Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
File:                     3133312e302e34382e302f32322d3234203d3e203631383832.roa (raw, json)
Hash identifier:          +PJ6kZ/YITrh8ZTpSoFwexqAsIT6hMfWe2LlVzRnZ2s=
Subject key identifier:   54:AD:7A:81:34:01:EE:10:98:D6:06:7D:55:98:C2:7E:79:43:94:10
Certificate issuer:       /CN=E6E3C1678198F50E1B748DE81C9C819DF587C621
Certificate serial:       26518E67453C5EDD2AC03EFAA4562D84622E1635
Authority key identifier: E6:E3:C1:67:81:98:F5:0E:1B:74:8D:E8:1C:9C:81:9D:F5:87:C6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E3C1678198F50E1B748DE81C9C819DF587C621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa
Signing time:             Thu 17 Sep 2026 14:23:01 +0000
ROA not before:           Thu 17 Sep 2026 14:18:01 +0000
ROA not after:            Thu 16 Sep 2027 14:23:01 +0000
asID:                     61882
IP address blocks:        131.0.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/E6E3C1678198F50E1B748DE81C9C819DF587C621.crl
                          rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/E6E3C1678198F50E1B748DE81C9C819DF587C621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E3C1678198F50E1B748DE81C9C819DF587C621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 16:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:51:8e:67:45:3c:5e:dd:2a:c0:3e:fa:a4:56:2d:84:62:2e:16:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E3C1678198F50E1B748DE81C9C819DF587C621
        Validity
            Not Before: Sep 17 14:18:01 2026 GMT
            Not After : Sep 16 14:23:01 2027 GMT
        Subject: CN=54AD7A813401EE1098D6067D5598C27E79439410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:50:d2:ab:cb:ea:f5:b7:13:69:dc:a4:0b:
                    e8:51:10:56:ad:1c:4e:f4:3a:f9:b1:9b:0c:5a:2a:
                    de:37:a5:93:a4:56:e2:5d:ed:3c:9a:4c:73:7c:74:
                    9e:37:64:89:05:1f:51:8b:c4:c3:6b:32:d5:22:38:
                    9c:3b:b2:44:0e:a2:b5:9e:81:50:59:81:3d:32:26:
                    8d:10:de:bc:f1:9b:9e:22:99:9f:d0:9b:08:cc:6a:
                    c4:9d:39:13:7a:20:81:dd:82:1b:6a:c9:30:29:e2:
                    f4:91:7d:d6:19:f4:9e:04:26:72:ca:d7:25:85:c4:
                    3b:a6:77:46:8a:6d:87:a9:7a:01:92:47:f5:11:44:
                    d7:45:91:93:3f:81:d5:7c:31:3f:ad:88:cc:31:5c:
                    ff:33:24:07:15:82:0e:1b:b3:37:2d:06:5b:20:28:
                    b0:44:17:65:b1:28:80:7c:f9:62:3e:94:6a:69:e9:
                    14:5d:76:5c:b8:84:bd:cc:85:05:54:7a:59:22:1d:
                    72:7e:0e:51:f3:48:a7:d0:dd:ee:f4:55:ac:ac:d6:
                    24:90:6b:d3:70:ff:11:b7:a1:a8:f7:d5:cb:41:80:
                    e6:5d:3c:06:f2:3e:3a:4c:83:9c:56:7b:d3:2c:fc:
                    f3:89:ef:b7:b4:f5:70:41:e8:8e:c3:65:a3:2f:05:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AD:7A:81:34:01:EE:10:98:D6:06:7D:55:98:C2:7E:79:43:94:10
            X509v3 Authority Key Identifier:
                keyid:E6:E3:C1:67:81:98:F5:0E:1B:74:8D:E8:1C:9C:81:9D:F5:87:C6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/E6E3C1678198F50E1B748DE81C9C819DF587C621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E3C1678198F50E1B748DE81C9C819DF587C621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e34382e302f32322d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:1b:19:27:c0:79:67:a6:fd:32:5d:e4:2b:44:ab:4f:69:3a:
         5a:ba:d3:c1:88:a0:2b:b9:4b:96:61:1a:66:97:f8:50:c9:ac:
         f1:65:6d:92:3a:35:a5:80:fa:9a:14:eb:8e:b1:87:26:80:a2:
         f3:55:ab:17:95:06:0b:42:77:5b:7f:c0:6c:bb:5b:45:4b:8e:
         c5:38:3f:2a:dd:4c:dc:4a:21:9a:ba:93:f4:27:7f:b4:19:97:
         ef:e7:81:3c:f8:aa:a9:a4:c8:73:e3:5f:0e:00:bf:dd:fe:4f:
         8c:23:8b:25:a4:ad:46:1b:19:40:fe:cd:4b:87:e4:47:5e:bf:
         3a:2e:5b:2c:19:4c:90:0a:18:01:fa:de:fa:b7:93:f2:47:a6:
         b0:2d:f2:15:78:95:0f:83:84:28:8f:07:f0:a8:7b:23:00:e5:
         52:19:67:33:ec:4d:64:69:29:4c:57:f7:0d:d3:cc:7c:9e:d1:
         24:1b:d4:5f:02:97:e4:c3:3f:3e:47:47:67:b1:75:2e:da:f9:
         af:e6:94:0f:a1:23:16:0b:fd:cf:32:99:6c:bb:b8:b2:99:55:
         6c:cc:23:e6:4c:e4:27:3e:1e:20:35:0e:ea:ad:7e:57:04:d0:
         09:66:4d:0d:90:9a:cd:89:7c:76:4f:43:c1:9d:00:21:bd:b5:
         75:89:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:29:03 2026 by rpki-client