Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          wE52SPTqXjKxWKxRi7uzSBuwqzmazweedwedL18rJG0=
Subject key identifier:   73:19:FD:7A:FC:3E:A1:66:49:AF:99:46:4A:84:3F:B3:9A:F0:67:D4
Certificate issuer:       /CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
Certificate serial:       42D5FB76BE9A36C2B83CA841DFE25AEC74603ED2
Authority key identifier: 92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa
Signing time:             Tue 06 Oct 2026 00:30:29 +0000
ROA not before:           Tue 06 Oct 2026 00:25:29 +0000
ROA not after:            Tue 05 Oct 2027 00:30:29 +0000
asID:                     264450
IP address blocks:        131.255.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 16:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d5:fb:76:be:9a:36:c2:b8:3c:a8:41:df:e2:5a:ec:74:60:3e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
        Validity
            Not Before: Oct  6 00:25:29 2026 GMT
            Not After : Oct  5 00:30:29 2027 GMT
        Subject: CN=7319FD7AFC3EA16649AF99464A843FB39AF067D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:a0:24:c3:37:6d:5d:86:37:ad:71:ef:8b:
                    a6:a0:32:cd:bd:6a:0c:04:b8:9d:2e:58:d2:d1:dd:
                    3f:a0:a7:bd:53:94:50:02:92:df:99:a9:d5:3c:29:
                    76:3b:f0:03:00:bb:ef:c6:b3:94:66:fd:98:85:e9:
                    6d:94:91:60:53:c9:3e:64:27:cd:fe:7a:e9:c3:d3:
                    8b:0a:ba:09:f0:e2:c0:f8:78:b6:55:9b:24:87:bc:
                    47:d3:1e:36:16:0d:3c:66:68:5f:52:f6:d8:01:99:
                    8a:54:d9:55:c4:c4:06:b9:b2:e0:9d:1d:ec:9b:0d:
                    5a:4a:b9:11:0b:29:88:6e:cb:15:6a:0e:a4:2b:8b:
                    d7:41:35:26:e5:9a:86:e1:c8:00:b5:cc:32:8d:d4:
                    00:61:1e:f2:e5:4b:f5:ea:02:53:fe:f5:33:bc:5a:
                    da:46:6d:01:19:f8:5e:d9:93:80:ac:53:bf:d0:76:
                    80:0e:aa:84:3f:f5:1b:ad:a9:68:3c:33:2a:9f:d3:
                    d0:b1:c4:1a:62:b2:9e:48:75:1e:3d:b0:f0:e6:71:
                    68:d2:4a:10:47:9f:64:28:de:d7:7b:de:fb:11:75:
                    83:5e:92:2f:4c:72:d1:c8:ca:25:3b:f0:43:73:0f:
                    66:90:be:08:82:9e:8f:05:8a:c0:97:bd:6e:28:36:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:FD:7A:FC:3E:A1:66:49:AF:99:46:4A:84:3F:B3:9A:F0:67:D4
            X509v3 Authority Key Identifier:
                keyid:92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33362e302f32342d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a2:d7:ef:3c:93:d1:3f:76:ad:88:4b:a0:f2:07:52:a8:82:
         96:cd:94:a8:d4:ba:c6:f3:84:bc:ed:96:b4:34:59:53:f2:a9:
         f7:55:85:ea:99:7b:52:1b:51:63:f7:f7:eb:49:2c:32:f8:cb:
         ed:08:87:5f:6c:fe:c9:82:8e:08:eb:be:63:15:2d:0d:9d:79:
         a4:4d:73:d9:97:40:f3:f2:8a:0f:53:29:8a:fe:c3:03:a4:d8:
         85:91:57:33:cf:a9:07:4d:cf:ae:25:4a:8b:e7:0c:06:ca:7b:
         af:7f:0b:9e:5c:43:de:4c:3d:85:29:33:ad:f6:4e:b6:cf:12:
         70:69:bb:e6:e9:1f:f9:18:95:51:22:52:67:a4:cd:23:21:2a:
         e2:15:84:4c:af:b1:c2:c6:fa:e5:5b:5e:0a:48:50:d7:03:c6:
         6d:ed:4d:e7:6c:b1:3c:40:64:ed:be:b7:61:be:29:1a:78:a1:
         7a:68:04:d5:f2:26:d8:93:df:39:21:57:d2:cd:20:0c:ca:3f:
         c1:b0:b8:89:0b:2c:20:0c:40:fb:a8:e2:c0:ef:30:98:e7:88:
         66:e1:13:f1:7f:5c:6e:c9:f7:4c:4b:0b:a3:14:a2:be:13:2b:
         a5:c2:01:20:c2:95:3c:4e:2e:ef:cf:50:4f:f2:d9:f3:17:1f:
         e7:0a:70:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQtX7dr6aNsK4PKhB3+Ja7HRgPtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGMTgyRUU3NjlFQTI2RUE5MDg1Q0VEN0I0Q0I2NjYz
RTk0NEJFOTAeFw0yNjEwMDYwMDI1MjlaFw0yNzEwMDUwMDMwMjlaMDMxMTAvBgNV
BAMTKDczMTlGRDdBRkMzRUExNjY0OUFGOTk0NjRBODQzRkIzOUFGMDY3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP6aAkwzdtXYY3rXHvi6agMs29
agwEuJ0uWNLR3T+gp71TlFACkt+ZqdU8KXY78AMAu+/Gs5Rm/ZiF6W2UkWBTyT5k
J83+eunD04sKugnw4sD4eLZVmySHvEfTHjYWDTxmaF9S9tgBmYpU2VXExAa5suCd
HeybDVpKuRELKYhuyxVqDqQri9dBNSblmobhyAC1zDKN1ABhHvLlS/XqAlP+9TO8
WtpGbQEZ+F7Zk4CsU7/QdoAOqoQ/9RutqWg8Myqf09CxxBpisp5IdR49sPDmcWjS
ShBHn2Qo3td73vsRdYNeki9MctHIyiU78ENzD2aQvgiCno8FisCXvW4oNjoBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcxn9evw+oWZJr5lGSoQ/s5rwZ9QwHwYDVR0j
BBgwFoAUkvGC7naeom6pCFzte0y2Zj6US+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFpVN3NzejJxcVFidlN5VkJXN0dybnM2Y0pFV01KTHl5RXpFZzNQQzVV
b1kvMC85MkYxODJFRTc2OUVBMjZFQTkwODVDRUQ3QjRDQjY2NjNFOTQ0QkU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyRjE4MkVFNzY5RUEyNkVB
OTA4NUNFRDdCNENCNjY2M0U5NDRCRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RaVTdzc3oycXFRYnZTeVZCVzdHcm5zNmNKRVdNSkx5eUV6RWczUEM1VW9ZLzAv
MzEzMzMxMmUzMjM1MzUyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACD/yQwDQYJKoZIhvcNAQELBQADggEBADWi1+88
k9E/dq2IS6DyB1KogpbNlKjUusbzhLztlrQ0WVPyqfdVheqZe1IbUWP39+tJLDL4
y+0Ih19s/smCjgjrvmMVLQ2deaRNc9mXQPPyig9TKYr+wwOk2IWRVzPPqQdNz64l
SovnDAbKe69/C55cQ95MPYUpM632TrbPEnBpu+bpH/kYlVEiUmekzSMhKuIVhEyv
scLG+uVbXgpIUNcDxm3tTedssTxAZO2+t2G+KRp4oXpoBNXyJtiT3zkhV9LNIAzK
P8GwuIkLLCAMQPuo4sDvMJjniGbhE/F/XG7J90xLC6MUor4TK6XCASDClTxOLu/P
UE/y2fMXH+cKcEY=
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:54:08 2026 by rpki-client