Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32332d3233203d3e20323639373035.roa
File:                     3133312e3235352e3231362e302f32332d3233203d3e20323639373035.roa (raw, json)
Hash identifier:          /dfuXhDC5jofuhdd/slaOeMzhdWnhBU12mGUGj4u9q0=
Subject key identifier:   E1:3E:EE:E8:2D:35:87:A1:E1:17:10:D3:91:CA:D4:26:16:B9:0F:99
Certificate issuer:       /CN=417A3C46308D4692153B994B72E51599225B4979
Certificate serial:       24E04D2A970631225E8A15229744B3CC975E9886
Authority key identifier: 41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32332d3233203d3e20323639373035.roa
Signing time:             Wed 24 Jun 2026 11:31:39 +0000
ROA not before:           Wed 24 Jun 2026 11:26:39 +0000
ROA not after:            Wed 23 Jun 2027 11:31:39 +0000
asID:                     269705
IP address blocks:        131.255.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl
                          rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e0:4d:2a:97:06:31:22:5e:8a:15:22:97:44:b3:cc:97:5e:98:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417A3C46308D4692153B994B72E51599225B4979
        Validity
            Not Before: Jun 24 11:26:39 2026 GMT
            Not After : Jun 23 11:31:39 2027 GMT
        Subject: CN=E13EEEE82D3587A1E11710D391CAD42616B90F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:90:97:8c:40:0b:49:f4:ed:0e:02:3d:58:
                    3b:26:20:e9:89:2a:58:88:b4:81:7a:1d:a3:c1:88:
                    e6:0e:11:43:d0:87:a1:af:40:20:2e:c3:4c:43:0c:
                    28:7e:1e:05:2c:f2:6d:51:85:57:4c:95:b4:9b:42:
                    21:34:f7:06:95:38:c8:4d:cd:bd:ea:73:16:ca:c9:
                    37:c6:da:76:dd:70:8f:da:70:1c:2d:02:49:fd:15:
                    64:e7:e5:03:b0:cd:50:ba:36:68:f4:e3:74:93:b2:
                    78:59:58:83:c6:f6:5a:f9:1e:6e:be:7e:1b:2a:3b:
                    28:fb:d6:0d:3f:ce:33:17:51:a1:d8:47:8e:bd:b2:
                    a8:4f:08:66:be:f0:38:0c:8c:9b:cc:8d:cc:f5:37:
                    00:48:27:dd:62:45:cd:c6:5f:07:27:cd:c4:2b:d7:
                    84:1e:44:26:af:a1:7b:d4:16:20:fb:3e:16:a0:88:
                    6e:8b:48:46:78:ed:44:67:f5:bd:33:14:ac:8f:f7:
                    cf:46:ad:f0:ac:ce:c5:1d:f8:ee:f6:2a:67:7f:0b:
                    e6:2b:da:e0:38:03:ef:5e:68:06:8f:a3:63:c7:52:
                    51:c4:b1:a1:b7:ce:05:3f:42:4f:67:53:0e:50:c6:
                    1f:a0:eb:0b:a0:1b:c9:b1:07:3a:21:bb:65:0b:e6:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:EE:E8:2D:35:87:A1:E1:17:10:D3:91:CA:D4:26:16:B9:0F:99
            X509v3 Authority Key Identifier:
                keyid:41:7A:3C:46:30:8D:46:92:15:3B:99:4B:72:E5:15:99:22:5B:49:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/417A3C46308D4692153B994B72E51599225B4979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/417A3C46308D4692153B994B72E51599225B4979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2K3CiMg8wprt4kdYXYLdWxnhDAhF3Nd99oZoZeANhue7/0/3133312e3235352e3231362e302f32332d3233203d3e20323639373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:8a:45:12:d7:4f:14:a3:61:7a:af:c4:c1:b9:ab:33:20:
         d0:18:b4:3c:61:03:4f:66:71:df:cd:14:66:7a:7d:ef:e2:8c:
         79:7d:db:72:9e:ed:e0:5b:a3:6d:ac:93:7b:26:29:91:32:0f:
         41:71:f6:84:2d:0f:4c:96:cf:a1:21:eb:48:92:aa:fa:b3:69:
         17:c7:b8:84:06:b4:12:cd:82:b6:2a:92:c5:32:84:43:c9:c3:
         a6:3a:cf:34:97:ab:b0:73:91:6c:fd:e9:5c:8f:09:8d:a9:44:
         5f:c6:35:08:59:25:c8:94:c2:ce:7d:02:de:66:17:2c:b3:2e:
         4a:80:19:c0:36:4f:2a:06:66:0f:27:f1:d0:81:74:51:92:46:
         66:7f:9b:41:8a:2d:51:b8:8b:4f:5d:b1:e1:46:cc:ca:32:18:
         14:12:b2:5d:92:be:01:90:b3:50:bb:c1:7f:2c:32:19:fd:01:
         f2:2f:8f:5a:61:a5:86:97:35:2b:e1:2a:17:79:0f:b9:ba:08:
         cf:2e:ef:10:45:f0:59:ac:80:d8:be:85:ec:d5:22:ed:68:c3:
         96:5b:33:c9:b5:26:9a:7c:49:b8:37:8b:dd:6d:d7:c6:b3:1a:
         00:1e:1e:f2:58:bd:02:27:4f:35:c1:39:26:8e:78:55:70:c5:
         0c:c3:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:15:02 2026 by rpki-client