Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133312e3232312e31322e302f32322d3234203d3e203532383932.roa
File:                     3133312e3232312e31322e302f32322d3234203d3e203532383932.roa (raw, json)
Hash identifier:          bxMbufVkcGt69JWweFyWOfR0xOXIaBhw6ShPFOZB5uE=
Subject key identifier:   5F:8E:8A:56:97:3B:40:10:CF:18:FD:CF:B1:F2:30:3D:E8:4C:60:B1
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       61CB9F288D68ABEE6CCA6B35603BF1FD79268E45
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133312e3232312e31322e302f32322d3234203d3e203532383932.roa
Signing time:             Tue 21 Apr 2026 04:38:09 +0000
ROA not before:           Tue 21 Apr 2026 04:33:09 +0000
ROA not after:            Tue 20 Apr 2027 04:38:09 +0000
asID:                     52892
IP address blocks:        131.221.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:9f:28:8d:68:ab:ee:6c:ca:6b:35:60:3b:f1:fd:79:26:8e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Apr 21 04:33:09 2026 GMT
            Not After : Apr 20 04:38:09 2027 GMT
        Subject: CN=5F8E8A56973B4010CF18FDCFB1F2303DE84C60B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:94:7b:f0:54:7e:e8:83:1d:23:2e:cc:03:40:
                    69:a4:f8:eb:b6:04:b8:44:1c:a7:93:5f:b2:70:fc:
                    51:57:a3:f3:f5:36:e8:d4:c9:fb:01:95:52:2e:1b:
                    87:c7:6a:bc:1d:a8:5f:2a:f2:92:03:18:ad:99:04:
                    eb:e4:60:f0:99:e3:40:88:32:bd:ed:9b:3d:67:d9:
                    bc:f8:20:b7:58:25:0e:0a:06:32:a8:a7:5f:d3:98:
                    bd:81:6a:60:13:3c:60:9b:ce:6f:a7:c9:83:d1:5b:
                    3c:4d:39:8e:a3:07:5d:c5:42:f6:cb:a0:b0:7e:c4:
                    25:08:05:bd:ff:e3:6f:9e:62:74:d9:d0:24:fb:01:
                    ab:d7:78:54:57:2d:d9:2b:a9:16:d0:71:73:3d:d5:
                    bc:0d:ad:35:56:94:48:73:9a:80:e3:33:57:06:27:
                    66:58:a0:b7:c1:48:43:15:ec:8e:8e:dc:a6:e5:74:
                    6d:af:4a:18:7c:1c:d3:0c:fc:8a:0e:2e:db:c2:ac:
                    aa:1e:d4:79:20:5e:15:12:3a:a5:0c:2b:05:7e:fd:
                    94:3b:f8:5a:ea:18:c6:c1:e0:34:83:b4:8a:a5:86:
                    b4:da:f4:07:eb:36:17:16:27:50:ec:09:65:f6:e1:
                    85:ab:51:c4:37:19:79:43:c3:f5:28:68:12:56:27:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:8A:56:97:3B:40:10:CF:18:FD:CF:B1:F2:30:3D:E8:4C:60:B1
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3133312e3232312e31322e302f32322d3234203d3e203532383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:90:9a:cc:44:fc:63:80:5e:21:41:b9:47:71:5e:89:3b:a6:
         28:2e:a2:0b:82:b7:84:ba:b8:2f:5a:b5:34:1e:95:34:78:68:
         b4:d7:31:ee:67:e5:4f:1c:9f:19:c9:1a:ed:e6:3c:47:06:bb:
         03:35:47:ef:86:75:44:87:4f:2c:6b:8c:94:fd:ba:a2:80:02:
         12:8f:bb:a3:67:06:da:06:29:58:2f:4b:87:39:3e:9b:f1:41:
         ea:2d:ea:97:3a:2b:61:81:04:76:2d:fc:12:39:d5:c7:77:55:
         3c:3f:42:d3:2f:b6:4b:46:28:23:13:27:dd:fe:e5:29:2e:c2:
         ee:36:51:11:4d:9d:f7:8e:f2:8f:68:5a:f6:ed:37:fc:cc:45:
         84:d2:e5:3a:38:c8:83:44:7d:02:49:a2:60:33:69:5d:d2:36:
         42:5b:7a:10:58:6c:49:e0:88:2e:b4:29:6b:46:a3:7c:bd:d8:
         1a:d6:2e:e5:1f:38:01:0a:98:7a:39:6f:c5:9d:ed:95:2a:f8:
         a4:ed:2c:cf:85:98:6d:41:bc:c8:53:ff:10:59:7c:f1:35:c9:
         cf:2a:6c:44:c2:2d:70:52:0d:00:ed:19:3c:d9:7a:26:be:a4:
         ff:14:41:da:56:62:ed:51:01:fa:c0:33:ef:a2:4a:3a:b7:7a:
         fe:96:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:31:23 2026 by rpki-client