Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa
File:                     3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa (raw, json)
Hash identifier:          9xXWxU6vXhRrBW5GiOh4X9FD0Ojg30ai0Zf3ychWvvs=
Subject key identifier:   AA:9E:D2:CD:92:13:57:5B:2D:F9:A9:49:2B:9A:0B:B8:7B:F0:7E:A4
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       2D42F6C799CD132BD51B5395E18251EA37E777A7
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa
Signing time:             Wed 24 Jun 2026 11:31:33 +0000
ROA not before:           Wed 24 Jun 2026 11:26:33 +0000
ROA not after:            Wed 23 Jun 2027 11:31:33 +0000
asID:                     269705
IP address blocks:        131.255.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:42:f6:c7:99:cd:13:2b:d5:1b:53:95:e1:82:51:ea:37:e7:77:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Jun 24 11:26:33 2026 GMT
            Not After : Jun 23 11:31:33 2027 GMT
        Subject: CN=AA9ED2CD9213575B2DF9A9492B9A0BB87BF07EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:05:49:a7:74:00:d1:cc:c0:12:e5:88:89:
                    cc:ea:6a:51:e5:22:08:fc:cf:7a:e1:fb:f6:62:72:
                    13:54:49:cb:ab:a6:e8:7e:ef:ba:5d:b5:3c:c6:44:
                    bf:a9:fd:2d:15:b4:da:bd:ab:31:01:e4:9c:43:80:
                    e4:24:5c:98:a3:38:1d:06:e8:d1:5c:3e:c0:7a:d0:
                    d4:a3:35:f2:d8:7b:c2:a6:76:08:49:ed:3e:e5:98:
                    39:68:6c:a1:87:18:e3:02:f1:17:69:6d:47:ae:38:
                    6f:79:1a:b4:f8:8b:d5:67:ad:93:54:18:d7:dd:d6:
                    a0:79:71:16:e1:7b:fb:00:d3:e9:70:27:bd:4d:8d:
                    73:58:49:dc:aa:b7:16:a4:b1:bf:59:8b:44:a9:72:
                    07:0f:b0:86:3f:c5:bb:dd:0b:0d:1b:9c:6e:6a:0e:
                    69:f8:90:3c:c2:20:d4:84:0b:3d:2b:66:5c:70:01:
                    bf:49:1c:e7:f9:c9:bf:c4:8f:37:7a:64:f1:49:84:
                    c9:1a:cc:7b:f3:db:62:b2:0d:9a:9a:2c:29:e3:99:
                    2d:3f:7e:07:92:72:19:da:b6:0c:ef:9e:df:e4:2f:
                    67:28:35:b0:28:34:c1:69:31:71:d3:e5:a5:50:db:
                    6a:95:f6:d7:a2:e4:a1:07:fa:2a:1b:c9:a2:73:d6:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:D2:CD:92:13:57:5B:2D:F9:A9:49:2B:9A:0B:B8:7B:F0:7E:A4
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32322d3232203d3e20323639373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:d0:3a:90:12:83:fb:0d:49:43:96:dd:1d:33:a5:a5:48:
         f3:80:fc:2f:02:b7:41:33:a0:4b:a1:21:2c:b8:a0:83:bb:fe:
         1a:43:e4:9b:1a:10:6d:06:70:b8:89:7e:33:7e:f0:d8:c6:f5:
         e0:c7:3a:1a:8e:2c:fc:c9:ba:ac:ae:72:e9:7b:7e:c8:79:ea:
         79:38:a4:36:8c:6c:81:a7:6a:49:6f:87:d8:68:d6:26:6e:2c:
         f2:25:9f:08:6a:7c:01:5b:3f:e3:87:7d:ce:28:0c:c5:33:a0:
         25:ae:a8:e4:c7:39:d7:cd:d4:0f:86:13:3e:27:37:42:5c:93:
         74:b0:86:bf:f8:c8:d0:ad:57:cc:cf:9f:a9:9b:d4:7e:e9:47:
         83:8e:f9:31:bc:26:2e:89:1a:db:6f:de:f8:d0:b1:08:76:78:
         8d:df:1d:5c:7d:ca:fb:db:8a:9f:d5:de:b0:68:18:37:fc:94:
         ca:6f:a3:c2:1a:d5:d0:b2:b3:b2:42:32:26:c9:a6:aa:4e:20:
         b8:50:42:30:ab:c4:04:78:0a:62:ed:3c:25:e2:9c:a9:de:57:
         c9:7b:65:47:4c:6b:2c:56:73:17:91:3a:3c:e9:5a:da:95:ac:
         55:c9:c9:c8:64:57:7d:67:d5:b1:62:e0:c4:70:e4:e5:83:72:
         37:59:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:15:02 2026 by rpki-client