Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3133312e3130382e3130342e302f32322d3332203d3e20323638393736.roa
File:                     3133312e3130382e3130342e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          R9QaPVT+RDdn9OssEh/XZFsegw/ViP0MR02D4qkSrts=
Subject key identifier:   A7:8D:6B:F3:88:F0:7B:3C:A9:10:1C:E4:81:22:20:DB:88:B6:86:B5
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       57EF63F5A726F7BF379A1F8A73339F2397F065C3
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3133312e3130382e3130342e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:04 +0000
ROA not before:           Mon 11 May 2026 17:42:04 +0000
ROA not after:            Mon 10 May 2027 17:47:04 +0000
asID:                     268976
IP address blocks:        131.108.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ef:63:f5:a7:26:f7:bf:37:9a:1f:8a:73:33:9f:23:97:f0:65:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:04 2026 GMT
            Not After : May 10 17:47:04 2027 GMT
        Subject: CN=A78D6BF388F07B3CA9101CE4812220DB88B686B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:b5:69:89:78:10:4b:ef:8c:54:e3:80:78:
                    92:ff:34:66:3c:01:be:83:22:e6:75:16:78:ae:30:
                    33:d0:4e:1d:07:d1:50:ea:1e:32:b5:30:ab:a5:ff:
                    d1:16:a4:d5:aa:a5:18:e5:9a:06:d1:0a:b7:70:09:
                    a8:6f:e7:4c:6b:7c:00:b9:d0:8b:41:fd:08:93:a6:
                    08:36:2b:1c:4b:f3:81:e0:33:1d:50:f3:09:35:5d:
                    08:ba:47:fe:ef:66:80:b7:76:35:fe:5f:d6:97:a0:
                    e4:b1:df:97:99:29:57:96:5c:b0:52:15:03:f6:8f:
                    02:b1:cc:68:0c:70:84:ed:16:96:46:16:51:f6:de:
                    df:76:5a:4e:49:33:00:84:3d:a5:52:38:46:dc:12:
                    5d:24:6b:ca:6c:c1:f3:b8:86:79:af:17:40:c9:b0:
                    45:e5:4a:8f:bc:49:46:3d:de:a8:65:a5:19:0c:8a:
                    35:08:4c:82:03:51:8c:e6:38:a9:bf:b2:68:91:d0:
                    c6:f8:81:33:42:4b:81:e3:cf:42:a3:8b:8e:bf:f0:
                    0c:85:c0:6a:8e:f9:70:a3:51:29:b5:da:d9:17:41:
                    3a:04:a6:30:01:47:e1:ad:97:3f:0f:8d:75:cf:3a:
                    ec:85:67:e0:15:5d:66:33:b8:e5:e9:09:8c:2c:eb:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:6B:F3:88:F0:7B:3C:A9:10:1C:E4:81:22:20:DB:88:B6:86:B5
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3133312e3130382e3130342e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:76:6c:c3:e9:38:9f:ff:b8:1d:c9:e8:6b:68:05:df:e9:06:
         17:6a:32:1f:f4:fb:35:5e:65:77:5a:38:fb:94:8d:eb:ac:07:
         07:9a:8f:ce:7b:6a:ca:d9:1f:a4:c0:0b:80:2a:76:60:d5:83:
         8c:54:ef:29:ae:20:e9:f2:3e:0b:91:8c:b0:50:66:17:a8:55:
         54:84:6e:74:b5:5b:b1:0b:48:dd:b2:7a:99:6e:5e:df:a4:26:
         2f:6c:1a:f1:ab:8b:32:21:d0:10:1f:44:26:d0:4e:86:79:db:
         05:a4:d0:4c:9d:66:e4:d9:82:9b:56:15:46:2b:4b:77:19:03:
         90:22:5e:f8:e4:5d:2d:2f:c4:34:25:5e:11:12:2b:9a:f7:24:
         a2:70:7d:1f:d6:97:7a:96:bc:26:1b:da:e8:a8:8e:47:a6:ee:
         3f:94:7b:b1:65:b0:2b:c2:59:9f:35:ba:9d:c7:32:16:9e:bf:
         cf:57:de:c8:9f:2a:33:5c:70:8c:38:9d:17:c0:e4:f0:1c:a2:
         7e:ea:74:53:53:df:cc:a9:49:7e:fd:89:2a:29:be:df:4c:bc:
         a5:42:d3:48:af:b4:e7:4c:34:aa:6c:cc:22:53:88:f5:2d:9f:
         f4:64:9a:18:7d:03:fb:a4:3b:48:4a:bd:d9:3a:26:fe:ce:c4:
         be:3a:b2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:35 2026 by rpki-client