Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35352e302f32342d3234203d3e20323733343734.roa
File:                     3133312e37322e35352e302f32342d3234203d3e20323733343734.roa (raw, json)
Hash identifier:          PECanzWWCNiWZ7s3xzkcyK4p0JfEy8PCWZgHczBtSJo=
Subject key identifier:   4B:11:2E:7F:D5:11:BB:90:3A:B7:FA:35:1A:CC:74:9B:C7:64:9A:7E
Certificate issuer:       /CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
Certificate serial:       2C054AF0132E677610A10019CA27DB5A536E2198
Authority key identifier: 4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35352e302f32342d3234203d3e20323733343734.roa
Signing time:             Mon 16 Mar 2026 00:52:45 +0000
ROA not before:           Mon 16 Mar 2026 00:47:45 +0000
ROA not after:            Mon 15 Mar 2027 00:52:45 +0000
asID:                     273474
IP address blocks:        131.72.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl
                          rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:05:4a:f0:13:2e:67:76:10:a1:00:19:ca:27:db:5a:53:6e:21:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD38C2C21FB0814DBB2D93652B7B4C22867657F
        Validity
            Not Before: Mar 16 00:47:45 2026 GMT
            Not After : Mar 15 00:52:45 2027 GMT
        Subject: CN=4B112E7FD511BB903AB7FA351ACC749BC7649A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:aa:a6:2b:a6:f7:90:ba:0b:2f:f4:d9:91:75:
                    e5:e6:7e:aa:f8:fd:71:ca:ae:db:0a:99:b8:da:aa:
                    47:41:a4:de:98:8f:14:12:af:92:d5:d2:6f:be:e2:
                    0e:36:da:4e:0e:d1:85:85:e4:b0:6f:24:6b:1e:48:
                    d0:10:d9:2b:59:b7:5d:9d:1f:6b:c7:cb:fa:2e:40:
                    ce:07:86:a6:85:33:ce:1c:95:58:49:92:b4:d8:93:
                    cb:76:e3:fe:9b:47:7d:62:2c:f2:cf:80:a7:ca:4d:
                    98:0d:b6:d4:4d:59:5f:53:12:ad:ae:f5:d5:8d:1e:
                    b7:b8:80:86:5d:79:33:6a:7c:29:90:82:61:bf:c0:
                    58:4d:b3:b2:f0:24:4e:6d:57:4a:93:64:a9:a2:e4:
                    27:6c:18:c3:c2:1c:e0:5f:df:4c:fd:65:98:eb:97:
                    4f:1f:55:be:48:03:28:fb:0d:16:40:c3:af:f2:e3:
                    05:c5:26:65:40:69:bc:80:d1:62:59:b9:11:46:c6:
                    d3:f8:f8:01:83:8a:f9:64:7d:27:d2:6b:71:48:e6:
                    23:97:48:fd:bf:bd:c2:e1:8b:c6:1f:27:75:90:f3:
                    f2:e3:5c:4b:4f:bd:c3:9b:b0:e0:aa:e8:5f:d2:83:
                    de:4e:c2:c8:5b:79:49:66:6b:21:34:27:aa:5b:7b:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:11:2E:7F:D5:11:BB:90:3A:B7:FA:35:1A:CC:74:9B:C7:64:9A:7E
            X509v3 Authority Key Identifier:
                keyid:4D:D3:8C:2C:21:FB:08:14:DB:B2:D9:36:52:B7:B4:C2:28:67:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DD38C2C21FB0814DBB2D93652B7B4C22867657F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kbYYLgqWGj19Fp1ug5fAKjBay99dGT6qNyQ2Ut3xujC/0/3133312e37322e35352e302f32342d3234203d3e20323733343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:38:de:db:31:97:09:06:aa:10:8c:c9:0a:7a:cb:b7:75:
         0f:54:db:f2:69:d6:38:4b:af:85:f6:ac:d0:b6:ca:58:c6:03:
         28:ce:53:7b:a8:82:05:50:51:6c:e4:6a:0b:f0:06:c2:3c:00:
         27:c6:3c:5a:eb:da:97:c4:79:b1:68:4e:c7:5a:9b:c8:2e:85:
         d6:59:63:41:e8:28:88:80:0a:81:ed:9e:7f:f8:c3:0d:05:8a:
         95:34:12:59:07:22:f2:be:6d:2e:b3:ce:2a:b8:1f:dd:34:43:
         29:b0:63:57:dc:1c:8c:d5:12:24:85:c0:9f:dc:c3:29:5b:64:
         bb:58:ba:09:de:61:98:f0:11:07:6c:4d:9f:09:6f:d5:66:4d:
         b8:6d:56:76:8c:38:b9:75:8d:5b:86:55:04:d5:fd:36:a7:25:
         7e:12:1e:41:e7:02:10:77:24:5f:5b:88:99:93:69:65:12:d6:
         41:18:b4:65:42:c4:03:6f:ba:9e:b0:9a:1a:df:74:27:59:2e:
         e5:68:83:c9:c1:14:c1:27:b9:b9:21:22:98:27:a0:91:74:dc:
         a7:9a:f1:90:f8:2b:33:82:94:7d:52:81:a7:77:8b:5f:6f:00:
         38:0d:bc:7c:2e:21:71:dc:92:24:ce:8e:3b:54:39:99:a8:88:
         50:30:5f:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULAVK8BMuZ3YQoQAZyifbWlNuIZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREMzhDMkMyMUZCMDgxNERCQjJEOTM2NTJCN0I0QzIy
ODY3NjU3RjAeFw0yNjAzMTYwMDQ3NDVaFw0yNzAzMTUwMDUyNDVaMDMxMTAvBgNV
BAMTKDRCMTEyRTdGRDUxMUJCOTAzQUI3RkEzNTFBQ0M3NDlCQzc2NDlBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOqqYrpveQugsv9NmRdeXmfqr4
/XHKrtsKmbjaqkdBpN6YjxQSr5LV0m++4g422k4O0YWF5LBvJGseSNAQ2StZt12d
H2vHy/ouQM4HhqaFM84clVhJkrTYk8t24/6bR31iLPLPgKfKTZgNttRNWV9TEq2u
9dWNHre4gIZdeTNqfCmQgmG/wFhNs7LwJE5tV0qTZKmi5CdsGMPCHOBf30z9ZZjr
l08fVb5IAyj7DRZAw6/y4wXFJmVAabyA0WJZuRFGxtP4+AGDivlkfSfSa3FI5iOX
SP2/vcLhi8YfJ3WQ8/LjXEtPvcObsOCq6F/Sg95OwshbeUlmayE0J6pbe1EvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSxEuf9URu5A6t/o1Gsx0m8dkmn4wHwYDVR0j
BBgwFoAUTdOMLCH7CBTbstk2Ure0wihnZX8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtiWVlMZ3FXR2oxOUZwMXVnNWZBS2pCYXk5OWRHVDZxTnlRMlV0M3h1
akMvMC80REQzOEMyQzIxRkIwODE0REJCMkQ5MzY1MkI3QjRDMjI4Njc2NTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRERDM4QzJDMjFGQjA4MTRE
QkIyRDkzNjUyQjdCNEMyMjg2NzY1N0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrYllZTGdxV0dqMTlGcDF1ZzVmQUtqQmF5OTlkR1Q2cU55UTJVdDN4dWpDLzAv
MzEzMzMxMmUzNzMyMmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMz
MzQzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg0g3MA0GCSqGSIb3DQEBCwUAA4IBAQAqbDje2zGX
CQaqEIzJCnrLt3UPVNvyadY4S6+F9qzQtspYxgMozlN7qIIFUFFs5GoL8AbCPAAn
xjxa69qXxHmxaE7HWpvILoXWWWNB6CiIgAqB7Z5/+MMNBYqVNBJZByLyvm0us84q
uB/dNEMpsGNX3ByM1RIkhcCf3MMpW2S7WLoJ3mGY8BEHbE2fCW/VZk24bVZ2jDi5
dY1bhlUE1f02pyV+Eh5B5wIQdyRfW4iZk2llEtZBGLRlQsQDb7qesJoa33QnWS7l
aIPJwRTBJ7m5ISKYJ6CRdNynmvGQ+CszgpR9UoGnd4tfbwA4Dbx8LiFx3JIkzo47
VDmZqIhQMF+m
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:14 2026 by rpki-client