Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32332d3233203d3e203631373534.roa
File:                     3133312e3130302e34302e302f32332d3233203d3e203631373534.roa (raw, json)
Hash identifier:          U52vIZ2MDyuNoCm00+x4DQAMk7RhNWdLJtbdZ/67zQY=
Subject key identifier:   AF:A8:A1:2B:A3:11:0F:66:4D:C0:75:6F:D6:CF:69:0D:0E:1F:A8:16
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       017BBB2FAB951FA330AF8E1D766C1439CEFEB20A
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32332d3233203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:25 +0000
ROA not before:           Fri 11 Sep 2026 20:09:25 +0000
ROA not after:            Fri 10 Sep 2027 20:14:25 +0000
asID:                     61754
IP address blocks:        131.100.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 01:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7b:bb:2f:ab:95:1f:a3:30:af:8e:1d:76:6c:14:39:ce:fe:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:25 2026 GMT
            Not After : Sep 10 20:14:25 2027 GMT
        Subject: CN=AFA8A12BA3110F664DC0756FD6CF690D0E1FA816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:a4:5a:b6:b7:17:0d:26:6b:fc:57:78:47:
                    59:36:6d:60:1d:4c:24:7d:65:69:0c:a5:ef:28:5c:
                    8e:46:5e:88:c7:43:00:d5:ca:54:8d:fc:8b:4b:e9:
                    17:cb:1e:91:57:44:57:65:f5:44:72:c1:3e:19:d8:
                    58:2c:8d:fd:89:79:8e:2f:0c:de:a7:76:38:9f:78:
                    35:93:37:cf:d0:7e:fa:eb:3b:1c:07:26:6f:07:c8:
                    f1:b6:ad:42:9d:bc:f9:b5:79:d8:ea:95:d3:e8:99:
                    4c:44:e7:fa:e0:43:d2:44:a0:0d:d3:3a:c3:b4:8f:
                    b5:18:6c:d2:5d:d2:ef:cd:8f:89:f1:0d:3f:8d:cf:
                    9b:5a:6f:9b:4c:87:a8:5c:45:26:6c:fe:90:32:a9:
                    06:3b:b7:08:7e:8e:72:f3:a4:e4:1c:8a:88:c1:23:
                    2c:0c:bd:5b:f4:af:ad:a0:c6:8a:4a:7d:ba:3d:58:
                    99:ba:f5:6e:e1:5f:53:26:51:c0:05:98:96:09:b7:
                    58:66:bf:43:63:65:b3:8e:d4:3d:ce:29:33:b9:86:
                    e0:9c:c7:59:5d:1e:9c:60:74:e6:16:df:86:af:55:
                    05:78:56:f4:4e:6d:e0:6a:50:ca:1b:da:7b:9a:b9:
                    c5:ce:a6:e8:86:00:e8:e5:cb:bd:16:f2:8a:db:de:
                    ed:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:A1:2B:A3:11:0F:66:4D:C0:75:6F:D6:CF:69:0D:0E:1F:A8:16
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34302e302f32332d3233203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:43:0e:35:a3:21:52:17:19:d1:60:c1:be:55:62:df:a9:
         41:98:ce:a0:4c:e3:35:54:fc:33:5a:3f:34:1a:f7:17:e5:74:
         09:62:4e:ad:97:3b:e0:0c:c7:74:33:a3:6a:0a:79:ec:ef:e6:
         a3:33:fd:72:7d:77:09:fc:fd:fc:61:8f:25:18:a5:39:c2:cf:
         63:13:e9:f5:fe:66:d9:c7:5e:d2:63:e3:2a:65:cf:c5:b1:b9:
         2e:4b:2d:63:2d:83:fc:0f:8d:69:62:b7:b7:14:fe:7b:bf:30:
         39:d6:d8:f5:10:3e:5e:fe:ae:c6:c4:c5:36:34:78:00:78:e8:
         0e:60:dc:f8:94:82:86:4a:85:5c:18:78:ca:26:8c:68:b1:06:
         a7:d3:ce:a4:f5:0c:ba:f7:68:da:3c:3e:d5:c0:1f:f0:b1:c4:
         12:cb:35:6f:6a:fc:82:8a:86:4c:1d:c8:50:4c:e1:f6:1d:27:
         5b:42:88:c2:af:7b:85:60:4e:23:18:19:c4:9f:4d:72:44:1b:
         56:f1:5a:aa:d2:fb:b5:be:b4:e1:a7:0b:82:2f:f7:9d:11:8a:
         bb:12:8c:d8:6a:8c:45:ca:f4:71:6e:1e:b7:ac:4c:57:34:ad:
         a4:5d:ff:88:7d:4b:6f:7f:f8:1f:68:42:87:0b:06:69:cb:71:
         09:4f:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:17:57 2026 by rpki-client