Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/3133312e3139362e3138342e302f32332d3233203d3e20323635393330.roa
File:                     3133312e3139362e3138342e302f32332d3233203d3e20323635393330.roa (raw, json)
Hash identifier:          q2Skqp2FJZA3YRcISAusUAlQAJqTSuKk0ueJnoYGne4=
Subject key identifier:   07:9C:95:F8:3F:E4:CB:94:CF:4D:18:FA:6F:26:B4:28:D0:7D:99:22
Certificate issuer:       /CN=5C2C5006042899F4A4ACF2BD2A1477DC781B98A0
Certificate serial:       186AE30D1CDAFE53A9B2AD30CECC88C2721D8544
Authority key identifier: 5C:2C:50:06:04:28:99:F4:A4:AC:F2:BD:2A:14:77:DC:78:1B:98:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/3133312e3139362e3138342e302f32332d3233203d3e20323635393330.roa
Signing time:             Thu 20 Aug 2026 15:17:14 +0000
ROA not before:           Thu 20 Aug 2026 15:12:14 +0000
ROA not after:            Thu 19 Aug 2027 15:17:14 +0000
asID:                     265930
IP address blocks:        131.196.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.crl
                          rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6a:e3:0d:1c:da:fe:53:a9:b2:ad:30:ce:cc:88:c2:72:1d:85:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C2C5006042899F4A4ACF2BD2A1477DC781B98A0
        Validity
            Not Before: Aug 20 15:12:14 2026 GMT
            Not After : Aug 19 15:17:14 2027 GMT
        Subject: CN=079C95F83FE4CB94CF4D18FA6F26B428D07D9922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:68:d7:dd:6f:a3:7c:f8:40:b3:47:0f:ef:
                    b8:a0:bb:f6:de:c1:9e:50:58:2c:6b:11:71:72:55:
                    1e:dd:73:e4:6e:c8:df:ac:49:7a:01:1c:97:55:5f:
                    ce:91:91:e4:be:e8:ad:a3:7c:3f:23:18:71:9e:b1:
                    b4:49:ef:68:a2:da:0e:16:f9:f7:87:eb:95:da:5a:
                    bd:36:bc:7e:cd:d0:72:06:2f:31:55:8c:a2:1a:3d:
                    72:c6:43:c7:79:29:62:29:e8:39:86:e5:3d:d0:35:
                    83:94:3a:f0:9c:ad:71:b2:a0:b4:bf:df:60:aa:97:
                    56:66:5e:30:02:5d:15:7a:32:bf:0a:a2:be:b8:7d:
                    f9:ef:03:01:e1:bf:d6:15:e2:88:b6:b2:a4:4d:27:
                    b3:2a:47:b5:a8:ed:ef:6a:8e:d3:5c:fb:40:85:f9:
                    4b:79:b3:67:74:17:d0:10:fa:f8:0c:7e:02:74:21:
                    a3:2e:fd:bb:d7:75:a1:60:ed:ea:4a:94:c3:06:92:
                    6a:45:e7:eb:98:39:ba:65:41:91:4d:62:44:e9:da:
                    82:7c:7f:cd:73:cc:86:8b:dd:6d:60:49:34:8f:f0:
                    5f:02:b4:bd:52:53:86:da:c6:29:66:1c:ad:6b:54:
                    a4:14:4f:37:13:0c:9f:cc:fc:1e:19:ff:47:f5:9e:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:95:F8:3F:E4:CB:94:CF:4D:18:FA:6F:26:B4:28:D0:7D:99:22
            X509v3 Authority Key Identifier:
                keyid:5C:2C:50:06:04:28:99:F4:A4:AC:F2:BD:2A:14:77:DC:78:1B:98:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C2C5006042899F4A4ACF2BD2A1477DC781B98A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ryRE7VRKo2XYqkYuhiTvgzBHVL58xgofovLw6b8DdXe/1/3133312e3139362e3138342e302f32332d3233203d3e20323635393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:a6:ee:6c:4e:19:95:dc:3a:17:f8:91:5f:0e:25:df:34:
         89:e0:b3:bf:c9:2e:b2:15:01:00:03:7b:c2:d8:fc:d5:0c:d4:
         fa:8d:29:e2:96:a3:0b:08:3d:72:f4:d0:d7:c2:7a:cb:90:e9:
         65:a8:76:f2:9d:02:62:b4:b3:d9:4d:7e:ed:e2:88:e9:ce:1d:
         4e:c3:4b:d1:58:2e:19:4a:b9:f3:9d:23:1c:05:11:a2:c2:ab:
         42:1b:a0:81:1e:ba:f8:38:9a:5c:94:32:ba:b1:53:03:73:f8:
         59:6f:d2:69:0e:fe:95:6f:8a:be:11:8b:93:8c:7d:c4:4a:54:
         33:81:7f:11:84:a1:e1:c4:65:3d:89:7d:a4:74:ef:54:f2:af:
         49:2f:f7:e7:2c:d3:93:3b:f0:7a:3e:9e:09:c6:a6:3f:8b:43:
         dc:08:95:84:03:f9:41:e2:d7:88:06:91:ef:de:ae:61:56:e7:
         fa:27:37:b5:06:59:c9:ec:5d:e5:95:ff:b6:95:fa:2e:7d:fd:
         71:34:8b:99:e9:46:43:1a:b5:b7:33:b1:2d:b7:3b:27:11:96:
         ac:fe:0d:47:30:e9:ff:1a:ee:e5:3f:98:40:ed:9a:ce:1c:8d:
         cb:f5:d4:88:79:25:b1:d1:a3:af:4e:5e:24:d6:9f:73:8c:8e:
         4f:a0:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:11 2026 by rpki-client