Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3332203d3e20323639373035.roa
File:                     3133312e3235352e3231362e302f32322d3332203d3e20323639373035.roa (raw, json)
Hash identifier:          jMvRHWTyUxUZEBUC2PPgF+6seaUPyjM5walR75GwY5c=
Subject key identifier:   30:02:B5:3D:1C:FD:D3:17:D4:7C:E8:4F:A1:95:33:9F:83:B5:0E:9A
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       53C3E8BDC6D105D12675BD410E1ED3EE2FB9E02C
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3332203d3e20323639373035.roa
Signing time:             Fri 24 Jul 2026 14:34:58 +0000
ROA not before:           Fri 24 Jul 2026 14:29:58 +0000
ROA not after:            Fri 23 Jul 2027 14:34:58 +0000
asID:                     269705
IP address blocks:        131.255.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c3:e8:bd:c6:d1:05:d1:26:75:bd:41:0e:1e:d3:ee:2f:b9:e0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Jul 24 14:29:58 2026 GMT
            Not After : Jul 23 14:34:58 2027 GMT
        Subject: CN=3002B53D1CFDD317D47CE84FA195339F83B50E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:b8:68:8f:3f:1f:cf:a8:41:6e:05:1c:a8:
                    dc:0e:2b:a0:7a:99:1d:00:f8:06:17:cc:d5:5c:a3:
                    49:03:a5:10:13:e3:38:5a:63:c4:44:f9:a9:d8:af:
                    c1:c2:20:7a:24:bf:af:eb:44:57:72:2b:16:cc:c6:
                    46:f9:c3:0e:fa:d3:b1:92:5a:79:74:a6:c9:16:d1:
                    39:4f:55:7d:d9:f7:b3:46:5f:38:f7:d0:6f:a5:77:
                    23:04:88:de:49:44:c5:61:21:06:f6:98:16:f4:40:
                    5b:4b:ea:df:c4:51:0f:b4:cc:5a:04:55:e9:50:70:
                    0e:e1:33:e4:93:4d:4f:a7:e8:cf:03:04:b0:61:6d:
                    0a:28:59:1e:a9:0c:60:79:7f:0c:e5:30:f5:b3:32:
                    04:bf:71:b3:2c:46:f4:2f:77:3a:41:24:dc:4e:b4:
                    7e:4c:b7:a4:57:90:7c:24:e2:11:af:3e:75:64:14:
                    64:fe:06:42:8f:04:7a:9b:8d:ca:7d:1f:b7:15:d3:
                    9a:b4:8d:3b:ff:c9:e3:ee:e8:be:59:5e:73:8d:8b:
                    64:e0:c9:33:1f:ec:3b:b5:5b:da:fb:d6:cf:a3:72:
                    cc:6e:13:15:58:d9:ba:58:8b:32:4e:d1:dc:bd:46:
                    d2:74:23:ca:a1:7e:48:e6:55:2f:8a:6f:76:90:f6:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:B5:3D:1C:FD:D3:17:D4:7C:E8:4F:A1:95:33:9F:83:B5:0E:9A
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3332203d3e20323639373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:30:1e:cc:ee:f9:e3:17:50:fa:4d:26:df:94:40:96:6a:
         05:62:e7:d5:6b:fa:7c:e6:96:3e:dc:de:1e:f6:41:9d:5d:21:
         f0:30:1f:1c:82:4f:0f:98:18:0a:03:9c:18:0b:0e:ec:d2:84:
         43:58:fd:95:3a:a3:0b:9d:67:24:33:05:b9:2e:2a:b5:1a:ac:
         9e:b6:3f:2a:b3:5e:af:36:e5:6c:8d:c1:4a:a1:6e:9f:11:f8:
         88:b6:70:76:a2:f3:8a:a3:f5:d9:05:b3:ae:fe:00:8a:9b:e3:
         8a:5d:9e:3f:52:1e:e6:c9:e3:06:68:2d:5a:9b:a5:c1:c5:04:
         0b:f4:db:cd:82:00:2c:66:63:56:ad:36:fb:b8:1c:68:db:61:
         29:68:b4:ca:d8:54:fc:8d:19:18:67:21:90:32:9f:9a:31:ee:
         74:5c:fe:7c:76:da:bb:11:21:9f:2d:fe:4f:84:c1:01:8a:d7:
         47:cd:c7:ea:07:4b:fd:8d:8e:09:8e:de:80:ae:60:6c:ed:a5:
         75:25:b6:6c:c8:23:7e:5d:73:7f:7d:36:36:f8:cf:01:50:2f:
         ad:64:ce:e2:a6:84:ee:73:54:92:ba:9a:51:e7:08:9b:e1:70:
         c6:9e:75:eb:d8:51:0b:1f:3f:e1:38:84:14:d9:28:3d:8b:e7:
         ba:b1:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:24 2026 by rpki-client