Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32342d3234203d3e20323634343039.roa
File:                     3133312e3232312e34342e302f32342d3234203d3e20323634343039.roa (raw, json)
Hash identifier:          HF6CCdR9KnyFPYK9NJRlnk5kmrbwhCK26YFBWdYpsr4=
Subject key identifier:   2C:DE:C8:B8:72:0E:DF:6A:8B:ED:48:52:AB:0C:CD:04:CB:6A:DB:55
Certificate issuer:       /CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
Certificate serial:       45AAFC83ABE888898BF5E3BE5A28DE5DFB36E862
Authority key identifier: B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32342d3234203d3e20323634343039.roa
Signing time:             Wed 09 Sep 2026 18:54:18 +0000
ROA not before:           Wed 09 Sep 2026 18:49:18 +0000
ROA not after:            Wed 08 Sep 2027 18:54:18 +0000
asID:                     264409
IP address blocks:        131.221.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl
                          rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:aa:fc:83:ab:e8:88:89:8b:f5:e3:be:5a:28:de:5d:fb:36:e8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E1FBCBFD060182A72581B4A3C682A4CB14BC92
        Validity
            Not Before: Sep  9 18:49:18 2026 GMT
            Not After : Sep  8 18:54:18 2027 GMT
        Subject: CN=2CDEC8B8720EDF6A8BED4852AB0CCD04CB6ADB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:b0:f6:58:e5:e2:e3:b0:ba:43:1c:1d:67:
                    04:36:a5:4f:c4:1b:43:7e:df:6a:fb:c6:69:7d:86:
                    3b:74:5b:0d:7f:0e:06:67:18:22:70:f7:ed:03:96:
                    95:c0:2a:d7:59:92:50:fb:98:a6:cb:fb:7a:91:bd:
                    53:c3:23:55:37:41:e6:e3:78:07:ad:f2:d7:fd:2c:
                    6d:e6:d6:c9:b2:96:62:5f:39:f8:74:1f:23:fa:40:
                    22:29:c9:46:14:db:6a:4c:a2:aa:92:16:35:5b:12:
                    2b:ad:b9:bc:90:7f:7f:90:7b:cc:9b:c0:da:6c:7a:
                    ec:8e:bf:fd:46:07:d0:d9:16:fe:e6:e8:5b:42:68:
                    02:3e:9a:b3:3d:fc:d9:bb:4c:85:4d:79:40:ce:c5:
                    c4:71:c4:1a:31:6c:3a:3b:ab:12:5b:e8:38:c9:b5:
                    30:f1:41:8c:7d:bd:ca:e5:75:52:a6:79:8f:f0:be:
                    eb:c5:28:07:c0:20:30:19:dc:71:66:0a:17:bc:3d:
                    ca:f3:bf:d0:c3:74:41:af:70:1d:2b:60:26:ef:84:
                    31:57:36:97:e0:72:de:18:e1:ce:8c:41:92:9f:d8:
                    ae:2e:58:16:3d:bf:f2:21:62:5c:65:4b:c9:f0:48:
                    0e:4c:a6:97:4c:16:e9:89:62:38:75:53:b0:39:d2:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:C8:B8:72:0E:DF:6A:8B:ED:48:52:AB:0C:CD:04:CB:6A:DB:55
            X509v3 Authority Key Identifier:
                keyid:B8:E1:FB:CB:FD:06:01:82:A7:25:81:B4:A3:C6:82:A4:CB:14:BC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8E1FBCBFD060182A72581B4A3C682A4CB14BC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/0/3133312e3232312e34342e302f32342d3234203d3e20323634343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:bc:9f:28:e6:38:fd:be:62:38:9f:41:6c:a3:bc:86:bd:
         f0:b6:c1:67:00:dc:38:f4:fd:24:d1:87:0c:4e:ca:7f:b2:6a:
         f9:1c:ef:06:17:bc:98:9c:2c:b8:46:4c:45:ae:59:c9:19:60:
         a3:52:65:8a:26:21:68:9f:2b:3a:06:2c:08:35:6b:5c:ea:d0:
         75:3d:69:24:f0:cb:53:60:e2:f4:2b:38:17:aa:90:ac:e6:c5:
         61:f5:ca:a5:ba:af:a9:fd:c3:f8:9a:e1:0e:e5:f5:ad:20:9f:
         9d:d0:09:83:40:e7:79:89:d1:a3:b0:b5:76:f5:40:be:1e:d3:
         4e:93:4d:78:a7:51:2c:52:24:3b:26:6b:f9:c2:fe:17:1f:55:
         ae:3c:2a:20:aa:5b:52:78:1c:c0:16:01:3a:d9:9f:4c:35:e4:
         77:a7:3d:be:af:83:17:91:06:2d:98:1b:e3:95:e5:c0:0b:c6:
         0b:7d:02:94:27:df:9a:35:94:bf:d6:04:f1:35:eb:a0:b0:67:
         ab:08:0b:90:d3:27:53:67:3e:03:23:d9:40:ac:c2:aa:04:67:
         4f:e1:9a:34:b9:13:ed:4c:80:21:77:51:c1:67:e8:b2:c9:52:
         82:1a:31:5b:a6:9e:3b:8a:f2:dc:36:c1:a1:83:ec:af:7e:f6:
         f7:5d:36:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURar8g6voiImL9eO+WijeXfs26GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFMUZCQ0JGRDA2MDE4MkE3MjU4MUI0QTNDNjgyQTRD
QjE0QkM5MjAeFw0yNjA5MDkxODQ5MThaFw0yNzA5MDgxODU0MThaMDMxMTAvBgNV
BAMTKDJDREVDOEI4NzIwRURGNkE4QkVENDg1MkFCMENDRDA0Q0I2QURCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/bD2WOXi47C6QxwdZwQ2pU/E
G0N+32r7xml9hjt0Ww1/DgZnGCJw9+0DlpXAKtdZklD7mKbL+3qRvVPDI1U3Qebj
eAet8tf9LG3m1smylmJfOfh0HyP6QCIpyUYU22pMoqqSFjVbEiutubyQf3+Qe8yb
wNpseuyOv/1GB9DZFv7m6FtCaAI+mrM9/Nm7TIVNeUDOxcRxxBoxbDo7qxJb6DjJ
tTDxQYx9vcrldVKmeY/wvuvFKAfAIDAZ3HFmChe8Pcrzv9DDdEGvcB0rYCbvhDFX
Npfgct4Y4c6MQZKf2K4uWBY9v/IhYlxlS8nwSA5MppdMFumJYjh1U7A50htzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULN7IuHIO32qL7UhSqwzNBMtq21UwHwYDVR0j
BBgwFoAUuOH7y/0GAYKnJYG0o8aCpMsUvJIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzdhaUFhcWh0V0ZxVTFzQWJKaGRBSDV3WjZHdUdieUpOSHk2QjZSdVZp
SGgvMC9COEUxRkJDQkZEMDYwMTgyQTcyNTgxQjRBM0M2ODJBNENCMTRCQzkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RTFGQkNCRkQwNjAxODJB
NzI1ODFCNEEzQzY4MkE0Q0IxNEJDOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc3YWlBYXFodFdGcVUxc0FiSmhkQUg1d1o2R3VHYnlKTkh5NkI2UnVWaUhoLzAv
MzEzMzMxMmUzMjMyMzEyZTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACD3SwwDQYJKoZIhvcNAQELBQADggEBAH8xvJ8o
5jj9vmI4n0Fso7yGvfC2wWcA3Dj0/STRhwxOyn+yavkc7wYXvJicLLhGTEWuWckZ
YKNSZYomIWifKzoGLAg1a1zq0HU9aSTwy1Ng4vQrOBeqkKzmxWH1yqW6r6n9w/ia
4Q7l9a0gn53QCYNA53mJ0aOwtXb1QL4e006TTXinUSxSJDsma/nC/hcfVa48KiCq
W1J4HMAWATrZn0w15HenPb6vgxeRBi2YG+OV5cALxgt9ApQn35o1lL/WBPE166Cw
Z6sIC5DTJ1NnPgMj2UCswqoEZ0/hmjS5E+1MgCF3UcFn6LLJUoIaMVumnjuK8tw2
waGD7K9+9vddNrE=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:17:19 2026 by rpki-client