Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
File:                     3133312e302e3230302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          dPhfLGfzk1h5xVALH/GGeIWEi+CwC0ZaMqAwMuo3TuY=
Subject key identifier:   07:CA:A5:C7:B8:E1:84:03:AA:06:53:83:4C:BB:59:7B:0F:4A:52:88
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       122153E4C2E2E853564C5BC01F25AE12D3598DA4
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        131.0.200.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:21:53:e4:c2:e2:e8:53:56:4c:5b:c0:1f:25:ae:12:d3:59:8d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=07CAA5C7B8E18403AA0653834CBB597B0F4A5288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:db:7a:27:0e:90:95:a0:e2:d6:aa:d1:e3:
                    bd:f3:b8:9c:0d:93:d7:07:e2:31:d3:e8:6a:b3:e5:
                    a1:8b:bf:22:dd:73:91:4a:ed:f3:a9:de:04:6f:b0:
                    42:c0:03:12:5e:5e:10:18:ef:72:30:2c:af:bf:e1:
                    54:09:32:15:d7:cc:8a:e1:39:c3:33:b5:42:9c:a6:
                    cb:55:50:f0:4f:7d:20:3f:53:9d:47:83:2e:03:e4:
                    88:47:72:ee:ef:d2:e7:77:d7:05:9b:68:ea:2f:6f:
                    b2:b4:e1:fb:15:c2:5f:c0:1d:bd:63:f5:91:e8:be:
                    d5:a6:7d:25:e9:d1:7a:42:44:98:c8:4c:81:c5:63:
                    f0:49:da:0c:4f:27:84:85:62:68:5b:39:8a:07:34:
                    56:95:3e:40:e2:36:f5:94:e8:1c:45:cd:df:5c:49:
                    d5:22:d6:8e:96:59:fd:b3:56:5e:45:f4:d4:8a:d9:
                    11:5b:d9:57:1a:1d:fa:1b:ad:e0:41:cb:0f:48:df:
                    9f:8b:e7:73:08:ab:c9:10:16:ea:07:84:88:f2:d8:
                    5e:00:77:67:2b:05:cc:99:6a:60:96:b1:87:9c:05:
                    52:17:2d:22:d8:72:5c:09:aa:25:0f:36:4e:b6:4c:
                    d4:86:9c:90:b0:a7:f0:e6:d4:93:28:c9:34:d0:44:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:A5:C7:B8:E1:84:03:AA:06:53:83:4C:BB:59:7B:0F:4A:52:88
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3133312e302e3230302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:8a:8c:c5:c9:be:52:6b:64:43:08:4e:d8:ac:c8:75:f5:
         df:9d:ec:21:11:e0:f3:1b:da:81:0d:ef:52:4f:20:10:b6:3a:
         05:57:fa:fe:03:47:47:9c:20:8b:c2:2e:e9:3c:ac:88:47:64:
         67:42:ec:d3:22:58:6d:c7:08:c9:bb:4e:99:67:44:4b:68:7b:
         a8:31:10:9e:91:81:fb:34:08:c1:9a:72:c0:f2:dc:1c:d0:37:
         c9:82:1f:4e:2c:68:21:46:86:d8:83:59:6a:2e:10:8e:86:75:
         eb:ff:9d:b7:03:00:a6:bd:5c:90:d9:37:d7:e9:ba:46:2c:b9:
         56:90:95:28:4f:96:5c:d3:f6:c9:26:2f:62:eb:f9:aa:d3:0d:
         74:18:56:cf:e6:55:be:86:01:11:c3:e4:5a:3d:37:e9:8d:a3:
         3d:c9:70:fb:34:a6:9f:1b:39:30:36:00:90:9c:72:06:54:7f:
         dd:34:a1:99:d6:45:89:6f:d6:7f:e6:87:1b:86:ba:82:99:22:
         a1:2f:76:c4:cd:d4:0e:83:61:fd:3b:44:84:ee:95:fc:bb:f4:
         68:2e:ae:08:06:59:c1:19:11:3d:5f:50:da:fd:42:f4:f0:4f:
         9d:5f:04:f2:a2:c6:ff:fa:d6:7f:e7:1f:6b:8b:eb:bc:61:26:
         f1:de:4b:71
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEiFT5MLi6FNWTFvAHyWuEtNZjaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTBaFw0yNzA3MTYyMTAxMTBaMDMxMTAvBgNV
BAMTKDA3Q0FBNUM3QjhFMTg0MDNBQTA2NTM4MzRDQkI1OTdCMEY0QTUyODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfG9t6Jw6QlaDi1qrR473zuJwN
k9cH4jHT6Gqz5aGLvyLdc5FK7fOp3gRvsELAAxJeXhAY73IwLK+/4VQJMhXXzIrh
OcMztUKcpstVUPBPfSA/U51Hgy4D5IhHcu7v0ud31wWbaOovb7K04fsVwl/AHb1j
9ZHovtWmfSXp0XpCRJjITIHFY/BJ2gxPJ4SFYmhbOYoHNFaVPkDiNvWU6BxFzd9c
SdUi1o6WWf2zVl5F9NSK2RFb2VcaHfobreBByw9I35+L53MIq8kQFuoHhIjy2F4A
d2crBcyZamCWsYecBVIXLSLYclwJqiUPNk62TNSGnJCwp/Dm1JMoyTTQRJcjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUB8qlx7jhhAOqBlODTLtZew9KUogwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzMzMxMmUzMDJlMzIzMDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzODM2
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoMAyDANBgkqhkiG9w0BAQsFAAOCAQEAa5qKjMXJvlJr
ZEMITtisyHX1353sIRHg8xvagQ3vUk8gELY6BVf6/gNHR5wgi8Iu6TysiEdkZ0Ls
0yJYbccIybtOmWdES2h7qDEQnpGB+zQIwZpywPLcHNA3yYIfTixoIUaG2INZai4Q
joZ16/+dtwMApr1ckNk31+m6Riy5VpCVKE+WXNP2ySYvYuv5qtMNdBhWz+ZVvoYB
EcPkWj036Y2jPclw+zSmnxs5MDYAkJxyBlR/3TShmdZFiW/Wf+aHG4a6gpkioS92
xM3UDoNh/TtEhO6V/Lv0aC6uCAZZwRkRPV9Q2v1C9PBPnV8E8qLG//rWf+cfa4vr
vGEm8d5LcQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:30:18 2026 by rpki-client