Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa
File:                     3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa (raw, json)
Hash identifier:          oF9u1/oCkGwo1UBS2Ntc4XCaeUf1mcRHEF1FbP5ncxs=
Subject key identifier:   E0:B2:7F:A5:CE:DD:D8:B8:A9:30:01:2F:3A:AE:9B:50:DC:F2:27:BD
Certificate issuer:       /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
Certificate serial:       61E89FFEC231BE584E603CC637CF87345699250F
Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa
Signing time:             Thu 18 Sep 2025 17:18:02 +0000
ROA not before:           Thu 18 Sep 2025 17:13:02 +0000
ROA not after:            Thu 17 Sep 2026 17:18:02 +0000
asID:                     267654
IP address blocks:        131.221.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl
                          rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e8:9f:fe:c2:31:be:58:4e:60:3c:c6:37:cf:87:34:56:99:25:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
        Validity
            Not Before: Sep 18 17:13:02 2025 GMT
            Not After : Sep 17 17:18:02 2026 GMT
        Subject: CN=E0B27FA5CEDDD8B8A930012F3AAE9B50DCF227BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:06:2a:7f:30:e8:a1:60:31:64:aa:57:69:
                    a1:51:54:bf:48:26:d5:c1:17:e4:cd:96:e5:00:6f:
                    4b:65:b9:62:7b:45:a7:1e:4d:1e:d4:e3:88:a9:76:
                    0e:2a:27:49:56:39:79:2a:07:5e:db:17:b6:3e:5d:
                    d2:77:8d:f1:52:97:f5:37:67:34:d2:82:09:70:90:
                    b5:47:0e:1e:d1:8a:d1:66:fa:d0:de:40:92:76:c4:
                    1c:67:11:c6:6b:cc:19:f4:c9:7d:f0:9b:c9:a2:52:
                    5c:ca:2d:cd:20:76:71:8d:e5:2d:6f:bf:49:ea:7d:
                    c3:12:fb:23:c5:1e:9d:a2:24:c3:0a:b3:51:49:29:
                    c5:d6:dc:7c:bd:d0:02:8c:10:42:1d:25:ee:08:c0:
                    70:a2:0f:18:8a:e2:b1:db:c3:c5:19:0d:c9:e0:52:
                    21:97:70:15:87:d3:30:55:d5:79:0d:67:99:09:d1:
                    fa:52:fd:ac:62:d1:96:8a:26:4e:50:52:10:f7:93:
                    78:4d:e5:e6:56:12:6d:cd:cc:c5:96:43:5d:f1:df:
                    79:82:79:bc:cf:40:69:9b:ad:38:9e:56:97:5e:ff:
                    c6:77:92:ca:00:c9:30:8b:99:67:a4:17:e9:63:23:
                    06:62:67:7b:6d:7f:a6:db:95:95:d1:5b:b8:03:a4:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:7F:A5:CE:DD:D8:B8:A9:30:01:2F:3A:AE:9B:50:DC:F2:27:BD
            X509v3 Authority Key Identifier:
                keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/3133312e3232312e3130302e302f32322d3234203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:7a:c7:04:28:f7:88:64:ab:80:87:f6:12:69:2f:ed:a1:
         91:b8:33:95:e4:39:ea:85:bf:d8:d4:02:5d:aa:12:5d:18:33:
         b7:ed:e0:9c:a1:5a:c5:27:83:b2:f3:d1:1f:b7:3b:84:d8:0a:
         a4:2e:63:e8:1b:7b:dd:a6:8d:4b:a6:b1:92:75:3e:cc:f7:c8:
         47:c3:72:87:a7:7c:5a:5c:8d:ad:e8:95:40:91:3c:fb:12:f0:
         f4:86:58:b4:e7:c8:15:c2:00:25:4a:7b:92:c1:7e:af:3d:a8:
         f1:a2:61:a4:7c:70:4d:be:30:35:38:a5:dd:cb:22:59:22:2f:
         a4:30:6b:53:28:17:18:f6:b9:0a:8d:f1:3e:88:9b:14:e1:e4:
         ac:29:7a:1f:01:96:67:54:17:6a:ad:a9:02:77:9b:f9:5e:e3:
         ac:f7:fb:2e:fb:2f:4f:57:92:38:e2:18:2d:e8:84:8b:86:d9:
         2d:39:63:08:8a:92:1b:08:7a:80:9f:50:18:3d:2c:77:88:d0:
         30:26:1b:5a:cb:11:23:6d:db:fa:80:56:82:6a:5f:9f:ec:5d:
         b1:42:e2:f0:7c:9a:e8:ad:2e:a9:34:bd:5b:01:53:d5:9b:38:
         1c:3d:2a:00:eb:40:a3:ca:06:6b:0c:58:71:f7:9f:3d:f7:fb:
         03:fb:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:00:37 2025 by rpki-client