Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/3133312e3130302e31362e302f32322d3332203d3e203631373533.roa
File:                     3133312e3130302e31362e302f32322d3332203d3e203631373533.roa (raw, json)
Hash identifier:          XxoUCfaKzFdO4B3lK0cVZvNjF4YBH8BGzPiA1ZBbY0g=
Subject key identifier:   3A:62:CF:4A:34:51:4D:30:8A:84:9A:86:E2:7E:5B:12:C0:06:88:04
Certificate issuer:       /CN=42B4F8826E02D25EC18C82827EE46A2A3BABB18B
Certificate serial:       09F0E131E6E769F59C97134035550D9686DED083
Authority key identifier: 42:B4:F8:82:6E:02:D2:5E:C1:8C:82:82:7E:E4:6A:2A:3B:AB:B1:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/3133312e3130302e31362e302f32322d3332203d3e203631373533.roa
Signing time:             Fri 13 Mar 2026 19:18:26 +0000
ROA not before:           Fri 13 Mar 2026 19:13:26 +0000
ROA not after:            Fri 12 Mar 2027 19:18:26 +0000
asID:                     61753
IP address blocks:        131.100.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.crl
                          rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f0:e1:31:e6:e7:69:f5:9c:97:13:40:35:55:0d:96:86:de:d0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42B4F8826E02D25EC18C82827EE46A2A3BABB18B
        Validity
            Not Before: Mar 13 19:13:26 2026 GMT
            Not After : Mar 12 19:18:26 2027 GMT
        Subject: CN=3A62CF4A34514D308A849A86E27E5B12C0068804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:db:81:2b:95:85:c5:43:24:4f:b6:fc:83:
                    90:2b:ad:78:84:3d:23:4f:d1:84:a8:62:70:79:c1:
                    5e:15:f0:dd:ca:15:c9:9d:23:5f:4e:2c:fe:a5:09:
                    75:62:23:ff:45:88:ad:db:87:fe:ab:12:67:78:5c:
                    fb:ff:5e:84:ae:fd:81:61:36:cb:96:cf:3e:82:41:
                    dd:70:d3:e0:66:f2:ea:6c:ae:d6:cd:93:2d:59:1d:
                    fa:85:5a:cf:bc:bf:31:7e:da:57:7a:01:0b:0e:e6:
                    27:03:e7:33:70:c5:c3:a9:c6:a4:5f:0d:f7:6d:4c:
                    1b:bf:6d:55:b6:05:61:43:a0:73:a0:3b:92:25:ab:
                    c2:ff:f4:e6:53:65:57:c4:d6:63:53:94:5e:c5:7f:
                    18:aa:a4:37:5b:5f:14:43:38:ef:a6:1d:17:78:6e:
                    35:2b:5d:14:91:fe:ca:5d:73:66:bd:92:ee:57:78:
                    82:d5:20:3e:9d:56:a9:b1:6f:c0:b4:37:05:82:18:
                    c8:c1:e5:30:cf:9e:e4:85:78:40:7c:da:f9:e5:26:
                    37:db:3b:5c:ec:9b:77:49:a1:02:21:f8:b0:73:d6:
                    be:0e:b2:79:e0:f3:8b:c0:e0:a7:29:60:34:91:98:
                    72:20:9d:1b:27:6f:07:e8:27:7f:f4:94:70:a1:68:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:CF:4A:34:51:4D:30:8A:84:9A:86:E2:7E:5B:12:C0:06:88:04
            X509v3 Authority Key Identifier:
                keyid:42:B4:F8:82:6E:02:D2:5E:C1:8C:82:82:7E:E4:6A:2A:3B:AB:B1:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42B4F8826E02D25EC18C82827EE46A2A3BABB18B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZCCEBaEZTSwhZiVVEkY4xCtM2jUWTw8BNUQwmS7e2cw/0/3133312e3130302e31362e302f32322d3332203d3e203631373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:ab:27:d3:3c:ba:28:49:04:5a:59:ae:d6:18:0b:16:26:
         03:a5:19:a0:bc:1e:ae:a6:2d:40:03:a0:98:dd:e3:58:79:a5:
         91:14:96:b4:8f:62:33:c8:1c:83:83:73:43:1e:49:6b:f6:dd:
         0d:1b:52:e2:15:6d:18:a3:79:8b:36:c7:3c:5e:06:cc:77:f3:
         05:b9:aa:5e:5b:29:36:94:3a:81:9d:61:87:a8:94:b9:7d:6b:
         29:6d:88:33:ee:bc:56:4b:8c:8f:1c:7f:c2:6a:bd:6c:0a:71:
         b2:77:d2:26:2d:39:68:20:af:35:cc:ee:12:0e:f3:41:a9:ac:
         1c:69:5e:fb:67:f4:48:a7:6f:d4:09:e0:e3:84:f8:36:1a:19:
         6d:78:61:df:2e:9e:ea:b7:a2:02:0a:22:77:31:d2:87:ae:0d:
         07:5c:cd:83:0d:f5:74:dc:20:19:68:27:cc:b9:ab:34:c8:11:
         dc:68:67:7f:04:78:2d:30:93:90:85:ff:67:04:45:46:d3:f8:
         52:3a:24:f9:b3:50:31:95:1f:f7:bd:cb:27:00:f9:0c:2b:a4:
         b3:44:c5:96:92:c6:5b:fc:06:45:1f:66:a1:a4:ec:1f:5f:75:
         8e:0b:10:8e:bb:b2:ec:5f:3e:26:c0:9e:e0:7d:0f:3e:f0:4a:
         ee:0d:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:08:43 2026 by rpki-client