Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa (raw, json)
Hash identifier:          UF6wOr8JxA9lbfUhR9g/ypEaNLatOmn7gNUQlMIV8Yg=
Subject key identifier:   D1:CA:1D:54:24:27:4A:A1:74:4C:07:16:88:D7:1F:13:80:FA:AA:AD
Certificate issuer:       /CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
Certificate serial:       1CE03A217992655D67A6BB249B602FF3F0C9E29A
Authority key identifier: 92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa
Signing time:             Tue 06 Oct 2026 00:30:27 +0000
ROA not before:           Tue 06 Oct 2026 00:25:27 +0000
ROA not after:            Tue 05 Oct 2027 00:30:27 +0000
asID:                     264450
IP address blocks:        131.255.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 14:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:3a:21:79:92:65:5d:67:a6:bb:24:9b:60:2f:f3:f0:c9:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
        Validity
            Not Before: Oct  6 00:25:27 2026 GMT
            Not After : Oct  5 00:30:27 2027 GMT
        Subject: CN=D1CA1D5424274AA1744C071688D71F1380FAAAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:e4:34:69:f1:a0:72:3c:5d:b7:00:b1:94:
                    7f:ee:41:3e:0e:33:37:0b:d9:c7:32:96:45:a6:e8:
                    0a:82:52:6d:a8:d5:79:0e:48:44:33:5e:4a:e3:6f:
                    70:ac:6c:fa:80:40:90:35:77:c3:e6:f4:36:32:1f:
                    41:22:80:df:20:6c:66:72:85:ee:30:9f:f6:aa:48:
                    9f:ee:dc:44:a7:e2:af:2d:16:6f:af:13:3e:9f:45:
                    ed:ae:51:06:fd:bc:1f:39:90:ff:59:56:0a:51:5e:
                    f8:5f:62:43:3b:4c:39:ec:97:75:70:37:d5:d3:6c:
                    e9:9a:52:ed:8e:fb:20:13:bc:c7:13:29:65:cc:62:
                    85:83:14:4a:4c:a6:6f:d1:22:95:a8:d1:eb:75:bf:
                    f1:c8:d4:b6:4a:8e:a6:f9:84:c6:c0:d5:3c:ae:80:
                    32:e7:f8:d4:b1:b5:12:10:83:81:3b:d1:45:c2:53:
                    a6:6c:4c:82:9a:0a:a6:71:59:6d:9e:da:fc:3d:65:
                    23:60:f6:7a:a1:f7:f0:83:4a:34:dc:21:3d:60:aa:
                    9b:1d:3c:07:8d:30:82:23:9b:15:d7:7a:62:82:7c:
                    3f:97:be:a7:b5:fe:19:3e:82:40:01:5d:cc:1a:05:
                    93:75:74:b7:c3:b2:42:a9:12:1e:9a:a5:25:44:35:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CA:1D:54:24:27:4A:A1:74:4C:07:16:88:D7:1F:13:80:FA:AA:AD
            X509v3 Authority Key Identifier:
                keyid:92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32332d3233203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:98:4f:a6:92:57:2b:87:c9:26:75:cd:97:9f:f1:73:d8:cd:
         52:61:a7:56:19:e1:c8:76:8e:0a:ec:35:b3:3b:0a:33:b7:b4:
         c2:5f:b6:3e:21:38:b6:d1:53:72:5f:d2:bf:cf:1f:fc:7f:b0:
         6a:2a:f3:7a:42:0b:ab:9d:3d:29:1d:4f:30:34:24:9a:3f:ed:
         32:d9:09:98:08:d9:40:53:83:e1:50:29:e4:df:01:12:41:9c:
         29:ab:dd:d2:47:f6:b8:2d:8c:93:e2:a2:bc:f8:d9:55:c2:e9:
         e9:11:a7:cb:0a:90:7b:fc:fe:be:c3:24:70:cc:ff:36:8f:c7:
         3d:28:d4:e1:eb:bf:8e:db:e7:2a:d7:cf:6a:f4:2f:9d:4b:43:
         19:fd:a1:ca:4b:56:e6:f3:dc:ef:3a:fb:73:80:5c:16:d2:6d:
         25:3d:ad:4d:d1:e4:19:2e:29:db:36:ff:58:03:2e:cd:1d:0c:
         2a:91:f5:aa:15:eb:c7:22:af:11:cc:38:6b:20:4a:d9:47:3e:
         94:8c:50:dd:be:53:4c:d9:cc:b5:9c:3e:c0:34:58:bc:a4:d9:
         e5:2c:da:62:02:ab:07:65:00:c6:04:47:86:04:d0:bb:4f:f2:
         ae:68:92:d2:e4:16:46:b9:0a:11:21:6b:0d:2e:85:4e:2d:d3:
         a5:c4:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:33:56 2026 by rpki-client