Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
File:                     3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa (raw, json)
Hash identifier:          I/N5iKRak7TPN8teHTVkNbETMp4YTJ6vJupsCUYg/uY=
Subject key identifier:   77:60:D8:EA:69:85:E8:59:67:5D:14:63:76:74:04:23:F9:59:EE:FF
Certificate issuer:       /CN=4E91C8A601C873F56327512A049333F24F8B5FF3
Certificate serial:       037306C2B35D2CE43F44AC470505E4F0F5DE9B68
Authority key identifier: 4E:91:C8:A6:01:C8:73:F5:63:27:51:2A:04:93:33:F2:4F:8B:5F:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E91C8A601C873F56327512A049333F24F8B5FF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa
Signing time:             Fri 24 Jul 2026 13:55:08 +0000
ROA not before:           Fri 24 Jul 2026 13:50:08 +0000
ROA not after:            Fri 23 Jul 2027 13:55:08 +0000
asID:                     264511
IP address blocks:        132.255.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/4E91C8A601C873F56327512A049333F24F8B5FF3.crl
                          rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/4E91C8A601C873F56327512A049333F24F8B5FF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E91C8A601C873F56327512A049333F24F8B5FF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:73:06:c2:b3:5d:2c:e4:3f:44:ac:47:05:05:e4:f0:f5:de:9b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E91C8A601C873F56327512A049333F24F8B5FF3
        Validity
            Not Before: Jul 24 13:50:08 2026 GMT
            Not After : Jul 23 13:55:08 2027 GMT
        Subject: CN=7760D8EA6985E859675D146376740423F959EEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:1a:8b:2b:80:f3:49:02:3c:34:ce:1f:12:
                    5d:1d:bb:50:de:10:65:48:46:57:e0:50:55:84:78:
                    a3:ff:9f:f6:6e:e1:c0:01:9a:e7:b2:87:54:09:08:
                    b1:66:e6:65:5a:c8:10:03:38:96:f9:ca:37:6a:1d:
                    6b:21:ba:42:00:3e:13:ca:7b:d2:45:0c:0a:9f:b7:
                    80:fc:7f:cd:55:ba:6b:2c:69:94:73:7e:d7:7e:3b:
                    d5:37:e7:12:46:2a:19:16:65:94:f3:ad:3d:11:de:
                    e6:56:a1:ea:72:69:a8:1c:10:a0:e8:8d:94:e9:07:
                    c0:92:44:09:ea:1c:b5:68:4a:e3:aa:aa:c0:12:70:
                    28:b7:06:11:8d:88:c6:07:9f:3a:32:47:0f:fb:a4:
                    de:5c:68:87:67:72:22:f3:c9:b2:86:fb:1b:f7:2b:
                    22:41:a3:06:cd:0b:a6:40:d8:d3:79:95:8c:d7:bf:
                    0b:d2:0f:fb:d2:c5:26:a2:cb:86:ef:d3:f8:9d:4f:
                    75:ed:2b:dd:8e:b5:63:47:de:d3:88:e2:6e:f6:ff:
                    32:c2:d6:8e:04:3a:0f:fd:74:1b:7c:30:5c:15:57:
                    5b:2a:52:ef:24:d1:f4:a9:09:2d:ee:54:f0:7e:5c:
                    58:91:5a:68:5d:62:19:2e:6e:39:3a:3c:60:44:8a:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:D8:EA:69:85:E8:59:67:5D:14:63:76:74:04:23:F9:59:EE:FF
            X509v3 Authority Key Identifier:
                keyid:4E:91:C8:A6:01:C8:73:F5:63:27:51:2A:04:93:33:F2:4F:8B:5F:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/4E91C8A601C873F56327512A049333F24F8B5FF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E91C8A601C873F56327512A049333F24F8B5FF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/3133322e3235352e3139322e302f32322d3332203d3e20323634353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:85:45:83:ba:8d:30:88:03:51:f6:a3:17:82:23:64:ee:ab:
         47:e9:02:0f:e3:97:2e:a7:11:f8:75:35:94:62:1c:2d:38:7c:
         ee:66:d1:08:3c:fc:df:0f:bf:ff:15:ad:48:21:5b:70:cc:75:
         a7:1c:c2:c8:e3:e8:3b:17:75:6a:5a:2d:e6:53:48:01:89:78:
         0e:cf:89:cf:5e:b5:65:55:4d:3b:be:72:1e:37:44:da:58:3b:
         d0:45:e4:a5:3c:0b:9b:2f:49:66:9c:85:e5:b7:04:50:42:29:
         ff:07:cb:8a:14:af:17:10:31:08:79:02:25:55:10:36:1d:d1:
         2d:eb:84:24:56:5c:ce:6e:2f:59:70:f4:8c:1a:c3:d1:a5:28:
         0a:f0:39:3c:37:75:9d:59:5a:62:e2:98:93:33:17:b2:86:a0:
         7c:37:07:70:1d:49:c8:0a:7f:e5:b1:91:30:52:2e:eb:95:3a:
         85:65:e8:51:c2:3e:ad:58:28:aa:e1:20:36:a3:06:85:6a:1b:
         88:06:e2:57:ae:93:30:ea:46:8d:ba:ba:5d:99:92:11:7c:7d:
         9b:ce:a6:85:bc:e8:5e:99:f9:37:c3:02:f1:91:fb:c7:bd:b1:
         ee:44:4c:d5:8a:5e:f4:eb:1f:f9:5d:11:60:32:15:ad:47:f7:
         2f:48:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:46:45 2026 by rpki-client