Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa
File:                     3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (raw, json)
Hash identifier:          LJ8Tr5ZeDndtul0sU/SOZpbRBvU2Q/ZxTdkTfmjkCl0=
Subject key identifier:   F6:62:19:DF:E1:C9:AB:59:D4:09:8A:C7:60:43:A7:D3:F2:42:B2:03
Certificate issuer:       /CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
Certificate serial:       01312F809F944EBF1A69F00B66D728716150345F
Authority key identifier: C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa
Signing time:             Mon 12 Oct 2026 19:15:16 +0000
ROA not before:           Mon 12 Oct 2026 19:10:16 +0000
ROA not after:            Mon 11 Oct 2027 19:15:16 +0000
asID:                     264437
IP address blocks:        131.221.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl
                          rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 20:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:31:2f:80:9f:94:4e:bf:1a:69:f0:0b:66:d7:28:71:61:50:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
        Validity
            Not Before: Oct 12 19:10:16 2026 GMT
            Not After : Oct 11 19:15:16 2027 GMT
        Subject: CN=F66219DFE1C9AB59D4098AC76043A7D3F242B203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:42:b8:5c:e0:7b:b3:ac:0e:59:8a:99:26:
                    01:dd:5b:18:12:5d:04:d0:52:98:fa:c4:a1:4b:31:
                    f3:cc:52:eb:b8:37:88:16:8e:82:f4:54:ca:99:7f:
                    99:be:0f:e7:94:a6:ed:13:24:6d:79:68:0c:b5:ec:
                    7d:f1:59:26:d9:ae:77:b7:24:21:dd:63:b6:a3:c9:
                    6c:3d:48:84:ae:08:92:ea:d4:ff:04:73:f9:b4:52:
                    96:0b:b6:bb:ba:80:02:07:0c:4c:44:29:c3:89:82:
                    ea:98:a6:52:60:a9:16:cc:58:10:5c:a5:6a:79:72:
                    b3:01:cd:26:57:b5:ea:35:65:b0:3c:c8:24:44:c0:
                    17:42:36:a1:fb:e7:d1:4f:ec:68:dc:a1:28:36:5c:
                    a6:ec:78:56:6d:20:2e:72:da:1d:f8:f6:90:ca:a9:
                    b5:c4:9f:07:30:62:50:45:80:61:78:c0:ca:82:de:
                    10:84:5d:4d:16:40:78:ab:45:7a:94:0a:ba:1e:ee:
                    9f:58:0a:b1:c2:c1:af:8c:4d:de:d1:09:cb:fa:db:
                    94:df:53:7f:cc:b5:aa:71:f7:19:69:f1:9c:1a:6c:
                    31:8f:58:da:5c:e5:44:06:77:7a:29:b6:6b:c9:0f:
                    64:eb:50:3a:b9:b6:21:a9:92:2c:a3:b3:04:3c:f4:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:19:DF:E1:C9:AB:59:D4:09:8A:C7:60:43:A7:D3:F2:42:B2:03
            X509v3 Authority Key Identifier:
                keyid:C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:13:fa:e8:17:98:86:78:e0:43:7f:6e:bf:84:aa:2c:00:cd:
         a6:27:a2:dd:d6:05:d8:bd:63:d6:00:4a:fe:ed:bb:4d:b4:92:
         db:9c:2f:5c:56:29:93:43:92:15:d4:69:30:a6:05:57:ec:f6:
         12:30:77:28:3e:fa:9a:46:5a:f7:a8:c3:c2:5a:56:4c:37:ed:
         17:e7:e9:63:84:01:75:ca:c4:5c:a1:95:26:5e:36:ac:ff:65:
         89:5b:d7:37:b7:a4:3d:fc:75:e6:4f:a1:10:1d:b6:39:fd:d6:
         5b:b8:53:b3:5e:0e:41:f3:1c:b7:e8:07:58:38:9c:28:b0:47:
         12:f9:9c:b2:f5:95:dc:ee:51:a6:83:1e:20:ea:9a:d6:fd:c3:
         81:ab:77:40:c6:22:4f:3e:52:7a:68:28:17:e8:31:b5:f0:6d:
         42:c0:39:a9:e3:3c:e0:9e:95:95:1c:a4:39:8d:d8:e0:68:5e:
         4e:d0:b2:d7:d0:7f:5b:52:26:ed:d6:ad:8d:cb:fb:be:5c:2f:
         8f:0e:7d:bb:59:66:44:db:f4:93:f9:0e:ff:8b:f5:78:df:c0:
         13:56:bb:d7:12:03:1d:8d:45:12:73:f9:4d:41:b3:3f:c4:df:
         d6:ea:0b:c1:d9:36:83:32:b2:8e:2d:e9:d5:df:62:7c:16:cd:
         f3:7e:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 15:11:45 2026 by rpki-client