Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa
File:                     3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa (raw, json)
Hash identifier:          0dtPJ5Pa2DLvQv+JW+EsacDoF1+4d8lhC+Cy+mO0PSU=
Subject key identifier:   D1:BC:CC:81:C1:74:AD:A1:A2:AB:C5:C9:73:7E:48:D4:F1:E8:C9:FC
Certificate issuer:       /CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
Certificate serial:       016CE595274139663083126ADD4DCE6A6FF4926E
Authority key identifier: 0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa
Signing time:             Fri 28 Aug 2026 15:00:17 +0000
ROA not before:           Fri 28 Aug 2026 14:55:17 +0000
ROA not after:            Fri 27 Aug 2027 15:00:17 +0000
asID:                     264523
IP address blocks:        131.255.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl
                          rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:e5:95:27:41:39:66:30:83:12:6a:dd:4d:ce:6a:6f:f4:92:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8D4D28751C71CE312B11C82E2188BC7F54FB05
        Validity
            Not Before: Aug 28 14:55:17 2026 GMT
            Not After : Aug 27 15:00:17 2027 GMT
        Subject: CN=D1BCCC81C174ADA1A2ABC5C9737E48D4F1E8C9FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:dc:4e:9c:af:c1:c3:a7:69:87:a8:56:8c:
                    44:5a:e7:7b:b3:c0:d4:ae:b0:81:4b:d1:ff:9b:75:
                    f1:6e:09:fa:0d:cd:c2:43:2a:c1:bb:03:ac:53:8a:
                    2e:55:90:df:06:87:d9:96:ac:96:6d:93:d5:b3:3b:
                    37:e6:e5:4c:cf:db:0e:a2:c6:1b:80:27:07:78:60:
                    e5:df:d6:92:c1:02:09:66:c0:ad:87:f6:9e:1c:5c:
                    69:90:b0:0d:9c:31:66:1c:17:7a:cd:8d:c2:6e:e2:
                    96:42:39:3e:10:16:d8:99:f0:18:13:cb:ed:f7:6f:
                    f8:a6:5f:79:3e:04:a3:67:2e:ca:53:5c:8a:3e:13:
                    c2:9f:b2:22:3e:f9:50:94:5b:e0:14:93:83:18:49:
                    96:93:62:e9:6c:ae:e8:73:4f:99:f4:21:4c:4d:7e:
                    c6:9a:14:68:53:a3:50:13:00:57:f4:56:61:94:d3:
                    4e:ad:c4:54:77:6c:de:02:e0:94:7e:62:cf:9c:95:
                    0e:91:39:5b:35:f4:f1:84:e3:f3:8e:c5:a9:64:94:
                    52:30:ed:16:a8:ba:17:e8:c3:39:e4:07:af:ad:a3:
                    ff:f9:c2:aa:8d:0a:45:ac:95:f8:72:ec:fd:6e:a5:
                    1e:73:29:b1:ab:e4:bf:0e:12:63:c1:ee:29:9e:34:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:CC:81:C1:74:AD:A1:A2:AB:C5:C9:73:7E:48:D4:F1:E8:C9:FC
            X509v3 Authority Key Identifier:
                keyid:0E:8D:4D:28:75:1C:71:CE:31:2B:11:C8:2E:21:88:BC:7F:54:FB:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E8D4D28751C71CE312B11C82E2188BC7F54FB05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAz9FjBStLHBu5XTdjb8KEsSFg22BWX4aE1owkhcDUr9/0/3133312e3235352e37322e302f32322d3332203d3e20323634353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:72:f4:41:28:26:ee:af:dc:80:2d:84:ca:b5:0b:88:b7:
         5a:d6:45:31:c6:62:f5:b8:02:74:e0:20:d6:1f:93:9f:f6:14:
         6e:7d:fe:51:45:62:9d:1c:04:e1:dc:ab:2e:d7:2a:45:45:94:
         48:32:3b:d5:e5:72:c7:d8:b7:68:e7:ba:9d:9e:03:0f:e9:7d:
         0c:34:c0:de:b5:a1:eb:ed:ad:1d:7c:54:54:0e:91:a6:b0:e5:
         89:e1:9a:e1:12:da:33:2c:7d:38:17:ca:95:47:17:5d:38:01:
         11:ae:cd:43:e5:44:6c:e2:c8:7d:80:8c:0b:a7:5d:78:f3:45:
         3a:67:a0:77:21:27:59:6c:13:81:25:17:7e:60:e3:fc:f1:c7:
         ba:68:78:6d:83:69:f1:3f:01:12:4d:09:f3:97:2c:f7:ce:e8:
         29:2b:11:d0:a2:39:90:63:9b:af:8f:8a:64:ef:9c:53:23:cf:
         f1:9f:6e:23:98:41:47:4a:5a:ce:5f:27:fb:de:f1:5e:9e:61:
         a3:13:ef:03:b5:74:a2:36:17:c2:e3:9d:d4:e9:09:04:8d:b2:
         68:74:42:39:3d:3e:0c:8d:a3:5a:df:99:8c:9d:ff:4e:21:51:
         5f:7d:02:54:c7:e1:97:c8:56:54:b5:bc:6c:72:8a:ef:6c:14:
         af:eb:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:10:30 2026 by rpki-client