Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/3133312e3136312e3139322e302f32322d3232203d3e20323634333839.roa
File:                     3133312e3136312e3139322e302f32322d3232203d3e20323634333839.roa (raw, json)
Hash identifier:          Zse9O00kF8xypg5J0mRTWlXAhN8xz/VTk03Ai8n6wk8=
Subject key identifier:   EA:1A:BB:32:6D:64:76:35:23:D4:D8:44:AE:71:FD:BA:1A:59:19:7A
Certificate issuer:       /CN=CE455F8049EF196B320CEC95B0F7A7C30993C0DA
Certificate serial:       50002B43F611F5DF8D383A742536395B2380C856
Authority key identifier: CE:45:5F:80:49:EF:19:6B:32:0C:EC:95:B0:F7:A7:C3:09:93:C0:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/3133312e3136312e3139322e302f32322d3232203d3e20323634333839.roa
Signing time:             Thu 16 Jul 2026 19:07:52 +0000
ROA not before:           Thu 16 Jul 2026 19:02:52 +0000
ROA not after:            Thu 15 Jul 2027 19:07:52 +0000
asID:                     264389
IP address blocks:        131.161.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.crl
                          rsync://rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:00:2b:43:f6:11:f5:df:8d:38:3a:74:25:36:39:5b:23:80:c8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE455F8049EF196B320CEC95B0F7A7C30993C0DA
        Validity
            Not Before: Jul 16 19:02:52 2026 GMT
            Not After : Jul 15 19:07:52 2027 GMT
        Subject: CN=EA1ABB326D64763523D4D844AE71FDBA1A59197A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:3c:33:ad:2b:70:65:86:62:b3:73:5e:b3:
                    bf:d1:b4:d2:66:a5:79:64:28:4c:be:1b:33:63:5e:
                    c5:1e:bd:2a:c0:a7:dd:bb:18:d9:22:d7:00:cf:7c:
                    22:18:e5:66:ad:a3:a4:6f:8a:a0:17:85:c8:3c:d8:
                    95:cf:4b:7a:c3:e3:cb:54:b2:9e:f2:7e:c7:a6:ee:
                    41:6f:2c:45:b0:0e:95:87:6d:42:c6:93:7d:e3:b3:
                    3a:47:78:c8:4c:39:82:7d:72:39:c7:d2:18:ff:57:
                    08:f5:b1:f3:4f:65:14:27:06:d4:7f:ff:f4:f9:47:
                    ec:8e:1f:7d:9c:d3:db:3a:3d:84:f0:1d:5c:f8:6b:
                    5b:a1:86:53:aa:f0:ba:03:e2:29:e0:29:e9:4c:50:
                    a2:85:5c:74:e8:b1:a3:af:95:81:7a:93:a0:22:05:
                    fc:39:e3:5b:46:1c:a4:df:24:0d:f0:0f:4a:5e:8e:
                    41:6c:f4:c7:43:03:c6:cd:dd:ef:c7:98:4b:a9:f5:
                    2b:2d:d7:e0:24:d2:17:7c:4c:cd:f5:d9:34:51:2e:
                    a6:da:73:f6:1d:ac:c0:60:a2:9c:36:e2:ee:aa:3c:
                    c2:c1:81:c1:c1:24:06:22:8c:1a:82:7b:fa:89:a5:
                    8a:ae:4e:ea:47:39:bf:ff:e0:39:47:62:11:86:27:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:BB:32:6D:64:76:35:23:D4:D8:44:AE:71:FD:BA:1A:59:19:7A
            X509v3 Authority Key Identifier:
                keyid:CE:45:5F:80:49:EF:19:6B:32:0C:EC:95:B0:F7:A7:C3:09:93:C0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE455F8049EF196B320CEC95B0F7A7C30993C0DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AS8KCEEiyCSgPfJgsToyVMdL5nc6XyFjTqPtJqUvvtSU/0/3133312e3136312e3139322e302f32322d3232203d3e20323634333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:bc:6a:d2:3d:94:5e:69:cc:a7:bc:41:4f:1b:d6:b5:46:
         48:a9:e5:c0:0a:30:98:b0:49:13:19:ff:08:5b:ad:52:0f:66:
         1a:2a:92:67:08:4a:47:00:bc:6f:eb:3d:91:58:5d:b6:6e:08:
         26:1b:e6:75:bf:99:cd:f0:b9:fc:35:b1:4f:cf:36:d8:31:21:
         a6:3c:44:84:b7:50:95:20:f0:4e:92:b0:e5:5e:82:eb:b5:bc:
         a3:30:e7:28:31:cc:9d:d5:46:57:5e:89:4c:91:aa:cd:79:e1:
         7d:59:6b:72:4c:c2:f7:d4:a9:53:b5:b5:04:6d:d4:9d:7d:87:
         c0:40:50:ea:12:6b:d6:c7:ca:f9:53:ea:4b:43:73:47:62:09:
         ca:47:b4:6c:7d:2e:de:ec:16:c1:eb:c7:d1:37:dd:98:45:ad:
         ca:a8:c9:ef:43:03:86:d7:f6:9a:d2:51:f1:a9:b5:a4:fc:2a:
         ce:ed:42:4f:f3:d3:c5:5a:df:b5:23:70:3b:b2:98:62:e5:8a:
         1a:63:17:ae:d8:4b:d0:01:a8:1f:16:35:ef:54:fc:ca:72:f2:
         d7:e8:29:a6:bf:b0:8b:54:d2:32:5f:b2:70:88:9c:3f:cb:9c:
         05:d2:03:7b:c9:72:81:28:fa:3d:0e:cf:d5:ad:80:57:43:0c:
         2d:9c:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:15 2026 by rpki-client