Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3133312e302e3235322e302f32322d3235203d3e20323633353535.roa
File:                     3133312e302e3235322e302f32322d3235203d3e20323633353535.roa (raw, json)
Hash identifier:          2LByaKcwA56JsOwnf7swzBPV+8eDoB9NPGkttaDLFhA=
Subject key identifier:   F6:36:83:42:68:D1:26:C6:77:A4:B4:27:AC:EA:C4:97:C1:CF:1F:56
Certificate issuer:       /CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
Certificate serial:       2C24B8BE9CC1D258BDC05D38091CB12278DA73FC
Authority key identifier: 20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3133312e302e3235322e302f32322d3235203d3e20323633353535.roa
Signing time:             Wed 02 Sep 2026 15:06:07 +0000
ROA not before:           Wed 02 Sep 2026 15:01:07 +0000
ROA not after:            Wed 01 Sep 2027 15:06:07 +0000
asID:                     263555
IP address blocks:        131.0.252.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl
                          rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 16:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:24:b8:be:9c:c1:d2:58:bd:c0:5d:38:09:1c:b1:22:78:da:73:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2028B4F00526FFD4A6479245C26F87EECD0F5352
        Validity
            Not Before: Sep  2 15:01:07 2026 GMT
            Not After : Sep  1 15:06:07 2027 GMT
        Subject: CN=F636834268D126C677A4B427ACEAC497C1CF1F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:34:25:6d:71:96:16:36:4e:76:b5:cf:47:
                    51:25:c5:76:75:0e:b9:43:b4:bc:6f:2d:3a:53:97:
                    2b:ba:e6:43:b8:b2:00:cc:41:4a:2d:5d:cd:cb:07:
                    e4:0f:c9:af:d0:5a:d7:dd:e4:ef:9c:d4:07:ac:48:
                    55:cc:17:e6:37:b6:9f:2e:c2:4a:c0:48:38:4b:d0:
                    3e:af:fe:eb:a3:c9:f0:82:a5:89:40:69:7d:65:47:
                    18:f5:e1:17:b3:2e:8a:3b:de:d5:bf:3e:1a:a9:88:
                    7a:ab:31:4a:e4:f6:1d:ad:e3:d5:e6:9d:42:c4:09:
                    8a:3e:8c:79:52:84:4f:80:51:fe:d9:f4:58:63:7e:
                    bd:51:07:db:9f:14:64:e5:ba:40:5c:76:44:31:c1:
                    5b:c5:5d:e8:16:46:b6:a3:5f:fb:a1:af:29:03:03:
                    62:6a:38:e5:13:50:19:24:e4:ba:77:3c:6e:ca:c7:
                    cb:58:96:04:c2:8b:dd:7e:8e:04:69:2e:0d:ac:6f:
                    da:ac:fb:7d:ef:3b:07:38:f6:dc:19:0c:bb:ff:bc:
                    0b:a8:a3:36:33:c9:2d:15:17:39:94:e3:bf:c3:2d:
                    a5:85:19:51:07:a4:d0:73:b8:5d:d2:76:86:82:35:
                    84:c1:9b:b8:7f:2c:87:91:42:42:58:b6:fe:2a:09:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:83:42:68:D1:26:C6:77:A4:B4:27:AC:EA:C4:97:C1:CF:1F:56
            X509v3 Authority Key Identifier:
                keyid:20:28:B4:F0:05:26:FF:D4:A6:47:92:45:C2:6F:87:EE:CD:0F:53:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/2028B4F00526FFD4A6479245C26F87EECD0F5352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2028B4F00526FFD4A6479245C26F87EECD0F5352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHzp3SCBbB74oQtSyqgxnefz3EbfC7uLT6ybbf6VmQr/0/3133312e302e3235322e302f32322d3235203d3e20323633353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:af:3e:d5:18:8b:fc:a2:84:a8:7f:19:49:11:d8:fd:3f:7c:
         4d:dc:a5:74:fb:da:7c:36:f6:e1:c9:ad:3f:92:b2:6f:c4:09:
         e9:ac:3a:5d:35:56:0d:a8:8b:ac:dd:8c:46:a4:ad:20:8b:b8:
         a6:77:f7:f7:d5:b6:1c:d1:0c:2c:d8:a1:c1:31:12:06:6d:11:
         e5:42:cb:ea:92:db:7c:86:39:80:91:f8:c9:7a:9c:1c:01:69:
         28:da:59:a1:00:a3:4d:52:f9:6a:05:0e:6b:ac:c7:fd:91:42:
         0a:fa:8f:2f:05:0f:11:17:1a:7c:14:18:b2:27:cf:7a:33:12:
         39:3c:92:e9:cd:d5:fa:0f:82:b9:1f:8c:59:36:7e:81:e8:ce:
         0a:30:2d:3c:43:40:c2:39:f7:0c:61:04:ad:0c:b6:a4:97:77:
         a3:92:5a:8f:4c:05:92:f0:75:11:5a:01:b0:de:9f:1b:57:d4:
         50:20:b3:1b:d0:a5:22:cb:7a:9f:e5:e2:16:e4:54:19:7f:22:
         5a:6f:24:79:76:9b:cf:27:df:0f:1b:1a:a4:89:dd:09:02:d7:
         40:b1:5b:85:64:65:51:39:9c:ef:3f:e5:a8:08:a0:ee:96:f0:
         9a:0c:80:ed:f8:57:c1:47:13:8b:d0:a7:38:ed:15:eb:e7:d5:
         ed:bc:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:04:24 2026 by rpki-client