Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/3133312e302e33322e302f32322d3234203d3e203631383638.roa
File:                     3133312e302e33322e302f32322d3234203d3e203631383638.roa (raw, json)
Hash identifier:          RfCyVP3bpNFpUlcrZFzUJQmoiASRdXs/NltHlFPbZEc=
Subject key identifier:   03:3D:9E:D9:88:08:52:85:C5:BC:F7:2A:5C:E4:2B:4F:48:80:BB:05
Certificate issuer:       /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
Certificate serial:       2A29B5FCC0282817937C607DF42182BEB2078722
Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/3133312e302e33322e302f32322d3234203d3e203631383638.roa
Signing time:             Mon 09 Mar 2026 18:03:12 +0000
ROA not before:           Mon 09 Mar 2026 17:58:12 +0000
ROA not after:            Mon 08 Mar 2027 18:03:12 +0000
asID:                     61868
IP address blocks:        131.0.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl
                          rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 07:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:29:b5:fc:c0:28:28:17:93:7c:60:7d:f4:21:82:be:b2:07:87:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241
        Validity
            Not Before: Mar  9 17:58:12 2026 GMT
            Not After : Mar  8 18:03:12 2027 GMT
        Subject: CN=033D9ED988085285C5BCF72A5CE42B4F4880BB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:3d:f1:69:2e:52:e3:79:34:3f:3f:33:79:
                    59:0f:b6:b5:ad:01:c5:b4:c7:22:14:04:ce:68:cb:
                    b1:2f:a6:14:04:c0:f3:05:e2:ac:8f:e0:9e:e7:9d:
                    8f:ac:a9:47:c8:34:d9:5e:1e:16:71:af:44:b8:93:
                    6a:02:97:96:85:95:94:ef:69:02:fe:37:1f:67:4b:
                    aa:0f:30:c5:6d:38:e7:c7:79:8c:d3:24:c7:2e:e0:
                    97:f1:e0:aa:b8:36:07:cb:b0:dd:9b:12:82:32:e1:
                    73:7b:20:7b:5d:f9:f2:ae:fc:2b:fa:d2:cc:19:ae:
                    f6:da:7f:8a:6f:d9:b8:08:e8:73:43:f9:b3:62:b9:
                    e4:07:b4:dc:24:68:ab:ae:a5:59:e7:c6:52:a2:8c:
                    ab:86:09:65:b8:d5:46:7c:85:b0:7f:13:f1:42:a0:
                    aa:d0:36:34:27:30:1c:21:87:0a:d6:ec:33:eb:ad:
                    70:e9:3b:be:cd:b6:4c:22:a7:0e:33:c4:d0:33:bd:
                    fc:91:7a:7c:a0:06:42:d5:4d:52:8c:96:73:76:32:
                    a1:95:aa:5a:d7:52:4b:aa:60:22:13:a6:9d:80:b3:
                    eb:87:4c:c9:0f:03:d6:08:94:7f:5e:d2:98:70:b3:
                    80:76:a5:22:72:bf:c7:b7:41:ec:97:3b:19:cc:54:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:9E:D9:88:08:52:85:C5:BC:F7:2A:5C:E4:2B:4F:48:80:BB:05
            X509v3 Authority Key Identifier:
                keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/3133312e302e33322e302f32322d3234203d3e203631383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:7d:dc:ce:60:3f:b0:f4:cf:4e:b0:49:7f:92:d5:00:08:dd:
         29:a3:cf:e7:f1:c7:48:e3:4b:48:78:60:5d:2a:29:12:2e:cc:
         b8:37:cb:54:eb:6a:da:50:29:c0:96:66:74:cc:62:7b:6d:02:
         0b:62:cc:ac:01:ee:4d:e2:01:0f:e2:2d:08:5c:4b:92:dc:94:
         a9:db:a2:1d:c7:17:e1:28:f4:7c:d0:40:df:2b:7c:4a:52:1c:
         c6:fb:0e:74:c7:0b:5a:00:9d:72:66:f6:ed:f5:d5:56:b5:63:
         b3:04:26:b9:7e:34:05:6a:c9:43:8d:57:6b:c3:78:bc:1f:a3:
         e9:06:17:70:62:a9:70:f5:70:d4:52:21:85:68:d6:de:2e:a5:
         1d:bd:6a:f4:b3:25:64:b6:f2:ef:e8:8d:80:4e:32:0e:73:e3:
         e2:57:1b:cb:ee:bb:65:ed:40:bd:31:d8:14:9c:d6:c9:98:37:
         5e:a9:78:7f:79:9a:c1:bf:15:6b:90:82:3f:54:2a:70:37:97:
         9c:c4:7a:cf:87:17:63:0e:d4:10:f9:7d:3f:7f:77:fd:2e:92:
         0c:56:c3:d5:5b:46:7f:a9:0a:8d:d1:15:55:7e:6d:6e:de:1d:
         61:a5:cd:e6:fd:75:31:d6:4c:16:bd:45:52:dd:d1:c2:64:e0:
         c1:c7:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:34:52 2026 by rpki-client