Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3332203d3e20323634343134.roa
File:                     3133312e3232312e36302e302f32322d3332203d3e20323634343134.roa (raw, json)
Hash identifier:          84mVDZj4jK3hdKAZVolYIElzpCs3yK4mbmLL8i4H128=
Subject key identifier:   5F:B9:3D:E7:C4:20:30:8E:32:27:FB:E9:73:DD:31:AB:8B:09:96:20
Certificate issuer:       /CN=4DEBE74EF874E44F597E991EC22031DD6645D0E5
Certificate serial:       58ABD5F0095A67A30490FF77D362416EDAA9C5FD
Authority key identifier: 4D:EB:E7:4E:F8:74:E4:4F:59:7E:99:1E:C2:20:31:DD:66:45:D0:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3332203d3e20323634343134.roa
Signing time:             Mon 23 Mar 2026 17:45:06 +0000
ROA not before:           Mon 23 Mar 2026 17:40:06 +0000
ROA not after:            Mon 22 Mar 2027 17:45:06 +0000
asID:                     264414
IP address blocks:        131.221.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.crl
                          rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ab:d5:f0:09:5a:67:a3:04:90:ff:77:d3:62:41:6e:da:a9:c5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DEBE74EF874E44F597E991EC22031DD6645D0E5
        Validity
            Not Before: Mar 23 17:40:06 2026 GMT
            Not After : Mar 22 17:45:06 2027 GMT
        Subject: CN=5FB93DE7C420308E3227FBE973DD31AB8B099620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b4:e8:18:4c:5c:ba:9c:5a:42:62:04:31:ac:
                    b3:c5:bf:eb:02:ad:c4:9c:51:5f:29:5a:0a:d4:dd:
                    c8:51:7c:30:6e:84:a4:4e:5f:10:18:fd:46:18:eb:
                    1a:dd:3e:93:e7:c6:87:53:9f:2b:7f:59:21:6a:84:
                    2c:22:ce:32:3e:e7:86:04:23:a2:22:0b:ce:a7:af:
                    e6:94:e7:b6:ab:e2:0d:fa:2b:69:49:eb:8a:db:c3:
                    8a:99:0c:e8:48:8a:a9:74:2d:08:59:bf:73:f2:8b:
                    e9:95:2a:ed:a7:f9:8b:57:3c:c6:f6:c1:0e:5c:0b:
                    8e:3c:a1:bc:ca:3f:2e:03:02:31:07:6b:e8:5e:f1:
                    88:22:6b:33:35:9c:84:d7:58:ec:29:76:c3:0e:e5:
                    09:4d:f5:3b:16:72:24:3e:18:79:11:34:0d:73:0f:
                    37:92:77:ca:4e:2d:4c:60:78:ac:cf:78:4b:ad:e8:
                    83:86:28:01:39:c7:0b:70:76:cd:88:3d:c9:a0:52:
                    a5:28:69:2f:3a:bf:26:67:e9:80:30:e7:54:4d:6a:
                    03:aa:a0:00:a0:fd:50:6c:78:01:22:14:2c:24:d8:
                    73:38:d1:6c:e6:ee:75:62:b9:c3:a1:01:e3:91:7a:
                    84:96:12:dd:47:22:1b:5e:01:53:ed:90:da:39:a1:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B9:3D:E7:C4:20:30:8E:32:27:FB:E9:73:DD:31:AB:8B:09:96:20
            X509v3 Authority Key Identifier:
                keyid:4D:EB:E7:4E:F8:74:E4:4F:59:7E:99:1E:C2:20:31:DD:66:45:D0:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/4DEBE74EF874E44F597E991EC22031DD6645D0E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DEBE74EF874E44F597E991EC22031DD6645D0E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3332203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:20:7e:1e:44:50:e5:53:78:ca:c9:24:f0:7c:71:8e:8a:c6:
         82:3b:b4:a1:b8:bd:8c:36:bf:3c:94:e2:b6:74:8b:28:96:12:
         c2:73:31:2b:b4:e4:5f:e4:48:f0:cf:27:fc:9c:ec:95:b7:2f:
         d9:48:10:8a:1f:72:80:6c:70:34:73:7a:a7:9b:54:fe:96:05:
         3c:57:ed:f2:84:ed:7e:f8:41:8a:3a:fc:2d:b1:7d:e4:76:de:
         2f:01:5c:86:48:bd:b7:fa:bc:fd:4d:9d:ad:aa:19:1d:46:85:
         f3:6e:d8:4e:23:ba:4c:2c:8d:39:3a:1c:19:38:80:76:b0:8d:
         e8:b4:fb:26:14:2d:4f:c5:8c:99:7b:12:84:f8:4c:01:d0:21:
         fe:e8:63:e2:dc:eb:ba:5d:d6:f6:34:8d:c4:b4:d2:73:e7:6a:
         07:24:fe:17:dd:92:c6:af:96:0b:e7:08:4e:08:f7:41:2b:6b:
         c9:0a:96:7e:38:64:99:e3:2f:1c:41:66:2d:3f:ef:f9:7a:15:
         61:ff:73:1d:03:a5:b6:f0:71:d4:ab:fc:f4:d2:85:3d:7e:f8:
         a9:c0:19:6f:14:06:7a:2a:44:2e:61:f2:5f:16:db:79:d4:b2:
         ab:e9:59:46:f2:7d:81:e6:7a:e1:53:6d:bc:ae:81:da:c8:2c:
         91:99:88:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWKvV8AlaZ6MEkP9302JBbtqpxf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERFQkU3NEVGODc0RTQ0RjU5N0U5OTFFQzIyMDMxREQ2
NjQ1RDBFNTAeFw0yNjAzMjMxNzQwMDZaFw0yNzAzMjIxNzQ1MDZaMDMxMTAvBgNV
BAMTKDVGQjkzREU3QzQyMDMwOEUzMjI3RkJFOTczREQzMUFCOEIwOTk2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7tOgYTFy6nFpCYgQxrLPFv+sC
rcScUV8pWgrU3chRfDBuhKROXxAY/UYY6xrdPpPnxodTnyt/WSFqhCwizjI+54YE
I6IiC86nr+aU57ar4g36K2lJ64rbw4qZDOhIiql0LQhZv3Pyi+mVKu2n+YtXPMb2
wQ5cC448obzKPy4DAjEHa+he8YgiazM1nITXWOwpdsMO5QlN9TsWciQ+GHkRNA1z
DzeSd8pOLUxgeKzPeEut6IOGKAE5xwtwds2IPcmgUqUoaS86vyZn6YAw51RNagOq
oACg/VBseAEiFCwk2HM40Wzm7nViucOhAeOReoSWEt1HIhteAVPtkNo5ofCdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUX7k958QgMI4yJ/vpc90xq4sJliAwHwYDVR0j
BBgwFoAUTevnTvh05E9ZfpkewiAx3WZF0OUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RFemZZNG9tTXRKeDM0TEZ1eUtXb2prNDh0QnVEVE04d3RMakV4amZh
OE0vMC80REVCRTc0RUY4NzRFNDRGNTk3RTk5MUVDMjIwMzFERDY2NDVEMEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERUJFNzRFRjg3NEU0NEY1
OTdFOTkxRUMyMjAzMURENjY0NUQwRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0RXpmWTRvbU10SngzNExGdXlLV29qazQ4dEJ1RFRNOHd0TGpFeGpmYThNLzAv
MzEzMzMxMmUzMjMyMzEyZTM2MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzNDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD3TwwDQYJKoZIhvcNAQELBQADggEBAHcgfh5E
UOVTeMrJJPB8cY6KxoI7tKG4vYw2vzyU4rZ0iyiWEsJzMSu05F/kSPDPJ/yc7JW3
L9lIEIofcoBscDRzeqebVP6WBTxX7fKE7X74QYo6/C2xfeR23i8BXIZIvbf6vP1N
na2qGR1GhfNu2E4jukwsjTk6HBk4gHawjei0+yYULU/FjJl7EoT4TAHQIf7oY+Lc
67pd1vY0jcS00nPnagck/hfdksavlgvnCE4I90Era8kKln44ZJnjLxxBZi0/7/l6
FWH/cx0DpbbwcdSr/PTShT1++KnAGW8UBnoqRC5h8l8W23nUsqvpWUbyfYHmeuFT
bbyugdrILJGZiMw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:16 2026 by rpki-client