Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/3138312e3233332e3130342e302f32342d3234203d3e20323731343635.roa
File:                     3138312e3233332e3130342e302f32342d3234203d3e20323731343635.roa (raw, json)
Hash identifier:          txSzodpzbmR+zEP7FyE9EDqW46CxxYyb4B1GnD8Lb7I=
Subject key identifier:   95:7B:8D:CE:4A:22:25:C7:A6:0C:9C:73:DB:63:32:F1:C3:AE:56:1D
Certificate issuer:       /CN=931F308D9C27538BEB9C7F049A39598195D584C7
Certificate serial:       57D3F5F34C8F0BB45276D7AA6E7FF2A42EEEEF7B
Authority key identifier: 93:1F:30:8D:9C:27:53:8B:EB:9C:7F:04:9A:39:59:81:95:D5:84:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F308D9C27538BEB9C7F049A39598195D584C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/3138312e3233332e3130342e302f32342d3234203d3e20323731343635.roa
Signing time:             Thu 11 Sep 2025 19:52:56 +0000
ROA not before:           Thu 11 Sep 2025 19:47:56 +0000
ROA not after:            Thu 10 Sep 2026 19:52:56 +0000
asID:                     271465
IP address blocks:        181.233.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/931F308D9C27538BEB9C7F049A39598195D584C7.crl
                          rsync://rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/931F308D9C27538BEB9C7F049A39598195D584C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F308D9C27538BEB9C7F049A39598195D584C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 12:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d3:f5:f3:4c:8f:0b:b4:52:76:d7:aa:6e:7f:f2:a4:2e:ee:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931F308D9C27538BEB9C7F049A39598195D584C7
        Validity
            Not Before: Sep 11 19:47:56 2025 GMT
            Not After : Sep 10 19:52:56 2026 GMT
        Subject: CN=957B8DCE4A2225C7A60C9C73DB6332F1C3AE561D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:52:b1:13:2c:4b:91:af:ea:04:6f:d6:b9:
                    b1:ef:f2:5d:c3:1e:c2:a9:d4:e0:0e:66:fb:a2:37:
                    a1:e7:5a:90:b5:d1:5e:fc:5f:bf:e7:02:cb:cb:72:
                    c4:3d:0c:87:ff:95:48:bf:c6:f8:ac:18:80:10:c2:
                    91:4d:cd:2b:87:74:18:a0:d1:2c:28:96:f1:e1:67:
                    68:5a:40:3c:70:33:ed:4e:fe:a5:0e:28:5a:93:dd:
                    40:54:55:f5:03:64:e1:d3:ff:10:9e:af:b9:6c:78:
                    02:42:5d:94:e2:41:59:ca:66:d7:62:41:f4:1c:6e:
                    21:b7:af:b0:b0:7d:23:47:25:c9:54:69:0b:83:7d:
                    7d:6e:2c:4a:62:47:47:0d:a1:20:bc:93:b2:d1:25:
                    ad:e6:af:2c:20:03:38:dd:eb:8a:47:30:ac:ce:ee:
                    b8:4e:a8:2d:10:8f:76:67:86:ad:ee:74:da:03:46:
                    c1:91:22:e9:be:5a:5f:97:51:3a:01:57:a7:b6:b6:
                    c0:8e:43:4a:73:fc:fc:29:ae:ac:31:5d:6d:a7:1c:
                    a0:78:0b:8c:30:4a:bd:22:01:09:d0:24:c9:29:10:
                    cb:94:b5:4a:8a:e7:7f:5b:22:38:8f:d6:1c:38:2f:
                    c2:d0:19:34:13:f9:ab:b7:3d:ac:2e:e6:48:00:48:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:8D:CE:4A:22:25:C7:A6:0C:9C:73:DB:63:32:F1:C3:AE:56:1D
            X509v3 Authority Key Identifier:
                keyid:93:1F:30:8D:9C:27:53:8B:EB:9C:7F:04:9A:39:59:81:95:D5:84:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/931F308D9C27538BEB9C7F049A39598195D584C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F308D9C27538BEB9C7F049A39598195D584C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EY9kPSp2BZ7yXLNZjV43wxi3fpFYwDtcuL5vj3uTEwNf/0/3138312e3233332e3130342e302f32342d3234203d3e20323731343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:1c:47:56:fb:98:02:fc:37:f3:b9:2b:f3:52:c4:92:94:1d:
         9e:58:31:19:9d:eb:07:19:20:c1:91:88:95:59:e6:48:ab:14:
         df:88:75:af:e6:2f:a8:c3:a9:d8:55:b8:95:3d:ae:bb:59:8e:
         90:8e:1a:13:9f:a0:53:4b:ae:e3:4b:98:51:04:46:0c:f5:e1:
         b8:eb:46:88:ee:95:65:84:54:1d:83:8a:ba:f9:8f:72:f0:cf:
         96:28:22:43:1c:08:62:9c:ed:54:7a:22:e1:10:0c:3d:d7:f8:
         32:c1:0d:e0:e9:4b:fa:7d:71:51:e7:c2:6a:3c:51:0a:95:a7:
         65:8d:e8:a6:c0:e4:5b:16:49:ee:30:20:d7:4b:d0:2a:d4:dc:
         52:b9:8f:c8:37:e3:51:15:e9:31:a5:18:13:f4:1b:ca:0d:e5:
         ec:b3:3f:8b:5b:46:3a:f1:03:c6:f8:43:a6:b2:ff:76:a0:59:
         47:39:a9:c2:51:47:33:a2:8d:a3:18:fa:57:c0:7d:e1:6b:2f:
         84:c6:8b:e0:e9:80:f6:c2:75:53:f2:28:6c:8e:c8:49:10:dc:
         c3:6d:49:2f:e1:7e:31:0a:fa:1d:64:45:97:88:ba:50:dc:d7:
         79:83:03:bf:38:92:bd:69:92:9c:6c:6d:f5:fe:4f:d0:ee:66:
         81:9b:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:53:21 2025 by rpki-client