Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35342e302f32342d3234203d3e20323733343734.roa
File:                     3133312e37322e35342e302f32342d3234203d3e20323733343734.roa (raw, json)
Hash identifier:          stW4p72al64AQn8i4toR9wZKv5T5iaivaTTlTqNScuc=
Subject key identifier:   B6:09:5C:99:3A:6B:60:CA:D6:43:06:DA:1B:C1:2C:FD:F0:84:4D:C6
Certificate issuer:       /CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
Certificate serial:       45109097A2C132B4D040B4AE2D83F25FF9CE681F
Authority key identifier: 4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35342e302f32342d3234203d3e20323733343734.roa
Signing time:             Mon 16 Mar 2026 00:52:46 +0000
ROA not before:           Mon 16 Mar 2026 00:47:46 +0000
ROA not after:            Mon 15 Mar 2027 00:52:46 +0000
asID:                     273474
IP address blocks:        131.72.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl
                          rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:10:90:97:a2:c1:32:b4:d0:40:b4:ae:2d:83:f2:5f:f9:ce:68:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
        Validity
            Not Before: Mar 16 00:47:46 2026 GMT
            Not After : Mar 15 00:52:46 2027 GMT
        Subject: CN=B6095C993A6B60CAD64306DA1BC12CFDF0844DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:d8:f6:2a:66:33:b6:e6:2f:58:92:9f:79:
                    4b:17:df:9e:5a:71:df:61:fc:e0:94:04:04:6c:11:
                    6b:86:b8:7b:62:4c:d4:f9:8a:b6:5f:ef:60:5b:e2:
                    68:a0:0e:ac:70:98:e7:08:23:f2:90:b5:6d:24:b3:
                    b6:da:81:84:a5:dd:70:14:b1:31:d5:5b:4a:ed:b1:
                    68:d3:f5:8a:d2:4f:0c:d3:fa:16:7d:4e:53:62:e5:
                    5f:e7:7c:61:de:67:4a:4f:ab:f8:ab:ce:ac:4d:4f:
                    d0:ba:e4:80:d5:47:4f:a4:35:0f:fb:17:65:20:4a:
                    96:78:ba:2a:65:d7:b6:31:cf:b9:9b:5b:44:83:f9:
                    19:82:3a:97:91:38:60:9f:11:42:62:85:35:5a:7d:
                    62:cd:9b:e8:8e:9a:fe:9c:41:1d:18:f7:ca:5b:e3:
                    0c:3e:a0:06:93:cb:e4:2c:6f:83:85:ce:ec:d5:c7:
                    3b:89:fc:ec:2a:6b:25:87:bf:d7:8c:cc:47:0b:59:
                    44:f0:2e:0a:03:6e:f9:cd:50:6a:8b:4b:32:84:a8:
                    59:a3:74:41:af:e4:ce:0c:58:ce:4f:d3:cd:be:10:
                    43:dc:00:88:39:53:7e:6c:ac:b3:57:e1:c0:0a:3b:
                    04:7d:69:ae:d2:c6:c7:8f:21:e7:72:31:1d:f8:9e:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:5C:99:3A:6B:60:CA:D6:43:06:DA:1B:C1:2C:FD:F0:84:4D:C6
            X509v3 Authority Key Identifier:
                keyid:4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35342e302f32342d3234203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:78:33:16:da:6f:46:90:e4:8e:70:a9:b1:c9:55:46:15:
         18:d2:7c:d2:d5:7e:f6:45:fc:d9:e7:ad:28:43:a6:01:16:1f:
         69:5f:be:5b:fa:2e:ac:be:94:73:fd:f8:f1:f6:ce:2a:b4:e9:
         7e:25:5c:88:16:47:3c:a8:3f:16:35:c6:6b:fd:6f:61:fa:58:
         af:6c:dc:94:03:96:2e:5e:75:19:6d:3a:d0:18:ee:4f:22:1b:
         ef:02:52:46:c0:8e:0d:1f:00:bd:ad:a2:f3:53:77:39:0d:cb:
         ef:28:b4:2b:e5:90:aa:51:bb:66:9f:5c:ab:dd:8a:25:01:bb:
         3d:c7:8e:31:06:f1:33:fb:48:7c:ac:78:a5:ef:b8:23:5f:f2:
         92:ad:bc:45:6f:a1:8d:43:10:43:87:01:9f:a6:ce:1e:2b:09:
         4d:c2:f6:c9:ed:13:e4:81:3b:ac:11:a2:67:6f:71:fd:39:66:
         e9:11:18:cd:83:3d:60:5a:5e:c4:5f:9a:9e:38:55:79:4f:e4:
         e0:9e:b0:48:e8:e9:82:c6:c9:dc:4b:51:00:5d:9b:ad:40:49:
         3c:78:dd:ba:75:8e:c4:69:48:9b:96:d3:0f:7f:73:7a:70:7b:
         92:49:ca:1d:c3:b6:ec:35:68:d4:f3:e9:97:21:01:fd:ed:92:
         5a:2e:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:30:32 2026 by rpki-client