Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3133322e3235352e3130382e302f32322d3332203d3e20323634343737.roa
File:                     3133322e3235352e3130382e302f32322d3332203d3e20323634343737.roa (raw, json)
Hash identifier:          6dJkh8fEHKIN18FKv49I5hntrG+2qPCDKl4PIiieZ3s=
Subject key identifier:   F2:DA:DD:63:41:CD:76:21:AE:A8:0C:20:EC:C8:79:80:51:C4:6F:BA
Certificate issuer:       /CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
Certificate serial:       77ED5BBCE52F432F19FBD5FB6BF7CCC0CC27B8FB
Authority key identifier: C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3133322e3235352e3130382e302f32322d3332203d3e20323634343737.roa
Signing time:             Thu 30 Apr 2026 14:19:59 +0000
ROA not before:           Thu 30 Apr 2026 14:14:59 +0000
ROA not after:            Thu 29 Apr 2027 14:19:59 +0000
asID:                     264477
IP address blocks:        132.255.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl
                          rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ed:5b:bc:e5:2f:43:2f:19:fb:d5:fb:6b:f7:cc:c0:cc:27:b8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
        Validity
            Not Before: Apr 30 14:14:59 2026 GMT
            Not After : Apr 29 14:19:59 2027 GMT
        Subject: CN=F2DADD6341CD7621AEA80C20ECC8798051C46FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:31:b7:fd:a0:ba:c4:7e:e8:83:d3:54:26:
                    5f:f9:d9:d3:01:01:04:86:f6:e7:da:62:a6:2f:5b:
                    90:81:78:74:56:88:e4:d4:cb:4d:42:e9:69:22:9f:
                    66:3d:06:7a:14:25:e3:76:c9:c2:c4:e4:e6:3d:d8:
                    2a:3b:9b:d0:03:10:8f:ce:68:72:d1:83:9f:1f:55:
                    5f:cd:b5:24:fa:45:67:23:a5:78:0e:36:69:7f:85:
                    e4:a1:6d:3b:71:52:32:15:c5:b2:e4:f7:d8:c7:dc:
                    61:3f:65:5d:0d:ed:44:63:c5:a0:8f:da:5b:39:69:
                    72:10:27:39:08:9c:94:c1:29:63:8a:38:fc:1a:38:
                    39:d3:b8:4a:63:a6:35:63:8a:76:4e:d7:7c:f1:67:
                    46:28:3a:01:95:72:49:c8:bb:97:a4:1a:11:19:9c:
                    f3:b1:ed:12:cb:f2:53:eb:29:84:c2:26:90:8a:63:
                    68:7b:4e:44:1e:bb:e6:40:80:f1:aa:24:aa:4c:5e:
                    33:a7:aa:26:8d:7e:91:cb:8c:68:99:09:21:cb:ce:
                    10:24:a7:bd:66:ca:ff:69:a6:6f:7e:2e:07:e2:4e:
                    98:0c:7e:c4:62:a7:da:44:c5:e1:74:fe:78:93:70:
                    fc:c9:5c:96:cb:f9:1d:a4:f2:1e:e6:07:d9:f4:73:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:DD:63:41:CD:76:21:AE:A8:0C:20:EC:C8:79:80:51:C4:6F:BA
            X509v3 Authority Key Identifier:
                keyid:C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3133322e3235352e3130382e302f32322d3332203d3e20323634343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:c4:27:0d:03:8f:36:6d:f6:e5:77:4c:86:28:74:6f:5f:a0:
         a6:21:03:6f:31:c0:79:b8:b4:cd:01:3a:78:6d:9a:23:6b:f2:
         fd:c2:41:fa:f4:9b:cc:63:76:85:13:56:f5:e4:9f:71:bd:58:
         9a:eb:07:82:69:f8:ff:34:5f:3f:78:74:ef:7f:ba:3b:e5:1c:
         76:0f:e5:d5:16:8a:75:ba:98:83:ab:de:32:60:55:a0:70:00:
         21:1d:95:5f:b3:ab:ba:08:f2:d8:42:5f:3c:0d:bf:21:3a:c5:
         61:36:b4:ab:50:60:37:10:98:8c:f5:4a:39:c6:3f:2d:a9:f6:
         c6:ff:f6:0a:72:98:98:03:4f:19:77:c4:5f:d2:d7:92:97:62:
         7e:28:87:fc:92:67:ab:64:fc:9a:20:ce:33:f3:4c:c8:9c:00:
         64:ed:2e:67:8d:3f:71:55:4e:a9:7e:5b:5a:31:1c:72:c3:a7:
         c7:51:6b:d4:c0:b8:ab:f1:1c:4d:db:1e:11:eb:a2:a5:5a:83:
         1b:2d:5d:b2:37:ac:b7:de:1b:6a:d7:db:8a:72:dc:1e:dc:19:
         db:0c:e2:0a:f6:9b:a2:aa:18:44:b1:36:fa:c6:e8:07:9f:47:
         6b:d9:a1:55:c8:43:72:61:8a:17:f3:d4:2f:6f:02:9d:74:c3:
         a3:b3:9b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:52:49 2026 by rpki-client