Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
File:                     3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa (raw, json)
Hash identifier:          XDQK4n6HGktgIs8O+xTyIv8aF6kGNLf4cvI+1B+AEAs=
Subject key identifier:   B1:DD:E7:8A:B0:12:53:00:68:B6:F1:08:E3:3F:06:C9:40:DB:B0:8A
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       3B2D96366073F90D2C2D59F456C54DEC3CC01151
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa
Signing time:             Tue 19 May 2026 12:38:08 +0000
ROA not before:           Tue 19 May 2026 12:33:08 +0000
ROA not after:            Tue 18 May 2027 12:38:08 +0000
asID:                     271420
IP address blocks:        181.233.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2d:96:36:60:73:f9:0d:2c:2d:59:f4:56:c5:4d:ec:3c:c0:11:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:08 2026 GMT
            Not After : May 18 12:38:08 2027 GMT
        Subject: CN=B1DDE78AB012530068B6F108E33F06C940DBB08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:77:43:d2:07:f6:e4:9f:ab:d7:a6:58:28:
                    c2:ec:10:91:d6:9b:d7:ec:d3:fa:19:c1:d7:1c:86:
                    06:85:d2:6c:de:ab:3a:df:9e:7d:13:4f:54:29:37:
                    56:b6:06:35:5b:64:f4:f0:79:6e:b1:b8:80:67:8b:
                    76:7c:47:5b:c8:98:84:2d:dc:0b:90:01:4b:35:20:
                    f8:56:66:d9:ab:9e:ae:fb:a5:d1:10:a0:a3:1a:a4:
                    34:bd:0c:d3:e6:ff:e9:6f:e3:2b:08:88:14:36:0f:
                    54:6b:ee:28:a8:67:c4:f1:8a:de:98:32:8b:3a:59:
                    19:23:17:63:9a:50:8c:5f:57:ba:fe:2c:9f:3a:14:
                    e8:e9:fe:fd:71:29:a9:27:b0:c5:dc:bb:b0:a0:2e:
                    b1:7a:67:0c:54:b5:2a:7b:3d:7e:36:6a:b6:91:2f:
                    44:96:ee:c3:b5:b8:c9:14:ae:fb:a7:02:10:dc:da:
                    80:be:91:49:a6:bb:35:38:8c:d3:53:1e:a0:05:31:
                    35:df:05:4e:5d:01:8b:1d:5a:55:85:f2:5c:99:67:
                    f6:6f:3d:8d:c4:a5:89:f8:ed:4d:e5:e8:d0:e3:8a:
                    9a:fe:08:92:49:9a:03:45:73:b0:0c:eb:14:38:c0:
                    6b:f2:d7:cf:53:6a:c1:03:53:c7:23:65:bb:90:32:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:E7:8A:B0:12:53:00:68:B6:F1:08:E3:3F:06:C9:40:DB:B0:8A
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3138312e3233332e34372e302f32342d3234203d3e20323731343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:4e:86:17:3b:54:96:24:a1:53:bc:cc:d9:9f:01:ad:cb:
         0a:d7:19:a1:82:3f:c6:00:3f:07:41:3d:de:4f:a8:b2:f1:88:
         17:15:17:d6:9f:74:96:49:76:a8:c8:81:02:fe:e1:74:a4:2d:
         38:2e:d0:da:a5:ed:85:e3:7a:d8:f7:1a:bb:08:24:14:2d:51:
         d7:eb:41:07:93:27:12:a1:11:b1:70:67:a3:26:47:8b:95:1e:
         5c:38:99:e2:86:4c:29:ec:ca:bd:4f:f1:d6:1f:f1:39:49:a6:
         85:16:90:bd:88:8b:cd:e9:93:92:65:50:a3:05:4e:c5:d7:37:
         d5:6e:f1:11:bc:f4:5e:40:ef:d1:14:c6:c1:38:5a:6b:fb:ac:
         b4:8c:7b:f8:3d:e4:6d:b9:06:de:2e:25:8b:50:79:c5:e2:83:
         7d:3d:a6:59:84:0a:9a:7b:3b:2d:21:7d:51:8c:53:25:45:d0:
         57:f4:7f:61:8b:a3:1f:d8:42:4b:0c:ec:b4:c2:d7:eb:65:97:
         93:db:66:5d:8d:c7:48:b5:5e:89:d6:5f:ec:16:b8:e1:f6:10:
         ea:1c:2d:46:4e:8e:a1:69:3c:49:ef:75:f2:61:4c:9c:5d:54:
         c6:c2:d1:48:55:cd:39:5b:81:51:01:ee:5b:02:97:21:e3:dd:
         4f:16:f9:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOy2WNmBz+Q0sLVn0VsVN7DzAEVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI4RTc4MERDRkU3QjlGMEFCNUE4NzcyOUQ0NENDQUQz
RDczQjNBNjAeFw0yNjA1MTkxMjMzMDhaFw0yNzA1MTgxMjM4MDhaMDMxMTAvBgNV
BAMTKEIxRERFNzhBQjAxMjUzMDA2OEI2RjEwOEUzM0YwNkM5NDBEQkIwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdHdD0gf25J+r16ZYKMLsEJHW
m9fs0/oZwdcchgaF0mzeqzrfnn0TT1QpN1a2BjVbZPTweW6xuIBni3Z8R1vImIQt
3AuQAUs1IPhWZtmrnq77pdEQoKMapDS9DNPm/+lv4ysIiBQ2D1Rr7iioZ8Txit6Y
Mos6WRkjF2OaUIxfV7r+LJ86FOjp/v1xKaknsMXcu7CgLrF6ZwxUtSp7PX42araR
L0SW7sO1uMkUrvunAhDc2oC+kUmmuzU4jNNTHqAFMTXfBU5dAYsdWlWF8lyZZ/Zv
PY3EpYn47U3l6NDjipr+CJJJmgNFc7AM6xQ4wGvy189TasEDU8cjZbuQMrS3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsd3nirASUwBotvEI4z8GyUDbsIowHwYDVR0j
BBgwFoAUMo54Dc/nufCrWodynUTMrT1zs6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC8zMjhFNzgwRENGRTdCOUYwQUI1QTg3NzI5RDQ0Q0NBRDNENzNCM0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyOEU3ODBEQ0ZFN0I5RjBB
QjVBODc3MjlENDRDQ0FEM0Q3M0IzQTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzODMxMmUzMjMzMzMyZTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC16S8wDQYJKoZIhvcNAQELBQADggEBAF1eToYX
O1SWJKFTvMzZnwGtywrXGaGCP8YAPwdBPd5PqLLxiBcVF9afdJZJdqjIgQL+4XSk
LTgu0Nql7YXjetj3GrsIJBQtUdfrQQeTJxKhEbFwZ6MmR4uVHlw4meKGTCnsyr1P
8dYf8TlJpoUWkL2Ii83pk5JlUKMFTsXXN9Vu8RG89F5A79EUxsE4Wmv7rLSMe/g9
5G25Bt4uJYtQecXig309plmECpp7Oy0hfVGMUyVF0Ff0f2GLox/YQksM7LTC1+tl
l5PbZl2Nx0i1XonWX+wWuOH2EOocLUZOjqFpPEnvdfJhTJxdVMbC0UhVzTlbgVEB
7lsClyHj3U8W+dY=
-----END CERTIFICATE-----
Generated at Sun May 24 14:45:25 2026 by rpki-client