:bf:15:25:32:cb:94:7f:16:09:72:6c:4c:32:7f:a6:c5:
         e5:32:17:ad:ac:58:dd:d6:13:94:34:03:de:ee:72:28:21:93:
         1c:51:13:ba:28:b1:d5:ec:88:6a:81:7a:c7:9c:42:ae:20:e2:
         68:fe:f8:ec:11:93:d5:f2:a6:72:f1:4a:0e:60:d8:6d:14:ce:
         f1:26:4b:17:f3:c8:1c:c9:4a:72:7b:61:fd:97:c3:b5:7d:34:
         5f:db:36:10:b7:14:79:72:f8:27:47:0d:69:4f:ae:18:64:94:
         5f:d0:ce:f6:55:cd:19:78:4f:c5:1c:de:57:e7:c5:8b:18:e0:
         82:29:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:25 2026 by rpki-client