Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
File:                     3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          XqYDznWwi5RYMuWP/KsNot9sZZRGYksXlc1QYzs659k=
Subject key identifier:   ED:C4:FC:D2:65:74:E0:4E:4C:BB:5A:C2:E1:7D:0E:7F:F4:A1:11:79
Certificate issuer:       /CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
Certificate serial:       2E04F7F30F4326564B21A0C455ECED27F4670821
Authority key identifier: 92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa
Signing time:             Tue 06 Oct 2026 00:30:30 +0000
ROA not before:           Tue 06 Oct 2026 00:25:30 +0000
ROA not after:            Tue 05 Oct 2027 00:30:30 +0000
asID:                     264450
IP address blocks:        131.255.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 09:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:04:f7:f3:0f:43:26:56:4b:21:a0:c4:55:ec:ed:27:f4:67:08:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92F182EE769EA26EA9085CED7B4CB6663E944BE9
        Validity
            Not Before: Oct  6 00:25:30 2026 GMT
            Not After : Oct  5 00:30:30 2027 GMT
        Subject: CN=EDC4FCD26574E04E4CBB5AC2E17D0E7FF4A11179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:44:97:3b:60:32:c7:8a:52:41:a4:ec:f4:
                    09:58:7b:20:20:0d:0e:a0:92:da:a0:0f:f7:e1:ed:
                    a3:6b:22:91:e2:02:00:5f:ac:58:c2:65:af:fe:8f:
                    3f:c0:4a:4e:19:87:5f:e7:03:98:78:12:53:cf:58:
                    e7:be:92:90:b0:9a:2e:75:06:86:eb:aa:f9:14:68:
                    ed:2e:82:79:c5:e5:d2:17:a5:41:d5:b1:e7:1d:40:
                    ef:5a:b5:b8:fe:34:e3:82:6f:3b:f8:c2:a8:53:26:
                    69:b4:c8:08:d9:d6:d1:e4:4a:58:92:7e:88:2e:19:
                    a5:4b:9f:fd:39:d6:19:53:d8:cf:d3:90:5d:06:c0:
                    d3:5b:62:8a:ef:8e:b4:c6:26:d3:d6:3d:5f:31:55:
                    17:fb:70:47:98:d9:57:18:66:f3:f7:cf:71:6c:b3:
                    68:5b:fb:33:59:2e:23:41:eb:cc:88:c0:11:40:7f:
                    b3:9b:bd:7d:09:13:bc:58:05:a0:43:7e:9a:3b:32:
                    f6:7f:3c:9f:e7:15:b4:5a:ae:e8:2f:3a:12:f8:05:
                    23:54:a5:39:72:0c:16:0b:9f:96:8b:e5:8a:e9:88:
                    ee:0f:43:5c:d6:2e:21:71:90:76:46:8f:e4:92:6a:
                    b6:9d:f0:79:ee:37:4f:62:dd:a2:02:c4:d7:ca:a0:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:FC:D2:65:74:E0:4E:4C:BB:5A:C2:E1:7D:0E:7F:F4:A1:11:79
            X509v3 Authority Key Identifier:
                keyid:92:F1:82:EE:76:9E:A2:6E:A9:08:5C:ED:7B:4C:B6:66:3E:94:4B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/92F182EE769EA26EA9085CED7B4CB6663E944BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92F182EE769EA26EA9085CED7B4CB6663E944BE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/0/3133312e3235352e33382e302f32342d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:ea:7f:3c:82:4e:3a:5d:e2:46:05:3e:57:78:0e:21:cb:39:
         03:4c:be:40:39:3f:0a:5d:84:6c:ab:41:53:29:0a:70:ed:0b:
         25:51:51:a3:6f:61:c1:b2:3f:74:e3:f7:52:42:0f:e9:af:17:
         d1:85:05:12:93:f1:2c:ca:47:ac:91:9d:54:ce:ec:bc:4c:b2:
         bf:a6:ba:12:9a:49:22:c3:19:1c:16:8b:3b:ba:bb:20:16:a3:
         10:37:ea:11:38:6a:95:a6:59:f0:3a:e5:0f:a3:db:9e:93:2b:
         ac:3f:be:e3:9a:23:0f:1a:7e:ea:50:c5:bc:40:e0:15:99:b4:
         30:a9:8f:8d:5a:0f:91:1e:27:5d:c5:22:c4:82:72:ca:5a:be:
         33:6a:47:d9:7f:f5:14:53:f4:08:11:6f:9a:10:ab:5d:2a:79:
         ac:f4:b6:3f:b4:99:f9:15:63:37:53:2b:64:a7:5c:ee:96:89:
         3c:b6:f7:af:81:c6:75:ad:5f:21:24:54:a0:bb:cd:d5:51:f1:
         40:ab:53:f5:27:b5:5d:82:ef:42:af:a5:11:0f:25:2b:62:4e:
         80:5d:7a:62:31:15:30:d3:b2:41:cf:02:84:d1:8b:a7:ae:e4:
         b8:77:15:2e:62:6a:38:23:ab:e1:7a:14:fd:dc:c0:3d:56:e9:
         f3:da:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:02:44 2026 by rpki-client