Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa
File:                     3133312e3130382e34342e302f32322d3332203d3e203631363630.roa (raw, json)
Hash identifier:          Xg6qqNscJV0UExlvH/6MQWklsw+42iuUekgBFHs4h+w=
Subject key identifier:   49:0F:C2:2A:F7:06:8E:7C:41:A8:38:5E:AE:38:02:D7:8D:CB:80:BF
Certificate issuer:       /CN=678594F7C7A066D107A628D2371BAE8B60382CE0
Certificate serial:       0E831A23C92659434B36D11FCCC131A247288BA7
Authority key identifier: 67:85:94:F7:C7:A0:66:D1:07:A6:28:D2:37:1B:AE:8B:60:38:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa
Signing time:             Thu 24 Sep 2026 19:08:58 +0000
ROA not before:           Thu 24 Sep 2026 19:03:58 +0000
ROA not after:            Thu 23 Sep 2027 19:08:58 +0000
asID:                     61660
IP address blocks:        131.108.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:83:1a:23:c9:26:59:43:4b:36:d1:1f:cc:c1:31:a2:47:28:8b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678594F7C7A066D107A628D2371BAE8B60382CE0
        Validity
            Not Before: Sep 24 19:03:58 2026 GMT
            Not After : Sep 23 19:08:58 2027 GMT
        Subject: CN=490FC22AF7068E7C41A8385EAE3802D78DCB80BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:52:b7:bf:4a:85:2d:72:c0:26:30:7d:f9:
                    41:7e:08:69:bc:49:d5:dc:28:14:5d:eb:8b:b2:47:
                    67:95:3c:96:30:61:80:52:c5:3c:19:a2:97:6a:23:
                    11:a9:19:df:2d:dc:d3:e3:aa:ee:3b:a0:df:10:fd:
                    8b:35:9b:d4:a8:9e:85:ac:5f:ce:a3:da:4e:97:87:
                    c9:15:93:89:b7:e3:fc:86:73:9c:81:be:36:a9:56:
                    fb:1f:4b:b0:1b:71:90:a3:2d:44:8c:40:a4:f5:a0:
                    4a:58:f4:9a:6e:4a:a9:af:1c:f3:cf:d4:e2:56:0d:
                    08:60:21:c9:3f:d9:08:d7:5c:b6:9b:bf:39:23:8d:
                    c3:e5:11:37:b9:d3:ca:7c:67:a0:b3:59:80:d7:57:
                    18:5b:2c:39:58:42:5c:b7:1c:d6:03:7a:c6:6b:60:
                    77:17:a2:64:0d:37:e8:ad:00:7f:7f:2a:70:85:9d:
                    6e:27:3a:a8:3b:ce:7a:ec:28:37:0f:0c:ec:27:df:
                    56:a2:aa:ef:14:32:30:31:a2:02:a1:6d:0e:dc:f8:
                    8e:7a:93:5a:32:fc:d2:45:b0:78:f5:ac:3b:ee:9b:
                    34:b1:52:ab:d6:9c:b7:5f:9a:b2:53:d4:a7:e4:78:
                    65:d8:6a:6c:35:ba:38:3a:95:ca:7b:66:45:6b:9c:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0F:C2:2A:F7:06:8E:7C:41:A8:38:5E:AE:38:02:D7:8D:CB:80:BF
            X509v3 Authority Key Identifier:
                keyid:67:85:94:F7:C7:A0:66:D1:07:A6:28:D2:37:1B:AE:8B:60:38:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/678594F7C7A066D107A628D2371BAE8B60382CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/678594F7C7A066D107A628D2371BAE8B60382CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/3133312e3130382e34342e302f32322d3332203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:42:c7:c4:09:a6:90:54:1d:b6:d5:03:ad:69:1a:02:0f:
         b8:bc:a9:82:59:ec:14:5a:85:79:60:ab:12:89:d9:88:63:52:
         6a:d9:f6:3b:13:68:17:68:d2:ed:b3:04:57:d8:1d:80:61:7e:
         c0:f2:e6:28:62:e0:7f:2d:c0:7c:a7:6d:54:0b:50:20:4c:25:
         23:1c:21:7c:81:cc:a7:11:79:4d:56:38:22:2d:97:22:10:f7:
         96:93:b6:f1:2e:24:68:f0:1d:03:92:8e:f1:02:ec:94:59:dc:
         06:8b:1b:d0:4d:e1:1f:90:c1:3e:a5:dd:f9:e9:d3:76:bf:c8:
         5d:c5:aa:f6:b2:84:c9:91:43:09:5b:51:2c:6e:17:fb:24:33:
         00:db:e9:21:bd:c9:fc:14:54:56:70:e1:d1:2e:47:00:a3:f9:
         fe:e7:82:a1:e8:bc:52:a0:35:fc:7b:2f:61:12:cd:e5:5d:7c:
         dd:f4:b1:2d:5f:8d:4e:ee:c8:68:25:72:e5:b0:c4:81:fc:b1:
         ae:ab:7d:db:bd:8f:30:48:bd:52:8c:db:8b:91:0d:32:35:39:
         84:20:f1:a4:ac:bc:ff:8b:4a:9f:2a:b7:4d:cf:2e:5b:cc:cd:
         41:b6:8d:8b:8c:22:8c:5b:c8:9a:07:0d:6e:46:a8:1c:48:f9:
         f5:77:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:29:36 2026 by rpki-client