Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32342d3234203d3e20323731333839.roa
File:                     3138312e3138392e342e302f32342d3234203d3e20323731333839.roa (raw, json)
Hash identifier:          /biPoJmGIrMZTV4+ow2CX4dgtSZGd52iEfk/GmjwWqA=
Subject key identifier:   1A:FB:55:4B:81:46:58:E5:DA:80:11:B3:44:99:C7:79:FE:CC:05:2A
Certificate issuer:       /CN=88F92ADC45A9220685E988BDCAB1F73863AC5355
Certificate serial:       7015372DFF4E1457FF46C9B6440CC93F7131AA85
Authority key identifier: 88:F9:2A:DC:45:A9:22:06:85:E9:88:BD:CA:B1:F7:38:63:AC:53:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32342d3234203d3e20323731333839.roa
Signing time:             Fri 07 Aug 2026 18:27:03 +0000
ROA not before:           Fri 07 Aug 2026 18:22:03 +0000
ROA not after:            Fri 06 Aug 2027 18:27:03 +0000
asID:                     271389
IP address blocks:        181.189.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.crl
                          rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:15:37:2d:ff:4e:14:57:ff:46:c9:b6:44:0c:c9:3f:71:31:aa:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F92ADC45A9220685E988BDCAB1F73863AC5355
        Validity
            Not Before: Aug  7 18:22:03 2026 GMT
            Not After : Aug  6 18:27:03 2027 GMT
        Subject: CN=1AFB554B814658E5DA8011B34499C779FECC052A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:13:82:87:96:e9:e1:79:31:f7:5d:da:29:
                    40:7b:59:a1:5e:dc:7e:a6:30:1b:dc:39:3b:c9:a5:
                    88:fe:f0:ad:d1:9d:0e:d1:a6:60:7d:fe:ed:19:80:
                    4b:f3:5b:87:a5:c9:c7:6b:9a:31:a8:3a:76:28:7d:
                    4b:f8:b2:19:34:02:47:ec:c1:8d:05:20:1f:d0:23:
                    e1:08:ca:b3:f1:26:2e:8d:72:50:e7:0b:a8:77:06:
                    9a:6f:04:09:7e:3c:ec:e1:bb:db:53:40:78:8b:46:
                    bc:b6:6d:22:3f:3e:1b:b4:5f:53:d2:98:e5:7b:8c:
                    d7:66:00:d2:69:89:c5:1b:fc:e2:bb:ef:e5:a1:cf:
                    38:63:c2:ba:e5:3d:a5:ce:e6:8a:d2:3d:0e:40:43:
                    3a:4d:a9:4c:3e:13:bb:c4:71:eb:d3:dc:03:df:13:
                    c1:9a:9d:0f:f8:4b:25:c1:b4:cf:30:9a:0c:21:3b:
                    ae:ff:24:c7:c4:04:68:f7:63:08:2e:c1:cb:7b:91:
                    56:1b:23:90:3e:66:2a:60:dd:e3:a1:a7:a4:ac:1b:
                    6d:2c:c7:1e:9d:af:65:fb:9f:b8:82:ec:ad:e2:70:
                    83:de:9d:2c:8a:92:b3:36:e9:35:f4:39:fc:1e:75:
                    fe:b4:96:a3:f9:48:05:81:e7:1c:4b:de:df:ad:36:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FB:55:4B:81:46:58:E5:DA:80:11:B3:44:99:C7:79:FE:CC:05:2A
            X509v3 Authority Key Identifier:
                keyid:88:F9:2A:DC:45:A9:22:06:85:E9:88:BD:CA:B1:F7:38:63:AC:53:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32342d3234203d3e20323731333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:65:a7:f7:a5:2a:8a:a0:8f:06:c9:97:e2:e4:99:28:8e:49:
         47:4b:b7:1f:2f:23:e7:f6:8c:95:91:c3:ed:a7:d4:56:3e:64:
         92:55:73:7e:5a:70:34:52:41:b3:1a:84:76:58:44:f1:c7:bf:
         8c:b6:b4:56:4e:32:92:4b:a0:bb:65:a9:5e:0b:2f:6c:ed:dc:
         2d:da:a7:ef:18:34:cb:70:2a:35:e3:3a:74:23:95:17:90:48:
         61:0f:d6:02:89:ef:86:c5:c0:09:58:4c:fc:0f:5e:04:08:e2:
         04:b2:79:ca:97:a1:b0:19:79:23:70:57:da:74:33:50:15:8a:
         7b:b8:b7:e5:8b:36:8e:76:15:82:0b:9f:3c:9e:84:ab:21:ac:
         bf:74:14:2c:0a:d0:48:4c:62:b9:73:c8:14:21:9c:34:ca:53:
         c4:d3:fe:29:aa:6d:b4:a9:5e:f5:f4:7f:84:a5:c8:cc:03:51:
         3d:fb:58:af:61:23:13:97:f4:6c:c3:1b:39:39:77:32:f4:41:
         ad:8f:21:eb:b2:6e:84:6c:4a:61:41:8b:46:fa:3b:54:b9:7e:
         39:50:7a:c2:13:81:07:49:b8:ca:26:8b:97:4c:9f:96:8e:49:
         c2:d4:cb:72:4d:e8:3b:56:26:db:19:2c:b8:51:0c:88:cb:a6:
         e9:50:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:02:44 2026 by rpki-client