Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
File:                     3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          UYq1Wf08oqbfZQFDo1AyWA+uvmCu2Z7M/Q3ixjViFHk=
Subject key identifier:   FF:FD:3C:2B:94:14:E8:47:E4:5C:93:6A:D1:97:13:2A:CB:81:1C:68
Certificate issuer:       /CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
Certificate serial:       3221B1E991D334B5F62612676CDC8D6E71E612FC
Authority key identifier: 78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
Signing time:             Tue 19 May 2026 09:08:14 +0000
ROA not before:           Tue 19 May 2026 09:03:14 +0000
ROA not after:            Tue 18 May 2027 09:08:14 +0000
asID:                     271133
IP address blocks:        131.0.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl
                          rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:b1:e9:91:d3:34:b5:f6:26:12:67:6c:dc:8d:6e:71:e6:12:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
        Validity
            Not Before: May 19 09:03:14 2026 GMT
            Not After : May 18 09:08:14 2027 GMT
        Subject: CN=FFFD3C2B9414E847E45C936AD197132ACB811C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:25:52:46:a7:e8:39:10:ce:a0:de:e0:54:
                    7b:aa:6c:68:f5:17:b0:df:3b:6e:61:4c:95:35:af:
                    44:60:fb:fd:6d:ea:0d:b5:09:58:8a:6b:f1:1b:03:
                    12:e1:40:c1:39:da:a3:8c:db:1d:75:41:3d:28:aa:
                    da:d2:f0:81:69:a8:e6:9a:1e:9f:4b:49:27:2b:54:
                    ed:81:d4:0c:43:24:f1:73:29:ba:5a:2d:81:67:34:
                    64:b8:cf:32:2e:6e:35:44:65:6e:c7:43:2e:37:af:
                    32:6b:02:a8:69:09:b4:ad:f0:47:96:52:fb:9f:ac:
                    e5:a9:a6:07:01:d8:d6:03:a2:80:1f:60:ca:75:04:
                    e3:f6:4b:1a:e4:c5:c2:a3:41:cb:8b:a5:1e:79:ea:
                    3c:41:f3:be:51:22:e7:1e:61:2e:05:e6:20:39:e5:
                    fb:6c:29:4c:1c:a0:28:e4:46:34:08:7d:ab:db:77:
                    c1:8e:e2:65:2c:2a:22:70:08:7f:e6:17:30:4f:89:
                    bb:46:0f:53:0c:50:d2:97:67:d1:32:c7:04:d4:2f:
                    91:b3:87:97:44:e3:e9:0f:da:78:3a:69:c2:ac:7e:
                    67:2f:99:f9:0c:f5:ab:fe:29:22:09:cb:bb:f8:70:
                    ad:3d:93:25:3f:6d:24:a6:73:43:6c:39:e0:e0:1f:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:3C:2B:94:14:E8:47:E4:5C:93:6A:D1:97:13:2A:CB:81:1C:68
            X509v3 Authority Key Identifier:
                keyid:78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:36:00:2b:5a:97:a8:4b:a6:24:4a:46:89:95:7c:8b:af:
         c0:a0:2d:17:5c:66:09:17:7b:40:fb:e8:b0:b8:2a:1a:af:7b:
         9a:b8:73:2c:40:40:a7:de:7a:2a:93:ef:fd:e3:d2:19:99:b9:
         49:85:a0:dc:3a:74:fe:df:7e:47:70:89:ec:a7:fb:76:12:c3:
         f8:35:e4:b7:0e:23:5f:0f:ca:b6:b0:ca:f3:f3:38:38:31:e0:
         72:8b:ee:86:50:01:a9:ea:ee:10:0f:8d:87:60:27:59:ad:03:
         e5:3f:47:19:e2:8c:7d:cd:f6:47:63:ff:30:ff:d2:f4:f2:65:
         c7:33:aa:d1:84:28:2c:15:d6:87:24:00:fa:6b:d5:2a:44:5e:
         86:fd:48:62:47:4b:43:4b:31:60:0c:e9:a1:02:3a:98:59:67:
         fa:ed:9b:ca:a8:27:08:18:18:d7:a1:0a:1a:15:ef:bd:8b:b4:
         d6:1f:0a:80:97:b5:f6:20:23:6f:ba:bd:55:d8:d7:84:47:2b:
         77:61:f8:6c:a2:54:0e:0c:a5:d7:df:f5:44:f4:41:df:c3:7a:
         e0:77:e0:5e:ce:f5:67:7d:ea:d5:b7:95:86:cb:60:e1:c4:01:
         87:aa:44:ef:1e:87:d8:90:bf:2c:6e:9b:00:ca:d6:11:ef:37:
         ad:58:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:17:34 2026 by rpki-client