Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa
File:                     3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa (raw, json)
Hash identifier:          2HZCmfgyesYbzD/GPedMgS7EKSiiRbSuMdyaFmhBopc=
Subject key identifier:   FE:E4:52:AF:DF:B7:E5:B6:1C:F7:FF:A4:8E:03:2B:62:D4:AF:39:1C
Certificate issuer:       /CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
Certificate serial:       3EF950073F2182E3241F29A72A8AE8B8F18538E7
Authority key identifier: 5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa
Signing time:             Wed 02 Sep 2026 13:25:33 +0000
ROA not before:           Wed 02 Sep 2026 13:20:33 +0000
ROA not after:            Wed 01 Sep 2027 13:25:33 +0000
asID:                     264500
IP address blocks:        131.255.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl
                          rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 02:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f9:50:07:3f:21:82:e3:24:1f:29:a7:2a:8a:e8:b8:f1:85:38:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
        Validity
            Not Before: Sep  2 13:20:33 2026 GMT
            Not After : Sep  1 13:25:33 2027 GMT
        Subject: CN=FEE452AFDFB7E5B61CF7FFA48E032B62D4AF391C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6e:c6:d1:65:01:a8:59:d7:5a:cc:97:15:c5:
                    0e:9f:16:22:26:e3:b1:da:54:e9:61:7c:b0:c5:d1:
                    67:2b:79:9f:5f:20:da:8a:da:e2:ba:2f:20:42:f9:
                    60:18:0d:81:1f:df:f4:a0:6a:19:0a:82:b7:7b:95:
                    9f:6d:ff:37:f8:de:45:b5:38:90:52:33:3c:02:6e:
                    aa:b8:31:32:39:c1:f4:b6:6a:59:c0:1b:8b:30:d6:
                    ae:d2:39:1e:a0:cb:08:08:03:a2:1d:95:85:67:58:
                    3a:01:c7:4d:d1:d5:d6:dd:df:d7:55:24:4b:ef:53:
                    15:eb:00:b3:4e:d5:c2:f8:48:80:03:4a:88:67:58:
                    66:7a:cb:b2:0b:51:79:e0:87:a2:a4:98:cc:4e:40:
                    08:38:df:38:9d:0d:96:54:a4:19:17:04:3e:95:ef:
                    98:17:f5:7a:a9:04:2e:5c:06:78:7f:8b:da:6f:61:
                    19:36:0a:09:78:d0:fd:32:b8:18:a8:4a:44:d3:02:
                    7f:94:7e:d7:c0:a8:41:dd:40:a8:b1:ae:ef:a7:98:
                    4d:92:7a:c6:49:78:18:3a:30:86:ef:fe:30:c9:1a:
                    db:82:f6:cc:f3:80:f3:6f:f6:9c:22:6d:b4:7a:41:
                    96:72:3a:34:4a:73:29:3c:f6:9b:7c:9e:f6:ad:52:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E4:52:AF:DF:B7:E5:B6:1C:F7:FF:A4:8E:03:2B:62:D4:AF:39:1C
            X509v3 Authority Key Identifier:
                keyid:5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232382e302f32332d3233203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:33:78:87:fa:5f:8b:b2:82:a8:56:33:38:85:e1:a3:d0:
         9a:07:20:61:ac:5c:31:b9:66:42:2f:fd:05:77:fd:72:f6:1e:
         57:13:df:f6:c4:07:0f:a7:85:63:d1:df:3c:e7:87:a0:cd:5a:
         db:2f:99:a9:9a:b9:57:a7:02:3b:18:29:bf:08:54:70:47:ce:
         73:03:a5:dd:c9:10:a9:80:de:7f:9b:bb:00:97:21:04:e4:94:
         d5:39:35:eb:9a:41:5a:e8:38:62:c2:58:47:93:4a:6f:47:ed:
         eb:fd:d5:12:ea:e4:2f:b3:0f:67:93:24:fb:7e:64:9a:3c:7f:
         11:11:30:8d:36:16:44:c8:0b:8f:1f:30:d1:2b:de:f9:78:5f:
         b2:0d:75:ac:64:b8:7b:46:3f:b7:42:06:1c:61:4f:d7:3c:07:
         a4:f4:1a:da:82:f2:e5:15:11:1e:84:de:93:45:80:e2:68:c2:
         0c:dc:ea:70:8b:c8:d5:e5:ca:d6:2d:9a:34:e6:ac:74:35:6d:
         5b:b6:1f:eb:87:86:3b:50:3f:5b:f4:ab:8e:c6:a5:8a:de:e7:
         c4:cb:07:4b:78:52:18:27:4f:51:d7:e6:68:ca:7b:15:44:ed:
         16:b3:ae:e1:c2:f4:17:fc:8f:46:bb:4f:a3:2f:af:a1:ba:d8:
         eb:c0:39:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:18:56 2026 by rpki-client