Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3332203d3e20323634343332.roa
File:                     3133312e3232312e3231322e302f32322d3332203d3e20323634343332.roa (raw, json)
Hash identifier:          8/rYqteSRz0wklXfhziQ1mQbcnq4pVo9M/UMnQEK/6E=
Subject key identifier:   4E:70:7D:16:E1:7D:60:B9:B7:F9:14:98:6C:4C:65:2C:2C:63:D5:4F
Certificate issuer:       /CN=093A10887A94FA2BB0F559720DA640851BC55675
Certificate serial:       71612F5ACDDB3A0980CEB40292B78C8869B0B8FF
Authority key identifier: 09:3A:10:88:7A:94:FA:2B:B0:F5:59:72:0D:A6:40:85:1B:C5:56:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3332203d3e20323634343332.roa
Signing time:             Fri 20 Mar 2026 11:59:15 +0000
ROA not before:           Fri 20 Mar 2026 11:54:15 +0000
ROA not after:            Fri 19 Mar 2027 11:59:15 +0000
asID:                     264432
IP address blocks:        131.221.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:2f:5a:cd:db:3a:09:80:ce:b4:02:92:b7:8c:88:69:b0:b8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093A10887A94FA2BB0F559720DA640851BC55675
        Validity
            Not Before: Mar 20 11:54:15 2026 GMT
            Not After : Mar 19 11:59:15 2027 GMT
        Subject: CN=4E707D16E17D60B9B7F914986C4C652C2C63D54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:7e:e7:13:07:86:e0:97:f4:94:8d:d1:0a:
                    24:3d:02:37:74:98:fb:94:cd:ab:91:11:7e:c5:aa:
                    91:b0:e1:bb:40:d3:25:0b:f6:ab:ac:3c:2e:13:60:
                    64:b1:8b:3b:e4:51:43:22:75:04:f4:08:78:54:b1:
                    69:d1:72:fc:a9:99:a8:c1:1e:fe:b8:da:ce:1e:46:
                    cb:47:56:14:81:ed:33:3e:c0:36:51:54:40:4d:4e:
                    a7:b8:53:d7:64:29:4e:d0:63:d0:ff:35:78:f5:b8:
                    d2:72:1a:38:8f:84:6b:9f:85:a0:d7:48:ff:60:8c:
                    d4:99:e1:f3:53:f6:8d:0d:07:4e:6f:a4:a8:1a:c0:
                    5a:c4:cd:d2:3e:e7:9c:18:65:d6:2e:b3:0d:94:36:
                    fc:de:5e:72:b1:8f:d4:56:29:4d:ab:df:14:c9:c9:
                    47:3a:ff:7c:48:09:6e:af:73:b6:1f:c2:ac:b1:92:
                    8b:6d:d2:dd:fa:cd:9c:09:71:9e:78:65:ff:42:5a:
                    2e:ef:27:4e:ab:90:e3:c7:fa:44:a7:cf:f9:48:d1:
                    f4:77:a0:71:22:ca:79:16:10:95:e2:09:48:fc:3e:
                    8b:30:89:2e:c5:cb:49:2a:c7:54:b7:04:cb:47:0c:
                    e3:d1:bf:8e:4a:c4:d1:52:f6:51:03:39:2c:ee:c3:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:70:7D:16:E1:7D:60:B9:B7:F9:14:98:6C:4C:65:2C:2C:63:D5:4F
            X509v3 Authority Key Identifier:
                keyid:09:3A:10:88:7A:94:FA:2B:B0:F5:59:72:0D:A6:40:85:1B:C5:56:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3332203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:58:ff:55:c3:2f:65:78:84:f5:7a:84:5f:33:e7:03:fc:
         95:d6:67:24:2f:1c:39:e5:10:46:3d:82:89:16:fc:4e:19:ad:
         bd:9a:54:fd:96:cb:3a:f8:d9:0c:45:b4:5a:ff:8a:07:3d:5b:
         3a:2d:d4:dd:17:3a:ff:5c:ae:de:7e:c6:f6:bd:3e:96:79:f3:
         a1:a6:f3:ea:7a:bf:77:da:f7:ca:21:28:ee:f7:67:aa:f0:85:
         59:61:52:1f:52:51:ad:e4:44:d5:8b:b2:3f:d0:97:79:fe:9e:
         2d:b7:cb:18:4b:5f:e1:92:97:47:d1:6f:da:66:a9:7d:f7:18:
         4a:0c:79:a0:8d:7f:b2:80:b9:73:76:f2:5e:42:de:f9:de:2a:
         f1:86:df:a3:69:ea:e9:fc:a1:41:6b:f3:e8:f2:2e:55:60:41:
         15:8d:b9:fa:1c:25:0e:b7:64:25:79:da:5d:17:f6:73:40:a4:
         2a:cb:52:4c:af:86:68:b3:2c:54:95:a0:3c:e7:bc:69:d3:ad:
         bd:e5:26:37:d3:f1:7b:24:d8:04:7e:44:ae:ad:84:f1:ca:f8:
         5d:13:ff:1a:76:e5:90:91:ad:be:c1:1b:7c:9a:b0:b1:2e:cc:
         3e:51:3c:ca:4d:51:6e:a5:44:98:eb:72:df:11:88:b4:f0:5a:
         a1:29:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:11 2026 by rpki-client