Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa
File:                     3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (raw, json)
Hash identifier:          s+OiXGgMCmenZc9CZVwvWZHXImZmNO1G/ETFwV2PIFU=
Subject key identifier:   E0:C3:11:7B:F9:DF:C7:F6:30:F9:38:45:6A:BF:30:4D:B8:DC:83:7B
Certificate issuer:       /CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
Certificate serial:       521A950C80F917E3FF8B2F92C3CF44261715B151
Authority key identifier: 34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa
Signing time:             Mon 02 Nov 2026 19:50:08 +0000
ROA not before:           Mon 02 Nov 2026 19:45:08 +0000
ROA not after:            Mon 01 Nov 2027 19:50:08 +0000
asID:                     263468
IP address blocks:        131.255.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl
                          rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 15:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1a:95:0c:80:f9:17:e3:ff:8b:2f:92:c3:cf:44:26:17:15:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3477F1A34EC4A570D92362A3B165CB03FA1A8560
        Validity
            Not Before: Nov  2 19:45:08 2026 GMT
            Not After : Nov  1 19:50:08 2027 GMT
        Subject: CN=E0C3117BF9DFC7F630F938456ABF304DB8DC837B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:08:44:00:ea:3d:f4:12:53:26:8a:13:c1:
                    32:3b:48:66:fc:3a:89:89:18:c7:48:c2:c9:ff:fa:
                    18:c6:d9:89:0e:ed:49:fc:11:26:bf:ef:72:67:a3:
                    5b:1e:74:a8:86:fb:e3:26:f7:97:72:ea:27:93:6d:
                    ad:17:44:de:a3:11:5e:9b:9d:9d:b9:96:f4:19:c1:
                    5e:1a:75:43:7d:83:d3:78:34:4a:1f:9a:5e:33:fd:
                    de:8e:47:f8:a7:62:15:fa:0d:83:50:57:da:41:88:
                    9b:74:8c:a2:4a:34:c2:2e:46:75:d9:a4:f2:86:e9:
                    98:cc:54:7c:82:80:b8:47:ae:86:06:ce:2e:36:9b:
                    cd:03:59:3c:e6:c7:d2:99:53:fd:40:18:3f:03:0b:
                    fc:80:f6:18:e5:c3:08:34:6b:d6:fb:1f:b6:79:93:
                    f9:08:ae:d6:5c:9f:d0:40:38:2b:ec:68:cf:20:c3:
                    a2:0f:6b:f1:ef:bd:6a:19:08:7e:00:22:ed:a2:85:
                    84:b4:12:be:c9:96:cb:a2:e8:41:3a:4a:d3:6a:1e:
                    30:af:05:8a:50:41:b8:63:51:fd:d4:3e:ce:a6:f1:
                    bd:2a:e0:91:ce:4b:f2:fd:ba:a8:d3:ab:46:c4:58:
                    3c:08:9a:28:9c:2a:f6:52:34:58:64:eb:cc:d5:d8:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:11:7B:F9:DF:C7:F6:30:F9:38:45:6A:BF:30:4D:B8:DC:83:7B
            X509v3 Authority Key Identifier:
                keyid:34:77:F1:A3:4E:C4:A5:70:D9:23:62:A3:B1:65:CB:03:FA:1A:85:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3477F1A34EC4A570D92362A3B165CB03FA1A8560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3477F1A34EC4A570D92362A3B165CB03FA1A8560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:d0:49:7c:04:1c:6e:82:5d:ed:65:90:ab:63:81:f9:83:64:
         dc:06:57:c6:45:b0:4f:4a:0a:f1:57:f5:fb:f0:17:20:0c:2b:
         5f:ce:29:84:bf:b4:67:1b:41:93:43:b6:15:da:b8:18:55:07:
         b6:a8:ce:ce:31:b4:d2:a2:8b:98:cf:38:19:ae:a4:03:f4:df:
         de:dc:85:73:77:27:6e:07:6f:2a:a2:69:7e:28:1e:d7:ce:c3:
         fd:b9:03:05:d6:4d:73:7a:74:25:d4:35:2c:2b:99:4e:14:b3:
         7c:62:10:23:95:2d:69:c8:11:04:d9:f7:3d:bf:1b:ad:47:ad:
         b8:22:ca:c5:eb:15:e4:23:9f:8f:43:00:61:25:31:5f:5e:3a:
         30:e5:51:61:b0:e1:29:ea:2b:7f:a4:0b:18:05:fd:b5:a1:a7:
         9c:f4:9d:06:6a:f4:07:44:e2:10:d7:e2:8f:12:98:3b:c5:9e:
         d8:12:26:bc:a4:ec:28:65:04:e1:52:d2:81:87:43:c9:26:01:
         c4:13:59:b3:91:52:ff:40:1e:18:b5:22:62:45:2f:4b:c1:20:
         e6:a2:33:99:95:92:31:d7:5c:d3:61:63:96:37:f2:d1:76:a6:
         dc:42:4e:16:b4:49:a6:d7:e1:3a:27:c5:03:56:e6:7e:95:8c:
         6a:1e:d3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:03:28 2026 by rpki-client