Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
File:                     3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier:          ZZ1cgysSCTOy73pZWG6Aq16WagL7vk5mBIgxoMEo6gk=
Subject key identifier:   D8:DF:96:AF:52:D2:46:0D:A0:38:14:E1:B0:86:45:E6:3E:3A:5D:21
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       0297B470BF2DB1D4E6B493508E58E2451BA94B1B
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
Signing time:             Thu 12 Mar 2026 14:47:10 +0000
ROA not before:           Thu 12 Mar 2026 14:42:10 +0000
ROA not after:            Thu 11 Mar 2027 14:47:10 +0000
asID:                     53196
IP address blocks:        131.100.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:97:b4:70:bf:2d:b1:d4:e6:b4:93:50:8e:58:e2:45:1b:a9:4b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: Mar 12 14:42:10 2026 GMT
            Not After : Mar 11 14:47:10 2027 GMT
        Subject: CN=D8DF96AF52D2460DA03814E1B08645E63E3A5D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:93:e6:ce:2d:6c:76:6e:c2:da:dd:b8:04:
                    0e:fb:d7:00:f0:a4:bf:d2:d1:d7:30:95:e8:81:66:
                    41:6d:87:b2:eb:bd:20:75:ca:5d:1b:7f:cb:b9:46:
                    d7:18:76:18:5d:25:2a:bd:ae:2a:1a:71:98:c4:89:
                    58:77:1f:76:e3:ef:41:d8:1c:e9:2a:29:43:6c:8b:
                    cb:e4:19:6d:8b:ea:1b:7b:17:41:7b:3a:cd:cf:99:
                    98:88:84:a6:8b:8e:bc:b7:15:80:2d:e5:44:ce:af:
                    f0:2c:ce:99:c6:23:99:0d:27:a6:1f:6c:de:c0:5b:
                    73:a8:52:04:db:ec:5c:17:09:09:58:20:dc:a5:00:
                    b6:4f:c8:25:73:56:ef:af:35:dd:63:76:c6:1b:64:
                    48:50:65:df:06:ef:e1:a4:af:28:17:80:24:a4:08:
                    9c:81:a8:85:3e:56:f4:46:0e:14:e2:83:16:6a:93:
                    9b:bd:e7:a7:1c:4b:55:88:31:92:c8:26:c7:1e:75:
                    2f:e7:e4:5a:09:5d:57:fd:18:2e:6c:bd:77:06:00:
                    82:9a:55:87:59:a6:af:1e:c1:02:3e:36:3c:30:aa:
                    58:a1:b2:0d:de:d8:54:db:c2:c5:6e:d1:05:e5:a1:
                    03:3a:45:43:04:19:fe:b0:c8:42:c0:be:f4:b2:bc:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:96:AF:52:D2:46:0D:A0:38:14:E1:B0:86:45:E6:3E:3A:5D:21
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:67:82:f0:3e:35:50:f9:a2:2d:4c:62:c4:33:8a:8b:67:b1:
         85:4b:ff:f5:e8:3f:c3:b8:67:c5:cf:69:39:b4:9a:24:85:f2:
         b7:20:2d:83:7d:4d:3b:46:d5:a3:5b:44:21:22:f6:df:5d:9c:
         82:ab:ba:08:db:a5:55:17:ee:ff:30:e2:cd:00:6d:4b:93:6f:
         2a:66:59:52:35:56:e9:32:05:50:1a:0e:bb:4e:34:35:42:ed:
         30:0b:ff:90:65:5b:f8:72:1a:55:8f:fb:6f:b1:87:6b:63:a3:
         01:db:9b:fc:05:b2:f1:c2:44:e5:16:59:50:9a:e8:2f:bf:38:
         49:c1:b8:10:ea:b7:75:05:94:7f:43:f2:83:8b:95:fa:0c:bd:
         66:de:3f:5c:30:82:97:c6:8e:cd:96:53:a8:13:2d:68:14:86:
         d0:11:6b:a4:e2:c8:e5:76:30:cf:28:10:ea:79:66:a2:93:4f:
         b8:cb:49:c8:e3:aa:3e:1d:7f:e6:c5:4d:f1:ea:91:4d:8a:22:
         db:26:e9:f3:84:31:ec:e6:ea:5f:d0:7e:f7:1d:b2:3d:91:c2:
         f3:c6:30:f0:80:d0:f7:d3:c5:58:95:15:ab:f3:46:a3:54:be:
         e9:10:78:a1:77:e9:cc:f9:3c:f8:b9:e7:76:b6:78:86:ed:2b:
         c0:dd:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:34:45 2026 by rpki-client