Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/3133312e302e36302e302f32322d3234203d3e203631373034.roa
File:                     3133312e302e36302e302f32322d3234203d3e203631373034.roa (raw, json)
Hash identifier:          +mR48whPA8QGd79heP/yY801MdY1PfhaR4BY2CwNvLg=
Subject key identifier:   C7:7F:4D:19:AB:D6:20:6F:47:98:5E:21:6D:EE:D9:01:8F:98:E1:D4
Certificate issuer:       /CN=35870A649E68CBFD2F520BCE3175557D92FEB67C
Certificate serial:       5C86DF84D85D7851066CF0007790BFD4F213C03C
Authority key identifier: 35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/3133312e302e36302e302f32322d3234203d3e203631373034.roa
Signing time:             Tue 15 Sep 2026 00:34:35 +0000
ROA not before:           Tue 15 Sep 2026 00:29:35 +0000
ROA not after:            Tue 14 Sep 2027 00:34:35 +0000
asID:                     61704
IP address blocks:        131.0.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.crl
                          rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 14:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:86:df:84:d8:5d:78:51:06:6c:f0:00:77:90:bf:d4:f2:13:c0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35870A649E68CBFD2F520BCE3175557D92FEB67C
        Validity
            Not Before: Sep 15 00:29:35 2026 GMT
            Not After : Sep 14 00:34:35 2027 GMT
        Subject: CN=C77F4D19ABD6206F47985E216DEED9018F98E1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:ed:f9:13:21:35:1b:df:61:09:ae:67:00:
                    8c:8c:79:e1:bc:2e:1d:a5:e9:9f:1b:06:e5:7a:cb:
                    10:16:e8:3a:95:49:6c:a5:44:1d:25:1c:44:21:90:
                    da:0d:be:5c:ab:36:55:9a:3e:e7:03:96:df:3d:1e:
                    cd:fa:7b:e6:d4:d7:3a:dd:64:ac:61:ca:a4:db:dc:
                    b6:80:f1:bc:05:c8:f0:2c:6e:d8:04:0d:81:c1:d2:
                    0d:f0:fc:2b:ea:ee:40:46:ee:06:73:86:b4:d7:7a:
                    84:17:d7:25:e4:c0:b2:0b:4a:76:6d:67:ac:81:64:
                    82:75:c6:c4:4f:2e:0f:46:39:0a:74:4a:c7:c9:7c:
                    c8:85:f7:62:da:80:6d:fd:90:dd:8a:95:73:27:1a:
                    94:82:ca:15:fd:98:e7:95:5d:b9:be:7e:37:c4:9b:
                    69:90:d6:8c:20:ee:ca:bb:68:7d:df:7e:84:c2:e2:
                    8d:d3:8a:2a:e5:35:7b:6e:e0:fa:cf:87:45:d4:92:
                    f2:0d:41:30:60:2d:de:bd:9f:0e:7d:29:55:22:7c:
                    53:fe:3c:cc:f0:9c:12:bc:a8:9b:92:90:94:a6:de:
                    1c:be:13:42:4a:db:92:62:c9:06:6c:22:93:97:55:
                    b9:9d:8e:73:fa:77:13:d1:0a:6a:44:3a:ae:3f:f1:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7F:4D:19:AB:D6:20:6F:47:98:5E:21:6D:EE:D9:01:8F:98:E1:D4
            X509v3 Authority Key Identifier:
                keyid:35:87:0A:64:9E:68:CB:FD:2F:52:0B:CE:31:75:55:7D:92:FE:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/35870A649E68CBFD2F520BCE3175557D92FEB67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35870A649E68CBFD2F520BCE3175557D92FEB67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WGF7N4Exg4uZsU4Eo9bHaWosiUEwQPYXPQPRg2BHDjj/0/3133312e302e36302e302f32322d3234203d3e203631373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:fa:4e:9d:e1:62:13:69:c4:af:b7:1f:76:49:26:81:6f:f3:
         c2:36:93:d6:94:63:95:7a:fb:b9:1c:bf:91:ad:b1:d6:ed:4d:
         61:23:52:08:5c:74:51:0c:0e:53:73:e2:d9:90:9b:b1:2f:dd:
         5a:92:43:52:a9:9b:be:6e:59:c6:b6:9c:d0:f7:42:3f:e2:cc:
         54:ed:e3:f6:fb:be:78:86:7b:5f:7b:1f:03:ac:30:00:29:21:
         57:11:52:89:ea:90:94:a0:ee:63:7f:59:ef:e9:a0:c4:e9:83:
         4a:32:94:6e:3c:eb:be:bc:7b:7c:10:53:d1:0f:b4:fd:da:99:
         d9:91:01:ce:8b:0d:f9:f1:a9:ec:74:66:5c:25:ba:44:bd:2c:
         79:c5:08:a2:60:a6:e1:80:81:82:73:06:7f:69:89:b2:61:71:
         da:6a:07:94:a5:a8:bb:b3:40:f3:88:37:df:c5:4e:19:53:39:
         f2:8c:7f:bd:ee:a6:13:3f:e2:c4:ac:a1:a2:08:60:7f:30:b1:
         0d:ad:92:ce:ed:d7:3f:57:17:41:95:d5:8f:fb:c7:e3:b0:dd:
         fc:7a:f1:83:48:22:6c:da:d1:fe:c4:18:0b:20:ca:62:88:24:
         0d:5f:1c:20:49:ac:75:51:8d:4a:a3:12:97:3f:91:98:63:2a:
         92:bb:27:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:17:54 2026 by rpki-client