Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38362e302f32332d3233203d3e20323635393037.roa
File:                     3133312e3139362e38362e302f32332d3233203d3e20323635393037.roa (raw, json)
Hash identifier:          P+JxUb5xMTMKbNUeGKvUbZygvBiXjgpggKGCPbrWMIs=
Subject key identifier:   8C:2C:B9:79:87:A1:90:A0:E7:50:22:07:23:28:B4:CC:48:28:DD:DA
Certificate issuer:       /CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
Certificate serial:       6EB30559582CE8A27B7F492471F6FF787CEA84BD
Authority key identifier: EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38362e302f32332d3233203d3e20323635393037.roa
Signing time:             Tue 15 Sep 2026 16:06:25 +0000
ROA not before:           Tue 15 Sep 2026 16:01:25 +0000
ROA not after:            Tue 14 Sep 2027 16:06:25 +0000
asID:                     265907
IP address blocks:        131.196.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl
                          rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:05:59:58:2c:e8:a2:7b:7f:49:24:71:f6:ff:78:7c:ea:84:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
        Validity
            Not Before: Sep 15 16:01:25 2026 GMT
            Not After : Sep 14 16:06:25 2027 GMT
        Subject: CN=8C2CB97987A190A0E75022072328B4CC4828DDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:d3:eb:63:f1:62:b6:7c:6d:45:85:e2:c8:
                    aa:ed:40:ed:7c:ce:25:14:9f:92:0e:46:56:28:bf:
                    15:4b:87:e1:3c:93:38:63:76:b3:e8:88:78:0f:d2:
                    b2:01:13:5e:b3:c5:cb:01:f4:34:e6:60:3a:f9:71:
                    2c:b5:d3:0e:21:3b:e2:29:90:bd:2f:c8:1e:25:1e:
                    27:cf:83:37:89:ea:ed:69:fd:51:88:59:09:01:07:
                    20:6b:6c:ba:8c:fc:89:e5:d4:85:0b:1f:a4:b4:27:
                    a3:39:1b:27:83:77:f1:78:57:36:5e:3f:89:e0:89:
                    44:53:55:fc:fd:36:e5:ba:4a:70:aa:0d:4c:8e:3c:
                    c2:e8:3c:25:16:36:df:3f:41:2d:9a:b2:8a:3a:fe:
                    ee:25:f0:6d:97:76:74:48:02:ea:e8:a4:4f:bd:cd:
                    c4:d5:e2:69:57:5a:10:df:c7:9e:ed:04:75:5c:19:
                    9c:fb:fa:0e:3c:19:f4:0c:5d:dd:61:f3:92:f9:b3:
                    de:67:c4:fe:46:18:4a:35:47:23:86:ab:31:52:43:
                    1d:b6:29:b9:03:3e:52:7b:22:75:12:c7:31:96:fb:
                    9c:80:30:d8:b0:64:3a:b6:e5:b4:08:37:2e:e4:b7:
                    1e:eb:e6:27:2b:5d:d1:91:a0:95:06:6d:85:2a:6f:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:B9:79:87:A1:90:A0:E7:50:22:07:23:28:B4:CC:48:28:DD:DA
            X509v3 Authority Key Identifier:
                keyid:EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38362e302f32332d3233203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:59:95:07:a9:5f:f0:71:53:0b:0e:1c:f9:21:61:ed:40:
         7e:08:63:ff:f9:63:4e:17:01:64:26:d5:41:4e:af:0a:cb:0c:
         2c:59:b6:c7:5a:c1:4a:b8:89:3a:d5:73:d3:ee:d8:e4:68:d2:
         ab:84:d8:ed:d9:45:b8:95:e7:1e:fc:ae:25:82:bc:99:33:d9:
         20:6e:02:e8:d1:a0:0b:b2:12:50:17:ec:b8:4b:ec:ba:79:24:
         90:ca:91:88:a7:da:27:cd:11:1b:82:76:cd:18:11:ab:b5:5c:
         6f:43:d3:01:84:86:9f:0c:6f:c0:c6:95:4f:a2:22:d5:ff:0a:
         bd:df:e9:f4:11:e9:ed:3f:d4:e1:19:3e:53:60:84:cd:20:50:
         76:eb:a7:f9:7b:84:f5:c1:93:a0:53:d2:70:1f:b3:6f:88:10:
         6a:2f:e6:c4:28:18:08:61:97:56:d2:27:e0:80:02:95:6a:30:
         80:0c:85:8c:b5:7e:f8:3e:2d:e1:51:23:98:b9:30:03:d9:9c:
         b8:f0:e3:ba:21:66:e3:11:aa:b9:71:c7:b4:10:7f:0f:a6:21:
         62:49:57:e8:77:3b:35:bf:2b:5d:02:59:5c:70:69:9d:25:e8:
         f0:03:5c:1f:35:f2:e7:8d:5e:fd:a5:24:7c:7a:19:0d:31:58:
         34:96:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:46:15 2026 by rpki-client