Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          0ftOJlOA9FrnRwd/LfsAotbN6jT9Qv+l3ffISymzUpc=
Subject key identifier:   30:0B:C4:95:26:61:80:72:EF:77:0C:5C:35:5D:D7:A9:4E:FF:2F:88
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       55440543EC4A9B1D1EF7461BDE50270B9B8DE2D1
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa
Signing time:             Tue 19 May 2026 12:38:08 +0000
ROA not before:           Tue 19 May 2026 12:33:08 +0000
ROA not after:            Tue 18 May 2027 12:38:08 +0000
asID:                     271420
IP address blocks:        181.233.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:44:05:43:ec:4a:9b:1d:1e:f7:46:1b:de:50:27:0b:9b:8d:e2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:08 2026 GMT
            Not After : May 18 12:38:08 2027 GMT
        Subject: CN=300BC49526618072EF770C5C355DD7A94EFF2F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:15:1f:7d:53:cb:84:e4:d0:0c:4c:3c:05:
                    13:1d:56:77:f1:0c:10:d9:8e:cd:70:2e:1b:5d:06:
                    28:25:4d:96:83:79:da:90:cd:ac:2e:0e:56:01:a1:
                    a2:18:7d:64:58:71:a7:f4:87:82:23:64:45:c5:62:
                    26:1f:0e:54:85:1d:c6:7f:80:cd:02:5b:c5:b7:b6:
                    b8:8a:82:8f:bf:0b:08:4b:a8:cc:22:1d:d4:24:25:
                    c1:0c:2e:53:b2:af:1a:d6:0d:fa:e3:f8:6d:21:63:
                    83:94:a8:7b:fc:06:b5:43:e7:92:61:de:73:5c:cf:
                    08:b2:d3:d7:92:be:c5:97:81:c4:0d:e7:42:10:f9:
                    13:cf:b6:d6:43:58:62:88:50:40:64:d3:e5:cb:3d:
                    27:04:9a:c5:a6:32:d8:7f:3c:93:78:bc:c2:97:65:
                    7c:71:31:7d:48:a2:df:db:db:cc:cc:cf:cc:cd:60:
                    dc:d8:66:95:ef:55:f7:56:09:20:a3:80:5e:d0:ec:
                    70:3d:b5:32:19:ae:df:76:93:26:92:f1:c1:e3:de:
                    a6:68:f6:89:fb:19:ce:08:35:fe:ec:9a:71:ff:ef:
                    67:ff:91:d2:67:c6:d5:b3:85:57:9e:14:c2:bd:49:
                    f3:81:40:4e:5d:63:f1:9a:a0:cf:6d:48:38:7f:29:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:C4:95:26:61:80:72:EF:77:0C:5C:35:5D:D7:A9:4E:FF:2F:88
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34352e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fe:05:95:28:bd:44:75:cb:2c:51:7f:62:2f:2a:46:7b:2b:
         05:3e:01:30:8b:34:5c:02:d6:0b:5a:b0:9b:d9:4c:e0:8a:5f:
         ac:02:30:d6:ac:f3:9f:c1:fa:34:65:dc:c9:ad:d8:39:06:37:
         df:9c:82:88:e0:e5:bc:99:de:e4:97:ce:b9:ed:5c:4e:ec:ef:
         c1:bb:79:86:2d:7a:7e:1a:38:b9:cf:f8:8e:89:2a:87:2b:54:
         42:b2:5b:97:63:b8:ad:74:91:cc:1a:fc:6a:a0:b0:39:cb:76:
         40:ad:70:e8:c8:54:e6:db:81:53:9a:6f:5e:e9:6e:e3:9c:52:
         0a:f8:e0:72:e3:ac:89:bb:18:fb:ad:63:1e:0d:6b:f4:6f:a4:
         d7:9e:ec:b0:8d:68:0a:61:f5:51:7e:74:2e:05:26:58:48:0b:
         5d:3b:c1:aa:2e:a4:b9:4e:3e:a6:ea:69:70:61:75:8b:fb:21:
         38:d9:e8:60:01:41:d1:ca:65:ba:63:92:cc:e4:5a:02:f6:92:
         f2:22:57:92:a9:e7:34:e0:7a:85:d4:c5:51:5b:e8:f0:c5:04:
         9a:24:2f:06:c5:e1:a8:cc:cf:b2:af:f6:a7:ac:14:5a:ab:38:
         d6:e2:5c:5b:0e:c7:5a:76:7e:69:80:ce:75:9b:50:c0:fb:fb:
         ad:20:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:24 2026 by rpki-client