Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323033.roa
File:                     3133312e3235352e35362e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          ulcbpJqMWqmjK9LVllVbDYnIhl6t8F2BGSZ4IzQDB4k=
Subject key identifier:   42:F7:26:3F:29:42:62:45:77:2A:97:38:70:B5:BB:81:A2:10:8D:C0
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       4425D35C3100286CDE14DEAF0C889F4F68BA3B56
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323033.roa
Signing time:             Fri 11 Sep 2026 13:53:49 +0000
ROA not before:           Fri 11 Sep 2026 13:48:49 +0000
ROA not after:            Fri 10 Sep 2027 13:53:49 +0000
asID:                     203
IP address blocks:        131.255.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 Oct 2026 19:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:25:d3:5c:31:00:28:6c:de:14:de:af:0c:88:9f:4f:68:ba:3b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Sep 11 13:48:49 2026 GMT
            Not After : Sep 10 13:53:49 2027 GMT
        Subject: CN=42F7263F29426245772A973870B5BB81A2108DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:9f:6f:63:26:fd:73:5f:5f:a1:74:82:df:
                    35:cd:cc:16:aa:0b:1a:22:7b:55:bf:f2:a9:ca:25:
                    d7:07:6f:59:9a:4c:c8:18:eb:04:0e:c5:c2:e6:94:
                    bb:d3:ee:17:b5:3c:3c:df:07:a3:fb:94:5b:4a:f9:
                    93:a0:e4:25:cc:93:9e:2e:a5:51:01:35:4d:5a:82:
                    5d:94:eb:5a:72:26:0e:ef:6e:60:fb:9a:e4:86:4b:
                    0f:a3:4d:6d:69:4c:8a:9d:f2:a8:d1:55:67:ea:1c:
                    da:c4:80:fc:bf:75:77:05:8f:60:08:09:4e:96:b8:
                    bc:58:d9:17:6a:5c:99:b5:f9:ee:da:ff:ce:2e:e9:
                    f1:f1:61:6c:65:f4:82:61:80:b5:66:11:a6:12:d6:
                    02:fd:5a:5a:e0:31:33:a5:ad:b0:b9:63:fc:ef:23:
                    32:d2:81:c0:2a:db:25:13:63:17:a8:c0:25:8d:4a:
                    d6:9a:3b:3f:4b:d6:e9:e6:70:24:bf:b5:e3:6e:8b:
                    96:cc:a1:6c:85:ee:51:91:04:28:57:b5:e9:c1:3f:
                    f2:1e:fa:ee:f9:a3:90:bd:d4:9c:90:dc:c8:5d:71:
                    15:c8:80:5c:94:35:12:5d:d5:87:36:f2:3c:70:a7:
                    5d:0b:08:79:f5:30:44:e6:51:43:eb:f8:12:32:17:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F7:26:3F:29:42:62:45:77:2A:97:38:70:B5:BB:81:A2:10:8D:C0
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:a7:e6:07:bf:00:ef:f9:31:f9:c9:9e:c9:32:2a:63:3c:
         0d:fc:3d:28:65:76:0f:59:94:81:72:b2:ad:e2:50:a4:e3:e1:
         c7:8d:77:9b:27:f5:bd:2a:3a:38:13:8b:f3:8b:87:4b:a6:a6:
         99:44:fe:c3:b4:22:16:49:23:86:45:4b:3e:fd:39:45:b5:c7:
         17:1e:0a:44:21:2b:e4:2e:9b:45:5f:24:9d:13:35:97:3e:94:
         a7:a8:a2:56:3a:16:84:38:66:2e:5c:73:e3:6b:0e:5d:18:5a:
         32:6f:8d:52:3a:2d:ab:ec:62:36:37:f9:88:0a:d1:dd:6a:66:
         2f:cb:ab:86:34:5f:f4:7e:d4:ba:1d:86:dc:ef:70:5d:bd:97:
         c0:07:81:21:ad:86:9c:f3:b7:88:cf:f8:7e:bb:d9:ae:4f:bc:
         a6:de:d9:07:5d:95:fb:ba:00:df:cf:ff:54:6a:d0:81:33:5a:
         d6:ae:cd:56:13:b4:5d:0f:30:9d:33:50:f1:1a:05:0b:7a:8d:
         39:04:76:9c:33:81:38:3b:d9:ae:d1:d5:fa:f3:87:9c:f7:53:
         34:40:c0:b3:2d:d2:55:01:c7:58:db:2d:30:a6:1e:21:cc:54:
         33:41:d4:c3:0f:3a:01:b3:ec:0b:f1:37:48:d5:5c:02:70:90:
         80:c2:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:07:51 2026 by rpki-client