Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
File:                     3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          75JQ0r7ToU+bU9k190KHc8tZlMxSsWIpYIO3Lw/+KMk=
Subject key identifier:   6F:1B:72:E5:6B:9B:FE:15:0D:5B:EB:E7:F8:8D:C1:CD:A7:CC:91:CF
Certificate issuer:       /CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
Certificate serial:       1696115A5E7913E8CD776669E650E68AF360C1C5
Authority key identifier: EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
Signing time:             Wed 18 Mar 2026 19:36:37 +0000
ROA not before:           Wed 18 Mar 2026 19:31:37 +0000
ROA not after:            Wed 17 Mar 2027 19:36:37 +0000
asID:                     271573
IP address blocks:        201.131.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:96:11:5a:5e:79:13:e8:cd:77:66:69:e6:50:e6:8a:f3:60:c1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06
        Validity
            Not Before: Mar 18 19:31:37 2026 GMT
            Not After : Mar 17 19:36:37 2027 GMT
        Subject: CN=6F1B72E56B9BFE150D5BEBE7F88DC1CDA7CC91CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:05:dd:ab:e6:8c:5a:3e:a5:64:ad:50:75:94:
                    44:57:c0:1d:c2:6c:c0:98:bb:aa:78:54:bd:1a:f7:
                    3b:2e:58:61:71:bf:61:cb:f4:0a:7e:74:5c:27:c6:
                    fd:49:ed:71:49:e7:8f:3e:a0:88:e9:37:8b:43:8d:
                    07:09:bc:7d:46:01:3f:00:3c:05:2d:a3:f8:f9:71:
                    9f:81:1f:61:39:9a:16:c4:be:18:02:93:2c:bc:98:
                    c3:4c:b3:82:14:24:ee:aa:1f:be:7f:9e:dc:6c:94:
                    b0:bb:51:8d:6b:2d:0e:aa:04:a8:2f:88:56:4c:d5:
                    60:2d:57:8e:45:76:b8:01:9c:6b:09:b3:ea:65:fa:
                    88:14:40:c8:f3:e6:63:e6:63:3c:27:91:eb:a9:41:
                    80:30:5e:ec:06:3d:7e:83:46:ab:74:fa:fa:cf:b5:
                    b5:6a:1c:61:86:2b:18:b2:51:5c:6c:d2:fe:87:be:
                    75:06:4c:ff:94:01:5d:7f:b5:76:6d:06:87:3d:7a:
                    6e:f6:8b:fe:62:65:a0:7e:5a:53:22:fd:d3:21:f7:
                    2d:a4:4e:0e:50:4c:cd:2f:c8:aa:7a:ef:7a:bb:c4:
                    16:8f:a0:a1:6f:b3:f4:3d:d9:f3:b0:ec:49:c9:64:
                    a6:e1:48:e9:c7:dc:46:e0:7f:16:47:74:b8:2d:8a:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1B:72:E5:6B:9B:FE:15:0D:5B:EB:E7:F8:8D:C1:CD:A7:CC:91:CF
            X509v3 Authority Key Identifier:
                keyid:EC:3A:9B:6C:1F:6A:69:44:9C:A2:1F:D7:80:F4:F8:01:F6:CE:6B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC3A9B6C1F6A69449CA21FD780F4F801F6CE6B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:72:50:27:90:22:0c:a7:38:b0:07:9c:9d:e0:52:6e:83:
         82:f5:ce:61:f9:77:fe:75:54:6a:16:20:e9:c2:a4:78:e6:21:
         45:c3:3e:f9:d4:29:3a:ca:85:f5:ab:f2:3e:60:61:bb:ab:12:
         74:d3:da:b7:1d:2f:5b:b5:37:e0:54:8a:27:52:f4:71:4c:8a:
         c0:5e:47:a9:c5:b5:26:b4:df:a5:45:57:8d:bf:e4:6c:b4:14:
         58:aa:ce:ce:4d:38:37:ab:58:34:6c:6b:09:97:e7:94:e6:85:
         bf:74:be:d1:d7:b4:49:14:d9:ec:d5:19:b9:55:bc:f8:4d:bb:
         20:58:0d:5f:ba:27:67:7a:b4:d9:b5:f0:46:4c:a9:34:8a:28:
         4e:54:50:e3:ca:eb:af:eb:ae:91:46:6c:30:58:60:64:3b:48:
         46:81:4c:d9:86:89:33:df:2e:18:92:81:8a:69:16:f5:8b:31:
         09:54:57:d2:d0:75:0a:1c:f1:2d:6b:30:43:49:b1:72:b8:07:
         29:72:32:cb:15:f7:58:86:ce:46:8e:8a:65:f4:4f:fb:ab:b0:
         e4:ef:d5:7d:3b:15:7b:b3:9b:17:0b:f2:b0:ac:91:44:25:a2:
         6b:5d:b0:d1:48:f9:f2:74:9b:91:20:32:08:66:95:f6:74:2d:
         30:2b:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:18:34 2026 by rpki-client