Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa
File:                     3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          oVOFbPm22WQgol8x/+qkV2thf0v/b3Up9A/Y3/py8Xo=
Subject key identifier:   74:AF:84:E8:16:15:65:E2:1B:A5:23:BD:5F:C0:2B:AF:32:5D:B2:DD
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       7621ADDB55975EC69188C7A237F2D77229E1F6E7
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 27 Jun 2026 19:47:32 +0000
ROA not before:           Sat 27 Jun 2026 19:42:32 +0000
ROA not after:            Sat 26 Jun 2027 19:47:32 +0000
asID:                     262393
IP address blocks:        131.72.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 04:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:21:ad:db:55:97:5e:c6:91:88:c7:a2:37:f2:d7:72:29:e1:f6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jun 27 19:42:32 2026 GMT
            Not After : Jun 26 19:47:32 2027 GMT
        Subject: CN=74AF84E8161565E21BA523BD5FC02BAF325DB2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:36:7a:bf:44:74:fd:47:50:50:55:c2:eb:
                    42:88:48:08:b9:5d:09:54:eb:51:51:3a:30:02:99:
                    50:c9:65:d8:95:76:20:65:3f:63:5e:db:18:84:98:
                    34:36:ae:15:c5:c3:84:59:14:b5:7e:8b:49:79:71:
                    3e:77:08:a1:29:39:30:aa:23:78:bb:40:26:27:66:
                    02:75:f0:2d:3a:7d:5e:53:a5:18:4d:00:5b:e9:eb:
                    72:6d:dc:bd:c9:9c:a0:0e:c6:07:de:34:ad:2a:b6:
                    e7:45:96:43:90:05:d5:2d:50:49:b9:64:6f:64:2c:
                    af:96:cf:ab:dc:41:07:a7:9e:3b:77:94:1a:ad:d0:
                    30:8d:3a:84:a2:e7:fd:fc:80:24:3e:6e:0c:7c:e1:
                    89:aa:aa:34:e7:db:93:49:a1:e5:97:31:a6:96:d9:
                    23:f2:9c:eb:48:bf:e7:da:ee:a3:6d:c6:81:18:9c:
                    8f:7c:08:d8:51:dc:9e:12:bd:75:e2:ac:7d:56:49:
                    b7:da:1e:e5:21:86:4e:fa:d6:da:4c:d4:f5:87:8e:
                    38:05:be:5d:b9:5a:b3:63:f8:bb:7f:f0:44:81:78:
                    dc:18:99:7d:df:0c:05:61:6c:3f:d6:0b:d1:90:79:
                    9e:be:66:72:74:89:62:8f:80:58:09:6c:0d:52:30:
                    8a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AF:84:E8:16:15:65:E2:1B:A5:23:BD:5F:C0:2B:AF:32:5D:B2:DD
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234352e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:1e:17:36:63:03:be:41:37:aa:e6:12:85:32:ac:eb:68:7f:
         1a:bc:90:1c:ea:af:3d:37:a8:46:59:05:c8:f1:60:41:14:d5:
         20:67:b9:3a:32:fd:3e:52:4c:13:1c:5e:78:2e:20:8c:11:a1:
         fd:00:e4:20:29:f6:90:34:bc:ea:dc:48:8e:42:f5:fe:ef:7d:
         ad:d5:40:c3:ee:3e:bb:c9:26:cc:8f:2f:93:af:4a:17:28:dc:
         2a:60:08:4a:03:b7:9c:75:17:7d:91:91:63:55:e5:22:8f:db:
         f7:a0:e8:cc:5a:79:09:e7:47:a7:56:59:14:e9:7e:28:f4:16:
         5c:36:73:d9:5a:90:43:0e:19:00:4c:c8:e1:50:ef:05:7a:4e:
         3d:57:9d:3a:83:35:3e:1b:52:4d:eb:0b:7f:b3:9d:14:9b:76:
         f4:e9:cd:1a:c4:3d:4e:ae:69:73:67:fb:a3:0c:28:1d:a8:02:
         ad:9b:72:a3:c9:23:21:f9:e1:46:90:a3:60:0d:7b:47:f7:f6:
         ec:10:52:6d:a1:bd:d7:94:27:07:59:97:a8:fb:3b:01:ae:f8:
         d2:5d:89:e2:4d:95:d8:56:9d:06:c1:47:fc:a1:89:8f:a2:4b:
         c4:92:28:c1:eb:d8:33:57:1c:f6:83:59:16:5a:dd:f5:66:c8:
         91:e2:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:34:12 2026 by rpki-client