Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (raw, json)
Hash identifier:          FrtYQgGX76cnE7uQafuRYboGA917Ay3diGxJLT0XKGM=
Subject key identifier:   3E:CC:8D:4C:89:EB:DA:1B:2E:98:69:D4:AB:09:C3:E9:60:51:93:DE
Certificate issuer:       /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial:       087EF43E4F3D6E4CEFF8CA6EF96A642BE80AA2D8
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa
Signing time:             Wed 01 Oct 2025 17:27:51 +0000
ROA not before:           Wed 01 Oct 2025 17:22:51 +0000
ROA not after:            Wed 30 Sep 2026 17:27:51 +0000
asID:                     270956
IP address blocks:        131.221.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
                          rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 11:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7e:f4:3e:4f:3d:6e:4c:ef:f8:ca:6e:f9:6a:64:2b:e8:0a:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Validity
            Not Before: Oct  1 17:22:51 2025 GMT
            Not After : Sep 30 17:27:51 2026 GMT
        Subject: CN=3ECC8D4C89EBDA1B2E9869D4AB09C3E9605193DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:69:a7:50:04:72:66:d0:e8:15:aa:2d:6b:
                    09:1b:9c:87:4d:9b:bf:98:4d:05:0b:65:3d:b6:cf:
                    fe:80:3c:76:c2:30:d6:3a:27:e0:69:20:c0:fd:f3:
                    11:47:42:7c:1c:59:2e:dd:a9:c5:4a:48:92:33:48:
                    bb:7e:56:02:59:49:5a:c8:24:9f:30:71:e2:64:83:
                    27:18:7c:a3:eb:49:8d:9a:79:e6:89:0c:04:7c:01:
                    d1:4b:1e:95:23:4a:d3:48:6a:f3:ae:75:7a:6a:c4:
                    70:68:f2:33:25:3c:46:12:84:1d:81:47:7b:de:0a:
                    e4:c4:0b:c0:91:e7:43:5c:e0:ea:1b:16:a7:0f:31:
                    42:95:6c:6e:38:ba:ff:42:4c:0a:2e:c0:dd:9d:0a:
                    45:f8:06:6b:ff:f0:af:b5:c5:0e:a0:a4:3e:02:41:
                    3a:30:79:32:2d:38:d9:b2:2d:ca:ab:e2:00:ce:54:
                    8a:3a:64:90:32:9e:4c:de:2d:c0:0d:c7:44:21:78:
                    14:91:65:97:e6:67:f2:ed:c6:f0:53:3e:29:29:8c:
                    10:e7:f3:0e:43:5e:c9:b6:37:3b:e2:35:6b:ea:a1:
                    8e:1b:32:28:57:15:04:c0:16:6e:b5:83:f1:19:42:
                    4b:de:f7:da:c0:33:bc:a3:dd:a4:4b:30:13:e5:b6:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:8D:4C:89:EB:DA:1B:2E:98:69:D4:AB:09:C3:E9:60:51:93:DE
            X509v3 Authority Key Identifier:
                keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:7b:4f:3b:ba:f9:10:3b:d5:82:e3:59:86:ea:c8:b9:d6:
         4d:25:4d:98:e1:dc:9d:6d:67:24:a6:b5:87:7f:21:5a:74:f7:
         f3:8e:b9:5c:3f:a2:4d:a1:52:c9:15:fa:ac:86:a7:1b:32:2e:
         3a:2d:c6:8a:e6:5e:50:f6:26:36:17:f4:b9:34:2a:b5:a7:00:
         c2:ab:0e:d9:d0:a0:20:99:33:9a:0e:96:06:35:33:65:c2:7d:
         bc:4e:d2:40:2d:95:bf:51:bb:b6:05:00:20:1c:b5:f5:5f:62:
         a4:0e:f9:38:83:7d:c8:3c:13:03:17:f8:6c:14:45:bb:14:1e:
         58:a0:a3:d2:8a:ca:f1:52:a1:56:07:2c:88:b7:2c:47:46:1d:
         76:31:39:c2:29:88:c1:c7:97:8c:cf:9d:d8:bc:91:11:b2:6f:
         0a:63:5b:cb:dd:3a:1b:0b:05:c8:47:64:eb:16:9b:e3:61:44:
         6f:79:a6:69:5a:e1:b4:70:d5:a0:c0:57:89:60:b9:85:ee:6b:
         ac:37:a1:c6:4c:e1:aa:87:58:27:d2:f5:d6:3e:17:df:bb:79:
         9a:99:25:ae:ed:9d:2e:eb:50:76:00:b5:f2:21:0b:10:1d:1a:
         24:20:ca:e2:ec:d1:67:e8:02:15:9e:6a:95:bb:44:a8:86:59:
         e1:d1:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:46:46 2025 by rpki-client