Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          f3KJ2nj64UjBYzRF1MioTuExb7eMC7Zc3M4pxxTTTPw=
Subject key identifier:   58:20:DA:3A:09:9D:52:27:16:33:7A:13:61:A2:9B:63:FC:BE:B3:51
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       7D301B8C503666E68981A800C47C242F77F1A7AE
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 11 May 2026 19:49:45 +0000
ROA not before:           Mon 11 May 2026 19:44:45 +0000
ROA not after:            Mon 10 May 2027 19:49:45 +0000
asID:                     266433
IP address blocks:        131.108.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:1b:8c:50:36:66:e6:89:81:a8:00:c4:7c:24:2f:77:f1:a7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: May 11 19:44:45 2026 GMT
            Not After : May 10 19:49:45 2027 GMT
        Subject: CN=5820DA3A099D522716337A1361A29B63FCBEB351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:81:93:ea:8d:77:aa:2f:ce:04:6a:95:32:
                    e7:74:24:09:3e:61:ac:a7:1f:3b:13:d9:99:52:5a:
                    ae:a3:fd:8e:e9:c4:04:25:45:03:8a:0c:b9:dc:ed:
                    81:87:7c:0e:50:a5:d8:42:cf:48:ea:b3:3b:bd:d9:
                    c5:ef:9c:4a:61:b1:ff:0f:b2:93:51:8a:4a:a8:d8:
                    68:c6:c9:ab:55:8b:40:86:f7:1f:1c:06:83:ac:9c:
                    3e:47:ae:7c:79:a4:e4:00:d5:95:73:47:57:ba:77:
                    5d:7f:a8:05:1e:8c:19:f5:87:07:21:3e:9e:7b:91:
                    9c:0e:8b:5b:95:e5:2e:9f:77:ef:c4:21:7c:fd:a0:
                    21:c3:7f:a0:30:b0:a1:80:4b:e0:ae:24:4e:1d:eb:
                    a7:d3:52:c9:04:68:5f:c0:d4:ce:ec:2c:28:cf:52:
                    ab:50:cc:ad:45:d8:1c:41:be:1a:fe:7a:7e:5c:bc:
                    3d:86:89:58:40:19:b3:40:5d:7f:e0:03:01:d2:7f:
                    72:f6:52:07:26:1d:15:f5:2e:4b:02:53:1c:a2:06:
                    cf:ba:55:36:05:a6:68:1a:b9:fd:03:56:9f:4b:4f:
                    fa:c3:2c:52:43:e1:6b:58:18:9f:52:77:56:b3:c7:
                    57:b0:2c:03:61:4d:47:77:dd:d1:cc:d5:f1:0b:a5:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:DA:3A:09:9D:52:27:16:33:7A:13:61:A2:9B:63:FC:BE:B3:51
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:1c:5a:23:7a:19:0a:01:20:c5:f3:fd:05:6f:3a:44:04:
         70:6e:65:aa:20:13:d3:61:09:ad:c9:5f:f9:ff:3b:45:ab:2c:
         11:91:5f:11:9b:2f:2e:5c:78:1c:64:3f:07:28:be:09:9b:7a:
         43:e0:ab:ba:f5:30:fa:00:4c:24:89:1f:e7:b1:d2:ea:b2:b6:
         f8:49:78:54:98:eb:a7:81:74:5c:55:b0:12:75:62:29:0c:08:
         76:ec:9a:38:70:55:fa:29:e8:9e:de:82:39:1b:9e:1e:87:94:
         53:ba:49:4f:46:43:2b:4c:82:f2:d3:0e:9d:f9:a6:7a:ef:e3:
         aa:c4:38:97:50:2a:7f:19:b9:c0:5b:a1:bb:03:4a:61:d0:5b:
         ed:b9:82:d0:ad:2e:9a:88:a7:66:dc:8f:ee:ea:cd:33:44:2b:
         96:de:50:36:9a:41:ba:e2:18:58:5d:13:39:53:c6:45:c2:2a:
         01:a5:8d:98:bc:66:82:fc:55:46:a8:1a:64:9a:d8:68:8b:3d:
         33:d1:43:80:6d:73:e6:2a:10:f2:97:ad:b1:4e:1b:aa:99:d6:
         49:f8:ae:14:13:5a:05:f1:64:3f:b8:3c:2c:01:67:f6:93:a1:
         9a:d9:65:42:3b:f3:47:bd:4c:1c:02:98:87:95:63:88:3a:96:
         1f:ea:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:50 2026 by rpki-client