Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3133312e302e37362e302f32332d3234203d3e203533303632.roa
File:                     3133312e302e37362e302f32332d3234203d3e203533303632.roa (raw, json)
Hash identifier:          /kj1lt4aoi6kiuHYmz736zBoIqblpbNh2OMqtOL+IJc=
Subject key identifier:   03:8C:C8:6A:40:05:C2:0A:7A:B3:B6:41:62:80:D9:B8:1D:1D:4B:79
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       0A13BBBFABFDF2054997ED8E3F0BFC58C3B139B2
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3133312e302e37362e302f32332d3234203d3e203533303632.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     53062
IP address blocks:        131.0.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:13:bb:bf:ab:fd:f2:05:49:97:ed:8e:3f:0b:fc:58:c3:b1:39:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=038CC86A4005C20A7AB3B6416280D9B81D1D4B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:27:c5:b5:d5:12:2a:bd:1e:40:68:7f:b4:
                    22:a7:3f:71:e0:de:5e:17:16:b8:bb:70:2c:fb:c5:
                    6a:0e:04:66:71:86:53:f9:ad:01:6e:e4:f1:bf:70:
                    3e:2d:fb:fa:84:c4:a5:90:fe:06:d5:e5:18:af:61:
                    62:ae:0d:a3:d9:f0:af:2e:14:8f:97:db:64:b2:df:
                    3e:b9:c5:03:51:e7:f1:9e:54:1e:0d:19:a8:95:8d:
                    33:78:ba:2d:73:5e:87:8a:c3:44:de:24:55:91:63:
                    76:99:8d:19:bf:d4:60:56:e4:bf:37:f3:f5:5d:be:
                    29:99:fa:85:87:78:f9:d5:c3:ed:62:80:79:95:59:
                    d7:ca:29:cc:52:d4:67:07:f5:88:21:88:17:12:fb:
                    ba:65:b6:2b:0a:80:21:d5:6e:48:69:a3:80:ce:5d:
                    f5:db:5a:16:e7:06:fd:15:d8:37:8a:85:76:f5:f1:
                    e0:b6:d3:34:84:a8:b7:ed:71:7a:8f:e3:6a:d9:71:
                    ff:23:d0:8d:29:4f:67:9e:f6:c5:74:79:72:13:30:
                    2f:5c:51:d7:01:7e:a7:3e:49:9b:b3:1f:90:9c:43:
                    c9:6c:d5:73:47:7d:5a:49:e5:9a:27:1f:48:e5:46:
                    15:be:93:65:5c:98:2c:6f:ed:20:1b:dc:b3:bc:e9:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:C8:6A:40:05:C2:0A:7A:B3:B6:41:62:80:D9:B8:1D:1D:4B:79
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3133312e302e37362e302f32332d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:77:38:7d:ac:54:f9:d5:76:fe:68:de:53:4c:2c:5b:d6:4c:
         ca:47:3f:40:98:33:81:d3:3b:0c:7a:ca:27:14:00:48:1b:b5:
         22:2c:16:ca:ee:9a:6c:ad:c9:c7:67:90:2a:5b:75:fa:83:a4:
         8c:cc:ca:cf:69:2b:0d:17:f6:26:ee:7f:0b:00:ef:9c:a5:d6:
         8d:14:12:d7:70:a2:5d:f2:fb:37:53:b3:bc:29:17:48:d3:46:
         92:12:90:dc:25:51:f2:38:e5:bf:53:c9:75:9e:fd:f2:e4:27:
         3a:1e:a3:fb:f1:fe:d4:e5:a0:d4:9d:2d:10:80:fa:7d:c4:7c:
         b6:bb:39:66:12:1f:bb:0e:a9:e1:c2:98:39:dd:b6:8d:05:7c:
         dc:df:fa:b5:e6:6d:32:e0:60:79:71:d5:b3:2c:6a:6c:52:87:
         c2:4d:27:ca:b9:6f:67:57:8d:bb:3f:9f:ba:86:27:3f:a2:63:
         84:63:74:67:70:f1:52:f9:40:59:04:81:43:9a:25:88:33:8a:
         a4:74:61:04:12:04:20:4c:f7:ee:19:97:9d:fb:70:5b:bc:34:
         61:43:bd:c4:b0:d6:de:a0:c0:1e:aa:f8:c3:21:35:94:d1:87:
         cd:ab:96:ca:4a:41:d7:39:9a:99:a4:04:db:e9:8d:d9:73:5f:
         a9:0d:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:41 2026 by rpki-client