Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
File:                     3133312e3136312e342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          dps1JoInI51XpnmkaGvIofWRe78/3ZEcXhV0YqwPgO8=
Subject key identifier:   DC:AD:D9:C7:E1:E9:39:89:BB:8C:39:05:11:7C:98:6E:48:E6:20:C1
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       18E10C6AE37136637E27FA415600FC43173D175A
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:44:00 +0000
ROA not before:           Sat 04 Jul 2026 13:39:00 +0000
ROA not after:            Sat 03 Jul 2027 13:44:00 +0000
asID:                     28201
IP address blocks:        131.161.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e1:0c:6a:e3:71:36:63:7e:27:fa:41:56:00:fc:43:17:3d:17:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:39:00 2026 GMT
            Not After : Jul  3 13:44:00 2027 GMT
        Subject: CN=DCADD9C7E1E93989BB8C3905117C986E48E620C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:f1:e9:3c:04:e8:0f:1a:64:d9:d3:f9:49:
                    89:da:1d:c2:4b:22:94:b2:cb:3c:47:14:f2:8a:81:
                    18:c2:a8:a1:af:aa:40:7c:98:9e:c7:fd:7e:e0:c6:
                    7a:9e:bd:0c:2e:cd:b0:af:99:24:dd:df:5e:bb:8e:
                    f0:67:78:7c:aa:97:61:26:e3:5a:1e:40:3e:cf:71:
                    48:e9:f8:de:6d:7a:71:28:8b:17:6f:73:b8:a2:53:
                    22:63:dd:90:cd:b2:33:d6:26:3a:f5:2f:d1:a5:76:
                    2e:62:60:ea:50:c4:6d:cc:18:37:7b:1a:75:05:2e:
                    0c:56:4b:fe:ee:9e:93:53:67:47:f0:f9:b1:54:b7:
                    45:45:eb:54:26:09:7f:69:5b:3c:52:79:35:b3:b4:
                    ec:6b:10:56:f9:7a:4b:44:a3:c5:df:58:13:ac:2d:
                    ae:91:ce:6f:10:0d:76:d6:cc:59:7e:fd:03:2e:be:
                    ee:0f:c5:15:5a:c7:51:d4:8a:36:bf:a6:0a:df:3b:
                    df:21:56:e3:9a:29:75:7a:86:4a:8e:94:6d:95:58:
                    33:66:4b:bc:89:ff:ae:d1:ab:c5:d0:c3:bc:e2:99:
                    49:c8:11:e9:f6:f0:a9:4e:ee:34:ab:96:84:74:07:
                    bb:14:d5:45:dc:47:a9:63:21:40:21:ed:17:86:2a:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AD:D9:C7:E1:E9:39:89:BB:8C:39:05:11:7C:98:6E:48:E6:20:C1
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:29:59:cc:8e:67:3f:f1:4c:b5:54:c4:0f:a4:b3:25:ee:08:
         3d:9d:12:14:59:11:b0:82:c0:f1:99:c7:89:75:a0:9f:0c:f8:
         8e:a3:36:a8:5e:a9:c9:59:d2:8e:12:5c:0f:aa:99:f9:22:be:
         7a:bd:f3:e7:75:4a:ff:eb:0e:43:50:f4:fe:8b:5e:b8:4e:9e:
         39:14:a8:45:b8:5c:a7:43:09:31:d4:0b:42:02:df:9c:ab:fd:
         8e:80:da:50:97:95:ce:03:49:ed:73:3b:2c:5e:94:d7:3b:94:
         4f:86:2f:88:02:b4:9f:c9:02:6b:29:89:19:89:b7:90:a2:85:
         df:42:c1:8c:5f:dd:01:6e:d7:02:d7:20:c6:d0:32:91:51:e5:
         19:f2:64:92:74:03:26:87:c5:23:f8:dd:ca:ad:e3:f5:e7:34:
         10:56:0b:e4:fe:5e:95:1e:48:71:5c:2a:04:f4:99:ca:5b:41:
         79:cf:45:14:cf:25:38:62:6d:9c:03:02:68:31:9e:93:36:8a:
         4c:85:58:06:db:83:b6:4a:40:42:2a:d6:fd:61:23:b6:7c:b9:
         6c:e8:c9:d6:e3:6d:86:c7:dc:1e:89:15:4e:42:56:b0:a1:a3:
         ec:fc:15:29:2c:6a:47:a3:46:e8:91:31:59:4d:f9:2c:fe:86:
         6e:91:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:52 2026 by rpki-client