Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32332d3234203d3e20323731313333.roa
File:                     3133312e302e3132342e302f32332d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          Zag4nVioUtydneVl48c5BmprJ8sNA8SM4V8yQsLYVXA=
Subject key identifier:   D1:33:11:C3:CB:F0:43:F4:19:01:62:2E:54:D8:61:2C:6D:29:93:4A
Certificate issuer:       /CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
Certificate serial:       47EB353BCBDC6E54B730EC75DE1E7D238D391A7F
Authority key identifier: 78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32332d3234203d3e20323731313333.roa
Signing time:             Thu 06 Aug 2026 13:03:15 +0000
ROA not before:           Thu 06 Aug 2026 12:58:15 +0000
ROA not after:            Thu 05 Aug 2027 13:03:15 +0000
asID:                     271133
IP address blocks:        131.0.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl
                          rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 08:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:eb:35:3b:cb:dc:6e:54:b7:30:ec:75:de:1e:7d:23:8d:39:1a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
        Validity
            Not Before: Aug  6 12:58:15 2026 GMT
            Not After : Aug  5 13:03:15 2027 GMT
        Subject: CN=D13311C3CBF043F41901622E54D8612C6D29934A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:9d:6e:cc:08:20:b8:1d:c8:7b:e7:44:03:
                    50:7c:bb:29:bc:6a:a5:10:c8:40:5e:b2:d3:c9:30:
                    36:67:a8:55:1e:c5:6d:6e:b4:cf:c7:fb:28:c8:6a:
                    d0:cb:96:30:6d:c4:01:a2:70:cb:ea:42:1e:bd:fb:
                    69:96:b9:d2:c2:52:40:6e:ca:ec:06:7c:93:3f:04:
                    62:15:ee:f1:5e:da:75:b8:63:9b:6d:47:cc:c8:72:
                    d6:27:2f:1f:6b:2e:18:71:a3:6c:52:84:c3:7f:56:
                    bd:41:4c:e8:66:9d:98:a5:a2:ba:2b:58:6d:81:7a:
                    bd:12:cf:9c:9e:0b:8c:3a:2a:b9:c9:73:43:fc:14:
                    c9:93:1f:d8:e5:5f:f4:e8:96:1d:f2:0e:36:9d:8a:
                    ee:85:bb:76:66:de:75:a2:89:51:d3:c3:1d:43:4d:
                    99:c5:27:21:33:b4:fa:cb:16:ae:18:44:e6:ec:82:
                    3e:9c:52:b5:ad:d5:25:11:ea:0d:78:84:de:63:df:
                    bf:84:18:9f:a9:b4:f6:c4:23:3d:aa:58:ad:df:66:
                    98:b0:25:3e:2b:6e:9a:17:3d:58:d7:ce:40:e5:d1:
                    3f:3e:58:e0:39:0c:50:4c:85:3b:98:a2:cf:5f:16:
                    e4:a5:60:8e:63:cc:c4:f9:04:54:55:0f:41:77:7e:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:33:11:C3:CB:F0:43:F4:19:01:62:2E:54:D8:61:2C:6D:29:93:4A
            X509v3 Authority Key Identifier:
                keyid:78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32332d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:1a:d7:fc:47:b2:3d:52:5f:27:0b:90:f5:c8:2c:f0:c4:bc:
         6f:73:1c:95:93:db:95:ba:54:8e:c9:c4:b0:33:75:e8:c6:10:
         4c:e7:90:d6:59:de:af:d4:0d:e0:b3:67:27:4b:4b:4c:05:1c:
         a1:58:94:8a:31:e6:d1:84:e2:19:50:c6:67:28:da:59:c6:f9:
         eb:c0:e3:db:7c:dd:ab:4b:bb:ca:86:13:0e:51:d0:f3:39:67:
         c3:68:3f:6a:40:fb:29:d6:33:49:a7:00:28:7a:6e:12:01:6b:
         5c:54:56:ce:76:ec:1e:83:30:35:6f:a6:5e:99:80:57:63:92:
         7e:22:57:f8:66:7f:d3:0b:1f:5d:79:e4:16:42:81:ec:45:0d:
         2e:73:b0:59:cc:18:57:19:51:d8:9d:45:a8:1f:0f:19:03:b4:
         fe:d7:dd:69:0e:6e:1c:19:db:0e:0a:62:6c:ea:aa:f8:77:23:
         cd:eb:49:0a:5b:1c:93:10:ce:63:8b:3c:ea:0c:8a:a7:ce:4f:
         7d:95:6c:bc:d1:bb:46:57:a6:19:0f:15:e6:62:ef:15:06:7f:
         db:31:35:5c:08:03:c5:a5:58:28:6a:b3:bc:be:5f:b7:69:43:
         91:55:ba:05:d5:37:ec:eb:47:e2:8b:04:61:b2:65:be:fe:eb:
         89:ec:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:22:09 2026 by rpki-client