Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa
File:                     3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          ocQpObWQmbytuD48YM7bNUHNPQOjZRDwDuhMUrX8+Bc=
Subject key identifier:   B8:9E:B4:A8:1F:8C:8F:42:3D:3B:D2:D5:0F:28:9F:E3:61:5A:67:F0
Certificate issuer:       /CN=BB630F032807A55E781DAE033958D10E9EA54D5B
Certificate serial:       166CEE8058ACC9F75CA0367F1567B5770CA1E873
Authority key identifier: BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa
Signing time:             Thu 23 Jul 2026 14:17:28 +0000
ROA not before:           Thu 23 Jul 2026 14:12:28 +0000
ROA not after:            Thu 22 Jul 2027 14:17:28 +0000
asID:                     264297
IP address blocks:        131.255.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6c:ee:80:58:ac:c9:f7:5c:a0:36:7f:15:67:b5:77:0c:a1:e8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB630F032807A55E781DAE033958D10E9EA54D5B
        Validity
            Not Before: Jul 23 14:12:28 2026 GMT
            Not After : Jul 22 14:17:28 2027 GMT
        Subject: CN=B89EB4A81F8C8F423D3BD2D50F289FE3615A67F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:99:b2:95:85:f9:46:ad:ff:b0:28:05:7c:
                    9d:8b:ad:ab:7c:5b:d0:56:ef:d6:81:d6:01:5f:56:
                    a2:16:fa:bb:67:dc:20:15:89:1c:ae:f3:0d:81:04:
                    df:ef:c3:dd:1a:10:c1:bd:f1:a4:b9:c6:c3:3d:c4:
                    b9:14:62:4d:40:3f:ea:94:92:0a:3b:77:62:ca:dd:
                    f6:a9:4b:a1:1e:f6:7f:6b:50:af:fe:28:fe:ed:e0:
                    b7:88:ef:86:6d:38:50:0c:1f:b2:f2:bb:17:c1:d3:
                    fc:35:fd:bc:cb:a0:f8:04:a3:f6:a0:4f:87:f2:f0:
                    e4:92:b6:34:a8:65:39:30:95:12:c5:c7:b8:c7:cd:
                    e9:a3:49:79:19:e1:b5:49:b9:69:29:60:95:2e:46:
                    85:cd:6e:71:71:a6:e9:b7:e7:93:17:9d:87:c1:55:
                    21:cc:a9:9a:51:6b:1c:1d:02:c1:27:bb:1b:d5:5c:
                    7a:3d:e4:fe:84:07:72:47:47:3a:79:1f:99:31:53:
                    be:be:09:54:fb:cd:d5:20:c8:14:45:62:d4:87:3b:
                    56:23:50:d2:ff:c5:e7:58:17:34:86:29:5e:b7:7b:
                    85:56:ad:1f:7c:8e:d3:5c:11:ad:1a:c2:54:8b:b4:
                    51:84:83:d1:9b:7f:d8:a4:3e:57:83:4b:38:72:f6:
                    fe:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9E:B4:A8:1F:8C:8F:42:3D:3B:D2:D5:0F:28:9F:E3:61:5A:67:F0
            X509v3 Authority Key Identifier:
                keyid:BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3133312e3235352e3235322e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:8e:e1:03:08:e6:dd:8c:e6:35:25:63:ea:e3:2f:92:78:fc:
         8a:ad:36:e8:bf:55:1b:0f:53:d2:54:eb:90:4a:c2:f1:78:26:
         28:1b:39:db:68:09:ba:1c:82:02:9d:62:1b:87:d9:35:0f:18:
         41:b1:11:15:26:1a:95:2c:a1:9c:33:16:ad:bf:81:ef:d5:6a:
         94:c6:a0:15:62:dc:32:81:ca:be:b4:b3:29:c4:cd:18:fb:c7:
         b0:47:bc:87:19:c4:18:d9:77:69:7a:b7:50:cc:07:3d:e6:5e:
         26:e9:16:5f:fa:fb:dc:74:ab:ca:53:2c:e5:fd:d6:57:81:a2:
         2e:7f:c0:77:7c:91:ad:6e:bc:e0:52:01:74:d9:5f:78:9f:84:
         c4:da:16:0d:44:8d:f9:42:28:f7:a9:1d:fd:f4:79:f7:1c:75:
         90:66:64:62:c3:75:f7:37:66:1d:76:36:19:8b:35:eb:aa:29:
         77:d5:54:2d:19:29:54:9f:a4:1f:5d:37:3f:9b:82:3d:d0:51:
         c1:67:d1:f4:9c:2a:6f:09:4e:c4:4a:f7:9a:92:e2:a7:5c:00:
         89:d2:c0:8d:93:d3:e2:39:b0:b0:3f:91:4b:3c:f6:b4:86:cb:
         bf:ac:70:86:bc:57:41:c0:47:0c:56:09:60:1b:d9:b1:91:91:
         ca:31:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:27:08 2026 by rpki-client