Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa
File:                     3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa (raw, json)
Hash identifier:          RedGkUxUNwUGkHV8RHcaTFyGioWKZALVfS5rdGSb/Bk=
Subject key identifier:   A6:D2:BE:59:0E:A0:59:6E:85:9A:E1:D3:C6:7B:F7:50:78:7C:B3:53
Certificate issuer:       /CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
Certificate serial:       53129DD3EC322359E9EAB12490E623D29DDE56E1
Authority key identifier: F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa
Signing time:             Fri 24 Jul 2026 19:32:06 +0000
ROA not before:           Fri 24 Jul 2026 19:27:06 +0000
ROA not after:            Fri 23 Jul 2027 19:32:06 +0000
asID:                     264403
IP address blocks:        131.161.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl
                          rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:12:9d:d3:ec:32:23:59:e9:ea:b1:24:90:e6:23:d2:9d:de:56:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5
        Validity
            Not Before: Jul 24 19:27:06 2026 GMT
            Not After : Jul 23 19:32:06 2027 GMT
        Subject: CN=A6D2BE590EA0596E859AE1D3C67BF750787CB353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:04:7f:8b:bc:82:45:2d:82:79:92:df:fc:
                    26:a9:c8:9c:8a:87:61:c8:31:6e:af:fb:77:fb:3c:
                    a1:25:55:50:d3:c0:0f:ea:a9:7c:92:fa:5a:28:3a:
                    15:d8:b4:e7:ba:44:31:b4:ed:08:8a:52:41:47:51:
                    e6:f9:bc:14:bb:00:1e:84:97:73:d9:fd:16:39:11:
                    f9:a0:41:72:84:75:c8:c9:2e:14:52:fa:c1:7a:2b:
                    96:62:d0:35:b8:dd:43:48:3c:f3:be:cb:38:7a:95:
                    aa:25:4e:4a:81:b3:31:3c:ed:de:73:3b:3a:0b:19:
                    a6:9b:bc:c0:ff:86:01:ed:9b:94:6f:63:b3:35:b8:
                    b5:65:f2:e2:32:ac:70:80:f2:a0:df:75:d3:d9:9c:
                    d4:d1:0f:e6:c2:c0:c3:ac:8d:35:4d:f6:4d:1a:69:
                    c2:3f:e2:36:f5:c8:f8:78:c3:ac:2d:62:36:c0:35:
                    ad:72:19:54:41:8d:ee:b6:82:31:6f:33:3e:60:ff:
                    bc:54:4c:54:88:04:4d:1a:b0:bd:a1:2a:53:c1:d8:
                    e6:74:97:fb:fc:0e:d4:08:25:48:a0:57:db:ab:c1:
                    24:2c:d7:06:3b:ed:77:c0:21:fa:48:a5:a6:41:87:
                    ff:30:a0:2c:e4:c5:f7:db:23:91:07:f6:7f:96:44:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:BE:59:0E:A0:59:6E:85:9A:E1:D3:C6:7B:F7:50:78:7C:B3:53
            X509v3 Authority Key Identifier:
                keyid:F8:6D:0B:EC:80:CC:65:C8:75:E9:F7:60:C8:9B:BE:85:B5:DD:8C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F86D0BEC80CC65C875E9F760C89BBE85B5DD8CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35YowSidnAjuKLxxUQeJDsCDMMxapoxeFafcArgJvKje/1/3133312e3136312e3235302e302f32342d3234203d3e20323634343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:51:1e:d5:8a:38:20:57:4e:f3:83:1a:c4:f2:c7:5e:53:08:
         d4:fe:3e:8f:6d:17:7b:9b:03:72:28:0f:e9:26:ea:97:7f:f5:
         ae:be:a4:7d:15:49:ae:79:72:11:9f:71:cc:fd:b7:ea:7b:8e:
         dc:b4:db:42:4c:bc:29:17:11:d3:6a:7c:82:77:69:f0:42:1c:
         73:7b:ac:56:cb:94:6d:c8:71:8f:60:3c:7e:5c:40:7d:0c:77:
         84:97:4a:07:f2:48:17:fb:52:22:f1:54:71:c3:ac:f4:c8:85:
         83:be:11:71:2c:c0:51:5f:69:5d:0f:e5:2d:46:21:93:ac:49:
         21:6f:97:b9:99:09:89:c4:7c:0b:5f:2f:54:18:b5:3b:f1:be:
         51:ff:4a:80:58:68:24:4c:46:c7:4b:a2:07:0c:61:5c:d3:31:
         1e:6e:ac:42:08:a2:ca:1b:08:54:b5:64:98:ad:bf:7d:72:e8:
         51:85:b6:2b:c2:f0:ce:95:53:02:a4:81:e1:3d:4d:8a:90:38:
         c5:9b:4c:e1:b8:47:5e:31:fc:36:5d:79:e3:fe:cf:3a:68:70:
         dc:f2:e9:66:7c:82:23:a8:82:8a:b0:a8:2c:20:2a:21:61:99:
         ec:93:eb:80:ed:bc:5a:7c:99:41:0b:d7:66:83:6f:25:d7:4b:
         aa:b8:30:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:30:56 2026 by rpki-client