Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
File:                     3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          1weBOdYkhgzDw1GIiz5Vl2j8m+5M//y2aWFdVhElqRM=
Subject key identifier:   0A:AA:E0:E7:F0:30:2C:05:77:6E:5F:85:13:C3:AD:35:F3:EE:80:C0
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       4C025BC3BBD9B56EE158B5CB17AE0D0ACD39A800
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
Signing time:             Mon 23 Mar 2026 19:54:12 +0000
ROA not before:           Mon 23 Mar 2026 19:49:12 +0000
ROA not after:            Mon 22 Mar 2027 19:54:12 +0000
asID:                     271253
IP address blocks:        131.255.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:5b:c3:bb:d9:b5:6e:e1:58:b5:cb:17:ae:0d:0a:cd:39:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Mar 23 19:49:12 2026 GMT
            Not After : Mar 22 19:54:12 2027 GMT
        Subject: CN=0AAAE0E7F0302C05776E5F8513C3AD35F3EE80C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:26:56:e0:68:e8:3e:df:06:62:e4:e7:2c:
                    f9:57:7c:54:b2:41:d4:13:9a:c8:8d:3f:b2:75:73:
                    8e:2d:eb:82:49:2e:a5:85:0c:06:bf:1f:21:2d:36:
                    8b:3d:ac:63:5c:41:16:0c:d9:e0:e2:5e:95:d5:81:
                    60:b9:ea:a3:49:cf:95:fb:24:2b:5b:54:e0:85:45:
                    32:a5:cc:f0:a2:f5:d0:96:14:33:4b:e0:d2:9f:3f:
                    74:2c:2e:86:6b:84:ff:1c:ee:1c:bb:69:d4:a9:f4:
                    45:f2:b2:d2:f2:bd:78:b5:b8:23:03:90:54:36:af:
                    d8:4b:ce:ed:8a:69:26:dd:c2:a1:d0:86:44:72:03:
                    40:1b:53:d3:00:16:a2:d8:90:cb:63:68:8c:35:e9:
                    78:f0:c3:c3:5a:f7:fe:82:f4:fd:e4:1c:ff:90:4d:
                    e4:77:11:af:ca:3a:1c:07:e7:5a:4b:14:3f:2b:49:
                    dd:84:fe:0b:79:f7:2b:a9:c7:d8:94:23:7c:29:ad:
                    d9:5c:ba:a8:ab:2e:5f:3a:b2:52:e8:77:30:1b:8e:
                    de:3b:73:54:54:e8:9f:ff:7e:51:07:19:49:6a:16:
                    3a:8b:c4:5c:23:d4:78:27:03:af:9f:ce:52:d7:1d:
                    fd:90:27:a6:61:24:82:6b:ac:da:57:6a:21:d4:7a:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:E0:E7:F0:30:2C:05:77:6E:5F:85:13:C3:AD:35:F3:EE:80:C0
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:88:83:4a:5b:5a:46:32:8b:7c:3f:52:df:b2:3d:25:d2:8f:
         09:3e:69:ae:94:6a:c6:74:85:68:e7:98:62:58:5d:7f:ce:cd:
         aa:7a:06:e7:5d:fa:82:63:bf:3a:1b:a7:70:56:79:92:e7:c5:
         a7:54:d2:22:82:eb:a2:b0:f1:b7:06:70:d1:c0:af:01:87:3e:
         84:6e:6f:93:b4:7b:9d:6f:c8:00:a8:a3:c0:f1:fa:54:be:5e:
         67:69:ec:bc:19:5e:69:ff:07:dc:db:b1:55:ae:b9:9d:2a:de:
         e2:cd:77:c7:50:64:fb:98:5a:46:6b:1a:94:59:3f:77:c4:5c:
         84:8f:b0:1d:47:9a:d4:33:ee:fb:18:06:38:0e:c2:37:ec:05:
         c2:59:34:5c:af:da:d9:0c:19:0a:27:17:1f:2e:ee:a9:91:06:
         96:80:4e:cc:cd:b5:7b:d8:14:c6:21:0d:a1:c9:27:2c:f4:d5:
         c3:24:d2:97:7f:46:2f:1f:ee:7b:44:2f:62:5c:e3:df:63:14:
         6e:6c:a9:a8:5f:52:ed:a6:5c:5d:0d:0c:a8:05:c4:f8:28:ef:
         73:48:d9:34:9f:9d:0a:24:5d:c5:27:06:61:8d:a7:d4:16:91:
         29:92:2e:b0:3e:24:8b:e4:77:7e:a2:60:13:27:af:69:16:1b:
         4c:96:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:42 2026 by rpki-client