Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
File:                     3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (raw, json)
Hash identifier:          Q4Tsq8WCZmsK3VusLbMWlIiSer/XFlN/CY36eEDN/jc=
Subject key identifier:   53:EF:7C:ED:9F:B2:BF:FC:00:C9:33:5E:67:58:F9:55:EA:09:03:0C
Certificate issuer:       /CN=BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB
Certificate serial:       2225FE11B9511CB8C080EE871071429AD4658063
Authority key identifier: BD:D2:7C:85:32:6E:BB:92:CC:5A:FA:FD:9D:24:08:F5:73:DF:56:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
Signing time:             Wed 15 Apr 2026 19:34:49 +0000
ROA not before:           Wed 15 Apr 2026 19:29:49 +0000
ROA not after:            Wed 14 Apr 2027 19:34:49 +0000
asID:                     265942
IP address blocks:        131.196.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.crl
                          rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:25:fe:11:b9:51:1c:b8:c0:80:ee:87:10:71:42:9a:d4:65:80:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB
        Validity
            Not Before: Apr 15 19:29:49 2026 GMT
            Not After : Apr 14 19:34:49 2027 GMT
        Subject: CN=53EF7CED9FB2BFFC00C9335E6758F955EA09030C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:a8:2c:15:5b:46:aa:01:95:48:a4:fc:30:
                    31:4e:7c:15:68:bf:30:0c:53:8c:3b:81:c9:89:fe:
                    3d:73:86:20:88:b0:44:5a:0b:13:31:b3:03:95:ce:
                    cc:e8:2e:01:6c:25:bd:bb:de:c8:20:bf:f8:ea:73:
                    41:33:95:c5:29:c1:2c:17:5f:0d:17:d8:74:13:68:
                    d1:63:eb:08:39:eb:dc:78:fe:fe:84:4d:55:04:fd:
                    d7:90:f6:e8:34:ad:2d:61:1d:60:e2:0f:c5:0c:81:
                    0a:20:53:62:79:af:53:58:6a:09:f0:76:6f:b6:54:
                    b6:23:46:61:78:e9:14:91:f2:42:87:4c:11:27:ba:
                    83:1d:c4:ab:3e:0d:51:08:e3:83:5c:01:57:fc:a3:
                    7c:6b:7b:68:aa:48:07:e2:e5:4f:82:97:e5:fb:7c:
                    23:ca:b9:b3:86:5a:ae:68:a4:b9:2a:92:f5:5e:a5:
                    fa:d6:4c:9c:f1:33:ca:b1:af:4f:fb:36:64:90:bd:
                    d3:9b:6c:48:44:bf:dc:a4:d1:41:02:75:15:3e:31:
                    71:5a:c0:97:9a:e2:69:05:62:ed:d8:bc:46:e7:18:
                    e9:45:8b:31:e2:f7:34:b3:20:71:b1:c4:9d:b9:ea:
                    ca:f3:91:8a:84:8a:55:9d:2d:41:2a:4d:9c:96:cf:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:7C:ED:9F:B2:BF:FC:00:C9:33:5E:67:58:F9:55:EA:09:03:0C
            X509v3 Authority Key Identifier:
                keyid:BD:D2:7C:85:32:6E:BB:92:CC:5A:FA:FD:9D:24:08:F5:73:DF:56:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDD27C85326EBB92CC5AFAFD9D2408F573DF56CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:24:c5:aa:3e:7c:f0:70:3c:9a:31:6a:15:8c:88:bb:8e:d1:
         3e:ac:c4:9a:ba:6a:84:8f:6b:67:f7:aa:6e:a4:85:72:e2:9b:
         02:dd:dc:b3:07:e6:5c:d8:7f:88:f8:1e:ba:dc:af:47:52:57:
         f2:ee:7a:6d:e6:3c:81:e8:a8:ad:20:b2:50:90:94:27:de:34:
         25:da:f6:3e:e0:8d:0b:a6:5f:6a:6c:c0:91:24:0f:47:f9:8d:
         7a:5e:92:58:e8:21:c0:a7:bd:50:b3:b7:d7:33:f8:56:15:0f:
         68:9e:c3:78:f5:fa:d6:35:f6:c0:60:f2:51:5b:41:cd:2d:fc:
         c8:4a:d4:53:53:ef:37:1e:e1:0c:25:67:79:fb:94:f1:9c:be:
         6e:84:2d:74:da:76:64:e4:ab:8e:40:b2:6e:57:09:fd:d4:d8:
         64:47:ce:65:52:af:f9:03:1b:41:36:58:d0:cf:08:18:de:64:
         74:9a:db:f3:51:30:8b:67:be:64:50:dc:e1:a1:43:c6:30:eb:
         51:6c:73:bd:a0:18:c9:56:0e:8c:23:fb:f5:1a:3f:3a:93:ee:
         4c:41:e1:98:c4:c0:89:b7:88:ae:0c:3d:9e:eb:a3:ab:ec:65:
         65:b8:fe:64:7b:74:61:fe:c7:58:87:48:c3:98:a8:b5:cb:7f:
         61:72:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:20:24 2026 by rpki-client