Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32342d3234203d3e20323732353438.roa
File:                     3138312e3233322e3233322e302f32342d3234203d3e20323732353438.roa (raw, json)
Hash identifier:          1+Sx8ebSYiVilNBXYEZayPMFTNJ2BVu78O2MHzNWeTU=
Subject key identifier:   12:5B:D2:71:2C:3B:F3:0B:01:1D:81:BD:D3:74:B8:A3:D9:1E:CB:7A
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       17E3D2A47026300590DDE485433D718C020D5C23
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32342d3234203d3e20323732353438.roa
Signing time:             Wed 28 Oct 2026 01:12:53 +0000
ROA not before:           Wed 28 Oct 2026 01:07:53 +0000
ROA not after:            Wed 27 Oct 2027 01:12:53 +0000
asID:                     272548
IP address blocks:        181.232.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 06:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e3:d2:a4:70:26:30:05:90:dd:e4:85:43:3d:71:8c:02:0d:5c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Oct 28 01:07:53 2026 GMT
            Not After : Oct 27 01:12:53 2027 GMT
        Subject: CN=125BD2712C3BF30B011D81BDD374B8A3D91ECB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:59:70:74:b3:57:e6:92:f6:56:f1:3f:03:
                    72:01:57:02:e8:b6:bb:a6:4a:f6:1d:c1:37:50:3a:
                    8e:50:7d:0a:91:87:27:20:bc:95:d2:a3:5f:c1:50:
                    28:74:ed:83:2a:42:a2:6f:0f:59:32:16:83:bc:74:
                    4d:43:ae:e7:11:79:1b:e6:98:27:89:24:3f:c8:41:
                    c8:0d:92:41:26:a9:d4:71:ad:3a:14:07:49:31:0d:
                    55:8e:3c:df:35:49:97:49:70:15:1c:f6:a6:c2:e4:
                    43:91:10:74:b1:1c:84:e1:84:b7:6f:0b:ba:10:2e:
                    54:c3:74:6c:f2:5f:94:83:89:c9:ac:11:5d:08:9a:
                    a6:5f:80:f5:fa:3b:2f:7a:21:46:2e:7b:5e:ed:cc:
                    8f:df:b5:b9:f1:45:fe:2d:7c:98:1c:ea:06:79:6f:
                    d0:6a:f7:a3:5a:b1:6a:5c:ea:9c:bc:06:09:08:53:
                    2c:8e:68:60:6f:1e:ef:dc:ef:4b:3d:7a:cb:50:cd:
                    0c:0c:79:78:fe:b7:4d:92:cf:19:53:cd:76:06:c7:
                    09:72:bc:d6:47:9c:2f:1d:83:81:2c:31:d8:21:79:
                    69:57:70:99:e3:46:f6:2a:2c:2a:cf:09:73:73:3e:
                    af:6d:ae:b4:11:ed:f6:ed:2a:61:d7:df:f5:ee:65:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:D2:71:2C:3B:F3:0B:01:1D:81:BD:D3:74:B8:A3:D9:1E:CB:7A
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32342d3234203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:86:67:c0:93:91:31:e6:00:2b:f4:c5:39:ca:8d:ab:7b:
         15:49:a2:04:29:08:a3:d9:f2:98:98:e8:28:1c:f7:06:97:f3:
         e3:49:b7:25:42:c5:65:aa:13:49:ea:b2:a2:00:32:21:2a:e1:
         bd:af:99:07:b4:5f:af:56:89:9f:6c:20:1e:24:3f:f4:06:17:
         a6:92:16:3f:cb:eb:f0:d1:97:0c:d2:c2:3b:d1:41:81:54:b7:
         16:7a:81:a1:bf:f2:58:d9:5a:c8:22:3c:0f:74:5f:ec:52:fe:
         b1:81:d9:aa:62:cc:c7:27:62:6c:11:22:b6:1a:fd:9d:60:8d:
         6c:0b:ac:5a:24:32:e8:00:b8:c3:a6:8c:46:2d:0e:17:b2:90:
         2c:96:12:58:1e:3d:b6:dc:6d:bd:18:82:03:09:06:4f:a3:03:
         d3:3e:e2:d8:43:9f:b4:f3:0a:d4:a9:78:46:2e:87:ee:0a:d4:
         a7:45:de:ac:18:4b:ce:7c:b5:a7:00:75:40:80:d9:cf:79:49:
         ec:79:6e:14:e4:38:ec:65:9e:e4:c6:56:07:53:37:d8:96:38:
         f3:76:54:e4:50:a8:29:f1:46:06:d7:5b:d5:63:4f:17:d4:88:
         80:34:f5:7b:80:32:48:26:07:f4:8a:fa:ff:9a:80:46:2b:b1:
         06:70:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:20:26 2026 by rpki-client