Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa
File:                     3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa (raw, json)
Hash identifier:          bN1WsfFhoNj7Ff+a6FRS4c4N2dlWJm5+mnjJ6NmQrhw=
Subject key identifier:   A9:82:10:24:BB:93:6B:C6:FD:58:20:42:E8:42:CD:11:8C:26:31:B3
Certificate issuer:       /CN=31365EE5891E2C9F2ED5B8697058132071CC6FDC
Certificate serial:       103867F6968A44C3FA113F237A461D58E5694754
Authority key identifier: 31:36:5E:E5:89:1E:2C:9F:2E:D5:B8:69:70:58:13:20:71:CC:6F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31365EE5891E2C9F2ED5B8697058132071CC6FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa
Signing time:             Tue 01 Sep 2026 18:00:04 +0000
ROA not before:           Tue 01 Sep 2026 17:55:04 +0000
ROA not after:            Tue 31 Aug 2027 18:00:04 +0000
asID:                     265894
IP address blocks:        131.196.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31365EE5891E2C9F2ED5B8697058132071CC6FDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 07:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:38:67:f6:96:8a:44:c3:fa:11:3f:23:7a:46:1d:58:e5:69:47:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31365EE5891E2C9F2ED5B8697058132071CC6FDC
        Validity
            Not Before: Sep  1 17:55:04 2026 GMT
            Not After : Aug 31 18:00:04 2027 GMT
        Subject: CN=A9821024BB936BC6FD582042E842CD118C2631B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:be:c3:2c:f0:bb:b6:65:a8:84:53:87:05:
                    ed:f1:7a:13:93:90:7b:ef:eb:a9:f5:84:1c:76:db:
                    31:48:68:e5:8e:25:8a:17:58:41:f6:f3:24:33:9b:
                    a5:f3:d8:bf:fb:e8:c0:2b:3e:cc:30:68:52:e4:cf:
                    1c:41:30:10:23:95:9e:fc:40:f3:10:6a:ae:68:ed:
                    d2:44:d1:9b:4a:2d:82:0d:c9:25:c1:28:f6:46:9f:
                    33:b5:81:7e:bf:40:c6:03:d4:ee:51:76:91:08:1f:
                    e0:cb:63:97:e0:d5:ac:2a:67:9d:88:bb:17:8a:25:
                    b7:8a:6f:25:50:1d:76:ab:32:76:e2:2f:d4:8e:00:
                    66:a5:25:b0:cc:89:68:c2:d0:14:44:34:ad:3e:86:
                    15:65:e5:81:3c:a9:27:99:5d:5a:45:e2:90:62:0f:
                    b4:d5:ea:ac:dc:5b:7a:09:22:71:d4:02:83:8e:86:
                    bf:de:48:76:90:9a:c2:cd:c9:6a:de:4f:7c:5d:27:
                    e5:57:a9:17:a2:3b:12:b8:0f:e8:a8:88:c6:7b:d9:
                    e8:cb:a1:f4:da:e1:7c:30:2d:4f:a8:63:3d:87:0d:
                    f0:5c:40:65:1f:44:c0:3a:42:5c:d6:de:05:92:0b:
                    49:51:da:03:a1:62:96:50:e4:cb:1d:6b:aa:5c:7b:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:82:10:24:BB:93:6B:C6:FD:58:20:42:E8:42:CD:11:8C:26:31:B3
            X509v3 Authority Key Identifier:
                keyid:31:36:5E:E5:89:1E:2C:9F:2E:D5:B8:69:70:58:13:20:71:CC:6F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/31365EE5891E2C9F2ED5B8697058132071CC6FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31365EE5891E2C9F2ED5B8697058132071CC6FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32332d3233203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:36:51:f4:39:e5:87:46:f7:6b:18:34:c6:d3:42:1a:76:8b:
         0e:86:e1:40:fe:11:c0:b2:61:b6:d9:79:5e:84:60:c5:6b:b2:
         7b:95:1c:d6:6d:c5:60:ed:b4:1f:f1:39:0a:65:e0:61:0f:78:
         b1:9e:9d:88:f9:4a:5b:de:a5:b9:73:1f:ce:b8:92:8f:41:ba:
         92:b9:cc:06:ef:d9:5f:57:0d:99:fa:0e:54:c6:47:57:82:9c:
         20:00:07:b8:da:c7:39:23:e4:b9:c3:d0:9f:ba:1c:24:32:20:
         95:12:02:11:bf:ef:2d:59:32:69:42:1f:e3:10:08:0e:2a:f2:
         23:18:5a:bf:82:78:14:38:b8:20:71:c9:9a:5a:6a:fd:79:ef:
         95:07:be:16:ab:f4:10:2e:75:ce:ca:08:27:6b:41:15:34:e0:
         7f:2b:74:9d:a1:46:67:07:04:48:4a:9d:9b:df:b1:8a:67:2f:
         81:41:6a:e9:7b:c0:59:1b:fe:96:29:b8:03:b1:2a:d6:e7:36:
         7b:f6:da:8c:22:dd:5d:d0:b7:97:d3:1e:3c:9d:fb:5f:0d:ea:
         4f:10:59:d9:25:6f:92:28:49:40:34:89:df:d8:b3:d8:74:65:
         6e:5d:88:f1:ee:57:cd:7a:34:44:31:a4:cd:59:b1:c4:60:3b:
         37:1a:57:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:53:32 2026 by rpki-client