Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3133312e302e3136342e302f32322d3234203d3e203631363938.roa
File:                     3133312e302e3136342e302f32322d3234203d3e203631363938.roa (raw, json)
Hash identifier:          NNhqesOFQFJuwzPZxvI8OtYsxpbCXDj9PSEQUW/ai0Q=
Subject key identifier:   1F:71:D2:28:5D:D3:71:0A:3C:B2:B2:F8:5D:64:B5:15:34:B0:8C:32
Certificate issuer:       /CN=CA9298E26EC7D83F990DD29EFD395097A928590F
Certificate serial:       2543E24CA89A6B90BDCA896DAB19184A90A94C47
Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3133312e302e3136342e302f32322d3234203d3e203631363938.roa
Signing time:             Tue 21 Jul 2026 19:52:17 +0000
ROA not before:           Tue 21 Jul 2026 19:47:17 +0000
ROA not after:            Tue 20 Jul 2027 19:52:17 +0000
asID:                     61698
IP address blocks:        131.0.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl
                          rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:e2:4c:a8:9a:6b:90:bd:ca:89:6d:ab:19:18:4a:90:a9:4c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F
        Validity
            Not Before: Jul 21 19:47:17 2026 GMT
            Not After : Jul 20 19:52:17 2027 GMT
        Subject: CN=1F71D2285DD3710A3CB2B2F85D64B51534B08C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:24:b3:5f:ba:e4:d1:92:9e:1e:a3:9f:9c:94:
                    a4:f3:a4:95:af:f9:97:3e:46:04:09:be:8e:46:dd:
                    94:fb:2f:cf:1c:21:fa:c3:e6:28:21:3d:40:85:e7:
                    09:40:3a:0b:b6:b0:ed:49:a8:f6:73:61:e7:78:1a:
                    25:28:15:a4:4b:bb:46:9d:af:52:eb:35:15:b6:67:
                    7b:50:39:40:0b:28:09:bd:0e:31:7a:b2:df:7c:64:
                    fd:f4:cb:10:8b:1a:07:b7:c6:80:d4:1b:f5:44:6e:
                    9b:c4:62:32:0e:c9:51:2c:81:d3:0e:1d:77:0e:d9:
                    92:f2:13:26:ef:83:f5:f1:28:b7:3a:59:c3:47:96:
                    db:b1:a7:d7:1c:90:76:59:b9:d5:78:63:9b:22:31:
                    fd:fc:2c:b8:e6:6b:5d:14:d1:7a:ed:05:2c:12:06:
                    ee:9f:e9:38:6b:a2:e0:c4:70:c4:2f:09:38:d0:f4:
                    24:35:88:a3:71:b6:66:38:a9:6c:b4:fb:d7:a1:6b:
                    b9:10:76:68:38:a4:2c:aa:ce:4d:17:e7:1b:47:0c:
                    f9:f3:11:86:ec:02:f4:c2:d8:79:33:26:b0:01:97:
                    65:9b:a2:6a:ed:f5:8a:e2:46:d0:6a:77:d4:9a:94:
                    09:01:40:35:7d:c8:62:32:4d:64:d3:b5:48:17:a6:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:71:D2:28:5D:D3:71:0A:3C:B2:B2:F8:5D:64:B5:15:34:B0:8C:32
            X509v3 Authority Key Identifier:
                keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/3133312e302e3136342e302f32322d3234203d3e203631363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:40:d9:4b:1c:c5:ed:be:aa:c3:a8:4f:f2:76:ed:3b:86:44:
         24:dd:ed:2d:dd:9a:e2:09:e1:7a:d5:12:f1:88:18:c2:f8:ee:
         2e:73:67:8b:ef:c6:01:13:41:de:70:e1:77:e5:c0:76:01:a5:
         37:60:05:db:9a:8d:bf:61:42:c1:5f:42:5d:ff:72:11:ab:55:
         70:72:fb:ca:fc:89:9f:28:8d:68:6f:2a:a7:f1:11:3c:38:1f:
         07:5d:3e:2a:bf:ba:21:c3:b1:2f:aa:21:cc:83:81:39:78:24:
         91:c8:04:17:d4:5d:47:aa:67:26:13:b2:8a:22:c0:9a:c1:5a:
         c5:9d:42:0e:df:f4:bd:a3:2e:03:f1:1f:ac:d4:5e:ac:42:3e:
         c3:78:25:4a:c9:84:08:48:4b:8f:8f:22:7c:43:40:24:a7:26:
         a9:4e:19:15:ec:e3:61:7f:a1:3e:ea:e1:d7:d4:50:25:2d:2b:
         11:0c:f2:0e:02:0c:69:58:1d:06:ee:09:60:b8:a0:2e:ef:34:
         3f:12:51:9b:ea:23:b4:95:9c:47:2c:50:a5:3f:55:0a:71:52:
         ae:74:de:3d:7b:da:87:e5:ab:fe:ba:e2:5c:8d:1a:c0:25:ba:
         37:e5:e7:db:d0:7c:9a:eb:17:4f:7a:b9:fb:ba:9a:44:70:ab:
         a4:47:2f:b4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJUPiTKiaa5C9yoltqxkYSpCpTEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB
OTI4NTkwRjAeFw0yNjA3MjExOTQ3MTdaFw0yNzA3MjAxOTUyMTdaMDMxMTAvBgNV
BAMTKDFGNzFEMjI4NUREMzcxMEEzQ0IyQjJGODVENjRCNTE1MzRCMDhDMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuJLNfuuTRkp4eo5+clKTzpJWv
+Zc+RgQJvo5G3ZT7L88cIfrD5ighPUCF5wlAOgu2sO1JqPZzYed4GiUoFaRLu0ad
r1LrNRW2Z3tQOUALKAm9DjF6st98ZP30yxCLGge3xoDUG/VEbpvEYjIOyVEsgdMO
HXcO2ZLyEybvg/XxKLc6WcNHltuxp9cckHZZudV4Y5siMf38LLjma10U0XrtBSwS
Bu6f6ThrouDEcMQvCTjQ9CQ1iKNxtmY4qWy0+9eha7kQdmg4pCyqzk0X5xtHDPnz
EYbsAvTC2HkzJrABl2Wbomrt9YriRtBqd9SalAkBQDV9yGIyTWTTtUgXpjuJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUH3HSKF3TcQo8srL4XWS1FTSwjDIwHwYDVR0j
BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm
emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5
OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JpaGtpRFIxekZkaTU1eG4xMmtHeVlTTnVzd3pNZ1ZjeXhTUXo5aWZGZnpqLzAv
MzEzMzMxMmUzMDJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM2
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoMApDANBgkqhkiG9w0BAQsFAAOCAQEAEkDZSxzF7b6q
w6hP8nbtO4ZEJN3tLd2a4gnhetUS8YgYwvjuLnNni+/GARNB3nDhd+XAdgGlN2AF
25qNv2FCwV9CXf9yEatVcHL7yvyJnyiNaG8qp/ERPDgfB10+Kr+6IcOxL6ohzIOB
OXgkkcgEF9RdR6pnJhOyiiLAmsFaxZ1CDt/0vaMuA/EfrNRerEI+w3glSsmECEhL
j48ifENAJKcmqU4ZFezjYX+hPurh19RQJS0rEQzyDgIMaVgdBu4JYLigLu80PxJR
m+ojtJWcRyxQpT9VCnFSrnTePXvah+Wr/rriXI0awCW6N+Xn29B8musXT3q5+7qa
RHCrpEcvtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:49:57 2026 by rpki-client