Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32342d3234203d3e20323733343734.roa
File:                     3133312e37322e35322e302f32342d3234203d3e20323733343734.roa (raw, json)
Hash identifier:          m99tbMJPXuo/CTFHIs6PIjUb5VhWY7FThBI9UG9M1sc=
Subject key identifier:   59:FF:C6:A0:78:E1:81:EF:02:E5:DE:58:FA:F8:F1:66:FB:EF:0A:30
Certificate issuer:       /CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
Certificate serial:       3F7BA9774C408AE0E99F960C0A56C3579C5773AF
Authority key identifier: 4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32342d3234203d3e20323733343734.roa
Signing time:             Mon 16 Mar 2026 00:52:46 +0000
ROA not before:           Mon 16 Mar 2026 00:47:46 +0000
ROA not after:            Mon 15 Mar 2027 00:52:46 +0000
asID:                     273474
IP address blocks:        131.72.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl
                          rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7b:a9:77:4c:40:8a:e0:e9:9f:96:0c:0a:56:c3:57:9c:57:73:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
        Validity
            Not Before: Mar 16 00:47:46 2026 GMT
            Not After : Mar 15 00:52:46 2027 GMT
        Subject: CN=59FFC6A078E181EF02E5DE58FAF8F166FBEF0A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:df:5d:ab:98:81:2c:38:bd:ec:3f:07:34:
                    30:f9:14:36:e9:dc:04:9f:0c:54:c3:da:ec:5b:33:
                    0b:fc:e1:ef:e8:3b:e7:c3:c9:10:f1:81:f0:76:70:
                    46:3a:d3:d0:00:64:58:2d:28:64:0e:73:4a:bc:92:
                    24:52:eb:de:7b:6c:a0:f8:54:c8:7c:e6:56:3d:24:
                    93:8e:b4:1b:4b:c5:94:12:1a:54:11:e8:d6:c6:f0:
                    20:4b:cf:64:da:01:31:93:7d:97:16:96:a3:51:42:
                    9c:a7:fd:7f:5e:6d:42:85:17:f1:69:61:63:52:cf:
                    ad:1c:25:de:67:87:1b:2e:1b:11:a7:66:d1:8b:b0:
                    d6:36:d4:b2:ac:7c:e8:c3:3e:47:dc:93:c5:2e:0e:
                    5e:ac:18:8b:29:46:aa:4f:82:78:43:4b:75:7c:44:
                    dc:ec:de:31:ca:a5:07:59:b9:5a:a0:33:10:3a:df:
                    22:b1:4f:93:c0:d1:cc:0f:08:1b:03:83:91:66:ee:
                    20:23:fb:57:c3:65:fb:b2:ba:fa:46:25:ae:3e:cf:
                    c2:09:5f:c7:65:23:63:a5:11:e4:67:d1:f6:d1:0a:
                    4e:4e:45:0b:49:d0:eb:c0:27:08:75:68:90:35:f4:
                    f7:ce:52:dd:1d:2e:82:99:7d:c7:91:b7:61:69:e9:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:C6:A0:78:E1:81:EF:02:E5:DE:58:FA:F8:F1:66:FB:EF:0A:30
            X509v3 Authority Key Identifier:
                keyid:4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35322e302f32342d3234203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:95:d9:31:98:c7:46:55:b6:9d:f5:53:f6:10:18:2f:af:
         88:9e:c5:85:4e:af:37:73:fb:0a:00:01:b6:68:dd:0a:f8:03:
         0c:36:83:ab:7d:51:4b:cd:e4:5d:b7:9e:40:48:03:15:8c:cb:
         7c:c1:67:fb:40:2b:6e:9a:da:06:02:0e:5e:39:cf:2f:5b:51:
         ba:8e:c9:1b:19:d7:d5:82:77:8d:7a:81:4a:95:3a:6c:4f:58:
         60:d2:6c:60:ac:8e:47:7b:b5:8f:e2:c6:db:d0:28:0f:9c:1e:
         10:f9:cf:d1:28:ba:97:46:40:32:cf:93:9a:0c:cc:28:4d:aa:
         f1:c4:c2:80:19:84:e1:79:6d:2b:ee:c7:54:70:54:86:1a:7a:
         92:ab:91:23:89:3b:57:1f:90:42:48:18:33:a0:9b:ac:bb:1c:
         ad:51:ad:46:65:d0:2a:8f:f7:17:d2:fd:f4:c7:0a:5d:7a:4d:
         d5:e8:1e:06:ee:dc:fe:c3:7b:6f:90:5b:59:9d:73:02:b6:11:
         b6:b1:8e:6f:e2:08:69:33:a4:f3:6a:89:7d:1b:98:dc:dc:a6:
         cf:f2:b5:39:54:8e:97:58:d8:94:1b:22:4c:ec:4a:93:19:8a:
         e9:7b:f2:76:1d:12:8b:95:9e:5f:6c:2c:90:e2:e4:87:e5:44:
         a4:de:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:53 2026 by rpki-client