Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/3133312e3139362e3232382e302f32322d3332203d3e20323635393434.roa
File:                     3133312e3139362e3232382e302f32322d3332203d3e20323635393434.roa (raw, json)
Hash identifier:          dPXoXNL021TTPf4xQiTIE7XyaD4s345vPtqwXDHevQU=
Subject key identifier:   03:E4:74:7C:B6:58:61:64:FD:11:7D:2D:02:E5:52:3D:E9:5F:82:42
Certificate issuer:       /CN=0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1
Certificate serial:       6C8CBF379D9F4F45E5D28DC6F1CE293DB6BE023C
Authority key identifier: 0D:1F:47:91:AB:FF:DB:4C:4F:71:26:E0:01:EB:A0:99:09:8A:4A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/3133312e3139362e3232382e302f32322d3332203d3e20323635393434.roa
Signing time:             Thu 12 Mar 2026 19:14:26 +0000
ROA not before:           Thu 12 Mar 2026 19:09:26 +0000
ROA not after:            Thu 11 Mar 2027 19:14:26 +0000
asID:                     265944
IP address blocks:        131.196.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.crl
                          rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8c:bf:37:9d:9f:4f:45:e5:d2:8d:c6:f1:ce:29:3d:b6:be:02:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1
        Validity
            Not Before: Mar 12 19:09:26 2026 GMT
            Not After : Mar 11 19:14:26 2027 GMT
        Subject: CN=03E4747CB6586164FD117D2D02E5523DE95F8242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:1b:5e:78:60:77:96:52:29:d0:d1:3e:2d:
                    98:a8:aa:ee:78:d4:2e:43:ed:fb:6f:2c:27:ef:2a:
                    a1:82:0b:1a:79:b2:36:c7:0d:b4:7e:7f:9b:2a:5e:
                    8f:b4:42:92:47:43:e0:06:04:7d:70:20:8f:f7:e4:
                    33:cf:6e:d0:ab:78:42:10:04:b7:97:12:e5:4a:0b:
                    6b:59:7d:6b:cb:2c:92:47:ff:90:93:e9:16:0d:6d:
                    51:1e:d5:96:4a:23:79:33:3b:97:e6:f3:b7:e7:20:
                    4c:13:a6:b2:f9:84:22:5c:98:ba:81:e1:f4:fb:8c:
                    7b:46:e7:ce:26:dc:ed:3b:ea:cc:dc:f0:5a:b7:3e:
                    d9:4a:31:ad:9f:ce:25:20:44:74:6f:c3:c5:07:cb:
                    0d:65:21:5a:fa:b6:7a:4d:b8:cc:7c:5e:60:95:95:
                    c5:0f:95:9d:0a:a9:61:2e:c2:f8:a5:80:d4:d4:66:
                    2e:12:31:2e:8a:41:52:02:50:52:02:49:20:5b:a1:
                    3b:2e:af:67:81:95:5c:7d:55:aa:89:21:5e:cb:34:
                    32:aa:01:b0:c0:17:f0:0f:fd:3e:54:7f:ea:97:da:
                    45:33:79:9a:32:c0:b6:a6:29:8a:0a:a8:97:79:0c:
                    a4:78:37:47:8b:9d:1a:e1:3a:09:c2:0f:15:56:c4:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:74:7C:B6:58:61:64:FD:11:7D:2D:02:E5:52:3D:E9:5F:82:42
            X509v3 Authority Key Identifier:
                keyid:0D:1F:47:91:AB:FF:DB:4C:4F:71:26:E0:01:EB:A0:99:09:8A:4A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D1F4791ABFFDB4C4F7126E001EBA099098A4AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aytmwa8x32zQUr7Z6YTi6e75T4s6sV2yQNG2ycDghuio/0/3133312e3139362e3232382e302f32322d3332203d3e20323635393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:19:92:46:7b:03:e5:a8:7b:32:5a:16:48:a6:fc:33:73:
         db:1e:e9:24:a8:d8:ad:15:66:a1:7e:94:d4:29:d1:ee:7c:c9:
         58:98:30:5a:e2:72:c3:ce:d3:77:74:f4:c1:7d:97:60:41:59:
         96:b5:6c:50:6e:8d:a7:fa:47:6a:7f:a2:5c:d8:24:78:f0:b3:
         88:2d:88:ff:28:b6:27:3b:83:87:dc:13:ed:9a:b6:6c:e1:4b:
         58:9b:f4:f4:c1:49:57:49:7f:fd:cc:57:bf:c3:8c:db:c9:d5:
         5f:74:26:f6:f4:e5:ec:70:a4:ad:f9:e5:75:5c:02:28:28:61:
         43:45:3a:49:bc:a4:2f:aa:9e:a6:64:98:2c:36:4e:7f:96:fc:
         f3:46:cb:b9:a2:25:d7:37:e8:87:7b:e3:e9:df:ba:1f:fc:78:
         21:81:1c:07:6f:0d:e7:a7:ac:5d:cb:b3:ee:af:76:2f:48:e5:
         4f:ff:48:bb:99:fe:0c:47:a2:cb:12:71:f1:37:02:12:a9:56:
         52:2d:65:8d:c9:e9:cd:e4:04:ab:01:b2:93:01:2d:6b:d1:e7:
         65:89:da:8b:dc:be:ed:d7:49:65:31:54:18:0a:21:30:f7:2c:
         c8:c3:cb:d9:97:e9:56:96:33:14:ae:cf:f8:b5:a8:f2:f9:80:
         88:98:79:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:29:21 2026 by rpki-client