Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e2036313537.roa
File:                     3133312e3130302e3235352e302f32342d3234203d3e2036313537.roa (raw, json)
Hash identifier:          aGOG20butVjQUMglgvf7/DBdd8ZqJUj5gbPs4l1Jgrs=
Subject key identifier:   8B:19:E3:B4:73:72:C2:90:7E:5B:FF:06:17:1E:E4:69:DD:43:3D:3F
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       700122DAAD6420F116ADE4341A13BCDBF9D900DB
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e2036313537.roa
Signing time:             Wed 21 Oct 2026 18:06:04 +0000
ROA not before:           Wed 21 Oct 2026 18:01:04 +0000
ROA not after:            Wed 20 Oct 2027 18:06:04 +0000
asID:                     6157
IP address blocks:        131.100.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 21:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:01:22:da:ad:64:20:f1:16:ad:e4:34:1a:13:bc:db:f9:d9:00:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Oct 21 18:01:04 2026 GMT
            Not After : Oct 20 18:06:04 2027 GMT
        Subject: CN=8B19E3B47372C2907E5BFF06171EE469DD433D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:ce:ba:9b:b0:fc:10:e0:48:b8:23:c4:24:
                    70:27:89:25:c6:0b:04:e1:75:ac:de:33:1d:25:4b:
                    cd:1e:36:30:7e:c9:e3:38:60:24:a6:3d:09:72:99:
                    20:7b:39:93:f5:b8:3a:f3:75:d0:a5:6e:92:2c:07:
                    8d:07:9a:11:b2:e9:8a:e2:58:3a:93:aa:8f:82:db:
                    26:a6:bf:f0:2c:ba:77:19:67:33:96:14:18:6a:1f:
                    ae:39:9c:b4:bd:c7:67:8c:05:f0:56:8a:d1:f4:fa:
                    94:bb:c3:db:33:43:ab:b1:11:16:84:f1:d7:26:21:
                    db:25:e2:a0:52:19:7a:f0:6b:10:d9:ac:ca:ec:5c:
                    5a:bc:4b:84:73:b0:6d:9b:01:fb:33:44:e0:a5:e9:
                    e7:56:57:0d:34:96:29:57:3a:ed:48:3f:aa:0f:9d:
                    bb:1c:bb:a2:5a:f5:1f:27:d7:06:7c:73:5c:32:41:
                    06:a6:27:16:ab:5a:e5:e7:b4:6e:ba:6d:dc:7b:cb:
                    ab:ee:51:84:ff:e8:71:84:fe:a7:a3:57:f1:b6:d9:
                    a6:3b:48:f5:07:a9:91:01:8a:c8:d1:cc:2d:54:f8:
                    85:ce:80:1e:6c:51:b4:10:7d:bc:86:60:f8:23:31:
                    46:ab:c4:f4:a5:d3:4d:e6:43:b8:7e:6a:4e:34:13:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:E3:B4:73:72:C2:90:7E:5B:FF:06:17:1E:E4:69:DD:43:3D:3F
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235352e302f32342d3234203d3e2036313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:9a:58:ef:bd:b5:6d:73:07:08:41:e4:f8:a6:ff:c2:88:
         59:3d:4d:40:53:85:88:05:73:69:f9:a2:32:6e:01:e7:44:f1:
         77:0b:87:4d:41:ea:ad:8a:ca:49:9b:72:34:95:82:bc:d3:de:
         12:3c:41:d6:17:3e:7c:50:15:69:1a:1b:43:06:63:5a:1b:8d:
         ed:86:a6:90:e8:6f:92:bd:47:1e:d2:7d:88:bf:64:ed:d0:29:
         c2:b4:d2:6a:38:37:06:d0:92:cc:5c:2e:60:c7:45:c3:74:1e:
         b0:15:94:76:fd:40:62:91:b0:c6:45:6d:71:73:10:02:d5:e4:
         50:b9:d5:80:d5:c6:df:cd:51:3d:fa:17:7f:d3:03:91:69:f8:
         83:80:de:be:6f:3f:ae:7d:36:ec:3d:0f:98:15:74:94:c3:0b:
         97:13:7c:b9:29:60:68:aa:2c:ec:e4:00:85:b8:ff:42:19:08:
         a3:be:e6:e1:5c:dd:73:10:8b:cb:10:17:ea:c9:e6:90:88:d5:
         09:e3:03:79:df:67:f6:73:a2:f1:79:96:24:6f:b9:02:7c:98:
         7a:f3:6b:8c:08:dc:96:01:8f:ac:22:c4:03:ba:be:a5:b9:10:
         b6:9b:53:48:53:e2:72:e8:07:15:db:be:7f:4a:db:da:0d:21:
         0d:35:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:55:55 2026 by rpki-client