Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
File:                     3133312e302e3139342e302f32332d3233203d3e203631373139.roa (raw, json)
Hash identifier:          TsjjXPRGfJIqEQIcCtgWcz+KZ2YLMcFW7x/JSYI4HUo=
Subject key identifier:   2D:07:F4:77:D9:18:01:EE:91:6D:C3:C9:87:03:B4:F2:CF:A7:E6:79
Certificate issuer:       /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial:       61FBAB45CC1A030993216FB8418636410E9FA363
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa
Signing time:             Wed 14 Oct 2026 13:00:18 +0000
ROA not before:           Wed 14 Oct 2026 12:55:18 +0000
ROA not after:            Wed 13 Oct 2027 13:00:18 +0000
asID:                     61719
IP address blocks:        131.0.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 15:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fb:ab:45:cc:1a:03:09:93:21:6f:b8:41:86:36:41:0e:9f:a3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
        Validity
            Not Before: Oct 14 12:55:18 2026 GMT
            Not After : Oct 13 13:00:18 2027 GMT
        Subject: CN=2D07F477D91801EE916DC3C98703B4F2CFA7E679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:cd:a2:b2:77:75:1f:56:d9:34:a4:a7:28:
                    59:60:ee:39:01:a4:54:8f:08:43:4d:be:22:fc:a8:
                    1e:89:ce:db:ec:f7:51:3b:0d:9b:e4:ca:bb:0e:a0:
                    ca:47:2c:82:29:10:ea:da:81:8c:6e:07:99:82:58:
                    cd:56:81:88:b5:cd:4e:74:3f:27:de:f2:66:da:fc:
                    c6:9e:54:01:54:0f:6f:e2:7a:17:c8:78:91:5c:f5:
                    81:8c:e0:76:8d:af:5b:bd:0e:49:f6:70:d4:1a:c5:
                    41:38:65:79:83:12:97:5e:a9:98:9d:0b:80:32:fd:
                    cb:b7:82:19:34:45:55:49:ee:f1:ef:a7:01:2f:dc:
                    54:80:e1:1d:68:18:63:5d:2e:a2:9b:32:56:14:73:
                    31:c1:04:f4:d0:fe:d1:e6:02:82:36:08:40:e8:52:
                    b7:2b:b9:11:17:b8:6c:93:66:f8:13:ce:0d:f3:e2:
                    d3:39:03:9d:3d:23:c0:05:14:a4:ae:20:22:6e:16:
                    4a:30:ed:3c:28:7f:31:2a:ce:7e:9d:07:72:c8:0d:
                    1c:a3:5d:cb:22:84:1d:07:fe:10:53:2d:5f:3c:4e:
                    62:c7:7f:2a:80:a3:f7:8d:cb:45:f1:b1:9a:7b:5f:
                    9b:c6:35:da:2d:13:8e:c5:c1:db:5b:27:30:da:9c:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:07:F4:77:D9:18:01:EE:91:6D:C3:C9:87:03:B4:F2:CF:A7:E6:79
            X509v3 Authority Key Identifier:
                keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139342e302f32332d3233203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:69:f1:5f:09:65:ed:29:77:10:a3:d7:32:e1:10:23:19:
         f6:8c:4a:12:e0:8d:c1:77:b0:d1:fd:ce:f5:47:1a:6c:30:b3:
         8a:36:aa:8f:47:2e:59:2f:a2:bf:b8:3d:e9:29:8f:74:f7:eb:
         76:f7:bf:50:bc:b0:09:52:d3:45:81:d5:11:39:29:98:3d:bb:
         b7:3a:27:15:f2:c6:95:72:76:32:d5:3b:ca:ac:74:2d:c2:7c:
         af:58:95:4c:3f:5b:df:a6:d8:7a:29:50:80:58:ab:f3:72:08:
         ae:fa:82:0a:83:ea:b6:0b:43:94:1e:53:f5:d5:91:54:24:46:
         d6:e8:49:68:99:19:2a:ee:e4:e4:5d:e6:6b:6d:58:84:03:a7:
         cd:98:32:69:e4:da:20:37:fd:90:2b:8d:0f:37:04:24:a9:6b:
         d6:bf:f7:c5:de:c2:51:de:33:68:a9:23:68:8b:b5:8e:02:ad:
         b8:22:6d:f4:ef:54:c9:69:82:eb:da:ac:f0:9c:60:c9:79:6a:
         9b:20:f6:41:fa:23:98:3f:fb:42:a4:00:48:4b:5c:5f:84:6b:
         1c:e3:3c:2c:b6:dd:c8:fc:01:ee:10:7a:e4:03:b5:5d:cf:3c:
         ea:a8:80:33:5b:a4:fa:19:d8:c2:8a:b2:e7:cf:29:e0:f4:8a:
         79:05:f8:5a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYfurRcwaAwmTIW+4QYY2QQ6fo2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTczNjU4RTQyNDFGMjFDQUIyMkNCOUZDMTUwQkY2RkI4
OTgyNzFFQTAeFw0yNjEwMTQxMjU1MThaFw0yNzEwMTMxMzAwMThaMDMxMTAvBgNV
BAMTKDJEMDdGNDc3RDkxODAxRUU5MTZEQzNDOTg3MDNCNEYyQ0ZBN0U2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwu82isnd1H1bZNKSnKFlg7jkB
pFSPCENNviL8qB6Jztvs91E7DZvkyrsOoMpHLIIpEOragYxuB5mCWM1WgYi1zU50
Pyfe8mba/MaeVAFUD2/iehfIeJFc9YGM4HaNr1u9Dkn2cNQaxUE4ZXmDEpdeqZid
C4Ay/cu3ghk0RVVJ7vHvpwEv3FSA4R1oGGNdLqKbMlYUczHBBPTQ/tHmAoI2CEDo
UrcruREXuGyTZvgTzg3z4tM5A509I8AFFKSuICJuFkow7TwofzEqzn6dB3LIDRyj
XcsihB0H/hBTLV88TmLHfyqAo/eNy0XxsZp7X5vGNdotE47FwdtbJzDanPGpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQULQf0d9kYAe6RbcPJhwO08s+n5nkwHwYDVR0j
BBgwFoAUVzZY5CQfIcqyLLn8FQv2+4mCceowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNLRHByUjlDRGlYdTEzajZuekV6aFdjVG5KTmRDRlFOMzJqNGJUNmhK
M1MvMC81NzM2NThFNDI0MUYyMUNBQjIyQ0I5RkMxNTBCRjZGQjg5ODI3MUVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3MzY1OEU0MjQxRjIxQ0FC
MjJDQjlGQzE1MEJGNkZCODk4MjcxRUEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzS0RwclI5Q0RpWHUxM2o2bnpFemhXY1RuSk5kQ0ZRTjMyajRiVDZoSjNTLzAv
MzEzMzMxMmUzMDJlMzEzOTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM3
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYMAwjANBgkqhkiG9w0BAQsFAAOCAQEAXChp8V8JZe0p
dxCj1zLhECMZ9oxKEuCNwXew0f3O9UcabDCzijaqj0cuWS+iv7g96SmPdPfrdve/
ULywCVLTRYHVETkpmD27tzonFfLGlXJ2MtU7yqx0LcJ8r1iVTD9b36bYeilQgFir
83IIrvqCCoPqtgtDlB5T9dWRVCRG1uhJaJkZKu7k5F3ma21YhAOnzZgyaeTaIDf9
kCuNDzcEJKlr1r/3xd7CUd4zaKkjaIu1jgKtuCJt9O9UyWmC69qs8JxgyXlqmyD2
QfojmD/7QqQASEtcX4RrHOM8LLbdyPwB7hB65AO1Xc886qiAM1uk+hnYwoqy588p
4PSKeQX4Wg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 06:43:59 2026 by rpki-client