Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232392e302f32342d3234203d3e20323634353030.roa
File:                     3133312e3235352e3232392e302f32342d3234203d3e20323634353030.roa (raw, json)
Hash identifier:          uprCgZFP88T84QlGQ7fFKeWzRJDEsObFFSgx2hPpU9M=
Subject key identifier:   7A:C6:38:E5:AB:B1:D7:DD:D1:1D:E8:37:7D:9E:90:51:7C:5E:51:4F
Certificate issuer:       /CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
Certificate serial:       03ACD88D345FAE9BE9363E4BF244C65A8BCDD216
Authority key identifier: 5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232392e302f32342d3234203d3e20323634353030.roa
Signing time:             Wed 02 Sep 2026 13:25:33 +0000
ROA not before:           Wed 02 Sep 2026 13:20:33 +0000
ROA not after:            Wed 01 Sep 2027 13:25:33 +0000
asID:                     264500
IP address blocks:        131.255.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl
                          rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 02:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:d8:8d:34:5f:ae:9b:e9:36:3e:4b:f2:44:c6:5a:8b:cd:d2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F2A722B21880E0ECEBBD1E9523AB4065AA09862
        Validity
            Not Before: Sep  2 13:20:33 2026 GMT
            Not After : Sep  1 13:25:33 2027 GMT
        Subject: CN=7AC638E5ABB1D7DDD11DE8377D9E90517C5E514F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:2a:d0:15:23:78:77:5b:91:40:10:40:71:
                    44:8b:d2:41:4e:2d:e0:ef:49:7b:a0:f3:9a:9e:ec:
                    77:f4:57:2f:60:1a:57:42:a7:9a:ba:f7:75:03:e5:
                    52:86:ea:f1:a6:40:d4:cf:d3:07:ca:ea:5a:04:e2:
                    f3:5c:de:8a:59:0c:d5:5c:bf:da:de:d8:3a:a7:b0:
                    5c:2c:ba:6f:8e:e1:52:db:4b:87:8c:36:36:68:9c:
                    6e:7f:59:c1:ad:45:94:60:55:8e:bb:8d:bb:6d:3a:
                    bb:9d:af:16:e1:6f:d0:d9:e9:72:fc:cc:c1:05:31:
                    17:5d:b5:d4:25:cb:59:1f:ee:d1:50:fd:41:fc:48:
                    32:19:69:bc:92:af:06:ee:3d:eb:63:9f:86:d4:e0:
                    36:46:ba:13:d8:10:11:55:68:ad:5a:44:74:be:96:
                    a1:83:9b:b7:9e:8d:a1:03:b0:e8:c3:29:fe:69:71:
                    10:d3:fd:37:30:1d:d7:86:62:bf:c5:da:00:aa:af:
                    e8:b7:23:a1:6a:a9:22:2b:75:ea:76:51:e4:20:e0:
                    86:a1:83:13:c9:9b:18:1b:44:e9:3a:85:75:05:a4:
                    92:9f:db:76:2e:ff:ac:98:44:3e:9f:cd:2b:8f:8c:
                    be:9c:14:3e:85:25:ab:8c:10:f2:9c:67:8d:cd:44:
                    81:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:38:E5:AB:B1:D7:DD:D1:1D:E8:37:7D:9E:90:51:7C:5E:51:4F
            X509v3 Authority Key Identifier:
                keyid:5F:2A:72:2B:21:88:0E:0E:CE:BB:D1:E9:52:3A:B4:06:5A:A0:98:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F2A722B21880E0ECEBBD1E9523AB4065AA09862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DPjes4PvfRaBDq6u4tqAXSq9v3QRg7aLWBX9UdYdh7JG/0/3133312e3235352e3232392e302f32342d3234203d3e20323634353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:33:58:e6:f7:a3:7d:06:e8:f1:07:75:bc:28:2a:39:5f:3a:
         66:f3:2d:e0:8e:d1:29:aa:bb:1f:65:7b:df:66:07:e2:68:24:
         fa:4d:5a:93:56:84:14:63:03:ea:75:df:f0:f2:60:8a:84:e9:
         4e:c7:6e:89:ac:c2:2c:09:1e:26:46:36:3b:f1:32:5e:e5:26:
         2b:17:c5:0a:28:85:ca:52:5c:94:1e:5e:ea:e8:50:28:6d:4e:
         01:ca:e0:c2:ee:4c:3f:da:e4:c4:27:3c:54:74:cf:f6:74:13:
         7d:53:c6:75:a5:f8:d3:1b:aa:ea:f2:24:d4:ab:6e:51:5e:74:
         4f:8f:3e:92:8b:ed:c1:73:36:c2:4e:19:82:74:21:37:c1:e4:
         2a:05:77:a6:3d:74:3a:e3:11:51:ae:d4:81:4e:74:99:23:9e:
         35:20:a0:14:03:96:52:0d:de:d3:e4:e3:05:e0:b5:0b:c3:fa:
         fe:26:6e:6d:92:e3:2b:8c:38:4c:5e:b2:ff:5e:ed:1e:9b:d5:
         92:f3:33:f6:91:7b:bd:2b:f7:8c:09:18:3d:a0:64:ca:c6:6c:
         f9:89:61:f1:67:36:d0:aa:33:b0:bd:98:91:6b:95:fe:81:f0:
         96:56:8a:c0:9b:eb:1e:ed:42:b7:2d:50:69:c0:87:27:de:d2:
         f2:9c:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:50:21 2026 by rpki-client