Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20313938393439.roa
File:                     3133312e302e34342e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          KL/RirT659qr2cYiYysDMZCYu1/dbH1Lr0UF+97slQ8=
Subject key identifier:   45:D4:AF:29:30:22:42:6E:E5:EF:78:FB:24:4A:6C:17:80:C9:44:C0
Certificate issuer:       /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
Certificate serial:       4ECED76C7EE2FF0B24402CCC470E27B6042E05A8
Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20313938393439.roa
Signing time:             Fri 14 Aug 2026 22:42:33 +0000
ROA not before:           Fri 14 Aug 2026 22:37:33 +0000
ROA not after:            Fri 13 Aug 2027 22:42:33 +0000
asID:                     198949
IP address blocks:        131.0.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl
                          rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 03:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ce:d7:6c:7e:e2:ff:0b:24:40:2c:cc:47:0e:27:b6:04:2e:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5
        Validity
            Not Before: Aug 14 22:37:33 2026 GMT
            Not After : Aug 13 22:42:33 2027 GMT
        Subject: CN=45D4AF293022426EE5EF78FB244A6C1780C944C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:7b:d6:db:25:93:c8:59:a8:28:b2:1d:c4:
                    27:68:fc:05:42:13:20:8e:9c:40:f5:7a:b9:46:d6:
                    77:30:ab:f7:20:ba:91:66:ff:cc:5b:a7:56:92:4f:
                    e5:50:55:23:27:8f:70:06:6a:03:05:84:a2:1d:d7:
                    17:57:3c:4b:0a:d8:c7:82:1f:62:c4:84:1f:a2:9a:
                    a1:0b:c3:0e:d0:7b:42:cb:b3:6a:c5:b7:f8:b7:a4:
                    50:5c:70:c1:93:fc:6a:03:84:ae:44:b1:f3:8e:41:
                    a2:5f:98:6c:7b:ce:55:13:eb:c7:76:66:12:53:2a:
                    3c:ab:49:ce:73:df:49:99:17:fb:55:63:0c:90:ca:
                    d7:8e:b4:21:10:3f:b8:ac:6d:ef:23:e0:cb:c1:1c:
                    ba:ed:56:12:bf:79:51:96:a0:a9:5f:09:87:25:3a:
                    46:4a:ff:f3:cc:f1:74:87:8c:be:d2:94:92:f9:c9:
                    f6:ba:3d:89:91:69:cf:9c:b5:fd:71:2a:c2:c8:46:
                    51:b8:78:b9:8e:78:0d:af:7f:21:51:a4:5f:c5:9f:
                    a6:8d:c7:a6:ad:18:1b:c8:0d:7e:d4:04:7e:ba:e2:
                    6a:40:d7:f6:dd:56:06:1c:46:d6:d0:a4:46:76:89:
                    49:40:56:5e:a0:7e:1c:90:43:ff:9b:bd:ed:d0:e4:
                    83:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:AF:29:30:22:42:6E:E5:EF:78:FB:24:4A:6C:17:80:C9:44:C0
            X509v3 Authority Key Identifier:
                keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/3133312e302e34342e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:9b:ff:65:70:15:c0:2b:69:13:89:bf:35:a7:c6:82:1a:
         e9:80:85:07:d0:e0:33:6b:43:fc:89:c4:13:d3:0f:c7:a8:dc:
         58:23:7a:9d:12:6a:98:e6:a6:f5:b8:e4:89:bd:e3:b3:5a:59:
         5f:8b:cd:20:1a:f7:a2:0b:dd:4c:8e:f7:d0:d5:3e:ff:6b:c7:
         09:b0:c3:d5:53:c2:c7:77:ff:27:24:b6:5a:d3:d7:92:51:86:
         db:6f:14:66:9f:62:16:68:7c:8d:54:45:71:f1:37:d8:a7:30:
         a8:1b:b4:54:65:5c:f9:d9:f7:eb:ff:79:6b:d0:af:76:12:9e:
         29:73:db:5b:a0:b6:b5:7a:60:3e:73:66:eb:3f:59:78:91:aa:
         ad:76:1c:2c:e7:06:cb:49:dd:8f:37:50:86:ab:ba:12:9f:a8:
         17:fe:8c:fc:41:2f:6e:30:46:72:23:49:28:43:c4:3a:2d:29:
         2e:6e:b1:e1:fe:98:86:90:bd:83:77:42:0e:e7:11:b8:75:cc:
         83:86:2e:af:b5:29:a5:f5:ac:e6:49:4f:f5:d8:24:36:ea:35:
         65:9d:73:b0:88:5c:73:3f:53:00:6e:5d:d8:77:0c:3e:89:a9:
         61:73:9d:ed:a2:99:d0:a2:bf:0c:da:09:dc:8f:c1:df:bd:d6:
         9a:a2:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 18:18:18 2026 by rpki-client