Route Origin Authorization

$ rpki-client -vvf rsync.nex3.com.br/repo/AS265905/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          S3L2wl4RcWG2Peu1W8F/cSJckkPjpMRpr7czM1UNIA0=
Subject key identifier:   2A:FF:D9:33:85:92:B8:99:99:7F:9F:AC:2C:D2:EA:27:0D:C2:2A:01
Certificate issuer:       /CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69
Certificate serial:       46E21CC56D1A115620F030459E782E48BD73E143
Authority key identifier: 49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69
Authority info access:    rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer
Subject info access:      rsync://rsync.nex3.com.br/repo/AS265905/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
Signing time:             Wed 01 Apr 2026 12:36:27 +0000
ROA not before:           Wed 01 Apr 2026 12:31:27 +0000
ROA not after:            Wed 31 Mar 2027 12:36:27 +0000
asID:                     265905
IP address blocks:        131.196.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl
                          rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.mft
                          rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer
                          rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.crl
                          rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/55160920FAD15286842154881A52D710EE4ABA4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55160920FAD15286842154881A52D710EE4ABA4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 03:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e2:1c:c5:6d:1a:11:56:20:f0:30:45:9e:78:2e:48:bd:73:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69
        Validity
            Not Before: Apr  1 12:31:27 2026 GMT
            Not After : Mar 31 12:36:27 2027 GMT
        Subject: CN=2AFFD9338592B899997F9FAC2CD2EA270DC22A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:11:eb:25:75:dc:f2:e7:8f:93:ba:6b:b0:
                    bb:9e:33:f2:6a:c8:e6:96:55:54:c4:bf:4d:4e:ce:
                    1d:e4:20:f2:f0:f7:8f:21:8f:f8:3f:9e:6d:de:8e:
                    66:2f:1d:a8:5b:aa:d4:9b:b8:98:3a:02:10:25:ff:
                    b5:35:96:68:42:74:3a:da:b0:0b:38:4b:89:60:01:
                    2d:44:91:4f:23:13:f8:e7:44:82:3b:ed:8d:aa:2d:
                    35:c7:1d:87:82:6c:38:33:9a:57:24:86:51:eb:62:
                    a3:1e:cd:7a:77:4a:0e:b3:6c:2a:c7:0f:88:8c:23:
                    01:6e:0c:ca:ff:9d:d3:f5:a0:59:66:9e:bc:43:2f:
                    47:d7:73:a9:15:87:a1:2f:15:f3:da:e2:45:8f:bb:
                    0b:e6:73:c0:13:29:01:7f:b6:78:5a:e8:65:33:5a:
                    c4:2f:10:53:50:32:97:61:bc:5a:84:72:30:74:0f:
                    d1:90:8a:1a:5d:66:cb:85:d9:57:91:c7:e7:a5:cd:
                    1a:95:ce:eb:ff:98:f0:42:c8:21:ca:83:d4:7c:30:
                    08:37:20:51:89:c7:ed:a9:c7:6e:6d:aa:48:0c:f5:
                    67:da:de:55:f6:8d:60:dc:e8:5f:35:c8:2d:0d:10:
                    76:7d:7a:8c:16:7f:40:fc:1c:09:e6:dc:32:01:53:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FF:D9:33:85:92:B8:99:99:7F:9F:AC:2C:D2:EA:27:0D:C2:2A:01
            X509v3 Authority Key Identifier:
                keyid:49:92:EA:BC:4C:8F:D0:9A:8A:D1:B9:62:0D:ED:3A:6E:5C:55:1C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.nex3.com.br/repo/AS265905/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/4992EABC4C8FD09A8AD1B9620DED3A6E5C551C69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.nex3.com.br/repo/AS265905/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:a4:24:a9:93:4c:63:2b:c6:0d:60:94:21:82:e2:bf:07:
         ad:5d:a3:56:af:ef:d8:1e:53:72:e9:ef:6c:09:d4:72:16:6a:
         9d:dc:85:f6:cf:b1:d1:f3:40:1d:9c:97:aa:4d:59:bb:8c:99:
         d7:67:b0:c2:a3:e2:df:fa:89:56:0d:cf:75:10:b4:85:ab:2f:
         28:42:7f:52:b1:7e:bd:27:c5:42:3a:3f:4b:53:f4:36:b9:86:
         95:61:f3:6f:60:34:7f:91:d5:fe:84:ee:8f:32:7c:c0:5e:c4:
         37:7c:11:12:f6:d5:d4:a4:16:59:f6:f1:19:36:85:57:7a:9c:
         c1:c2:c1:0c:05:e9:94:56:92:d1:b3:84:b8:e6:54:bb:e8:47:
         e6:d5:e0:39:ab:a9:35:60:aa:33:4e:73:a6:42:dc:93:16:ba:
         5d:e6:70:eb:c5:88:42:91:23:25:de:2e:69:28:e6:13:af:b8:
         9f:81:22:7e:c5:b8:1c:e3:88:e9:a4:24:c5:4b:5f:b3:3b:6e:
         5c:90:05:6c:e6:e6:ff:94:3d:ea:29:5f:af:f2:af:70:b8:54:
         fa:b8:b7:d4:34:0e:42:00:17:3f:94:70:f1:fc:ab:7f:09:49:
         cc:86:d7:92:17:24:50:e7:0e:f6:6d:f2:c4:70:aa:24:e8:01:
         a6:00:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:21:14 2026 by rpki-client