Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/3133312e3130382e3138302e302f32322d3234203d3e203631363931.roa
File:                     3133312e3130382e3138302e302f32322d3234203d3e203631363931.roa (raw, json)
Hash identifier:          xERkoDMrY5BQ1yCGUF/oWIdQKs2nyI6rWB2rEPnbnoo=
Subject key identifier:   9A:35:8B:95:39:09:9D:EE:9E:94:7D:CD:34:A6:81:68:90:31:FC:CD
Certificate issuer:       /CN=79719B33107561BC65EE60093F34F69CBD2F5257
Certificate serial:       59AEB622D05087E15212A76BAF9CD885C5C1180D
Authority key identifier: 79:71:9B:33:10:75:61:BC:65:EE:60:09:3F:34:F6:9C:BD:2F:52:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79719B33107561BC65EE60093F34F69CBD2F5257.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/3133312e3130382e3138302e302f32322d3234203d3e203631363931.roa
Signing time:             Thu 29 Jan 2026 12:49:54 +0000
ROA not before:           Thu 29 Jan 2026 12:44:54 +0000
ROA not after:            Thu 28 Jan 2027 12:49:54 +0000
asID:                     61691
IP address blocks:        131.108.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/79719B33107561BC65EE60093F34F69CBD2F5257.crl
                          rsync://rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/79719B33107561BC65EE60093F34F69CBD2F5257.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79719B33107561BC65EE60093F34F69CBD2F5257.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 02:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ae:b6:22:d0:50:87:e1:52:12:a7:6b:af:9c:d8:85:c5:c1:18:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79719B33107561BC65EE60093F34F69CBD2F5257
        Validity
            Not Before: Jan 29 12:44:54 2026 GMT
            Not After : Jan 28 12:49:54 2027 GMT
        Subject: CN=9A358B9539099DEE9E947DCD34A681689031FCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:33:a8:64:8c:cf:01:78:9e:cc:ed:d9:02:
                    e5:64:91:31:66:27:72:67:04:c6:fc:12:24:f0:15:
                    50:da:a1:82:c2:3f:e6:81:96:64:10:a0:72:d0:7f:
                    d9:f2:59:79:44:bf:00:e6:0c:06:d9:8f:47:ea:d7:
                    82:c3:49:85:7f:a8:2b:38:74:d8:79:5f:87:34:23:
                    64:cc:60:95:92:42:5f:93:ba:30:7a:98:7f:c7:49:
                    fe:0e:61:b3:ce:73:97:e9:58:73:cc:1a:45:53:1a:
                    55:26:96:62:d0:ad:b7:40:0e:8c:95:62:08:58:99:
                    e7:21:60:6b:0f:60:4a:95:3c:28:a1:4e:f4:c2:30:
                    5c:72:94:1a:47:21:c9:b6:7a:91:b2:8a:2c:bf:db:
                    53:31:65:38:b8:aa:72:9f:91:ab:4e:1b:6e:d5:a2:
                    40:2b:e4:f5:05:bb:46:3f:55:7e:7d:22:81:e8:37:
                    c6:60:21:b2:85:f3:4b:58:e4:dd:3a:1b:5a:35:4f:
                    d2:bb:6e:39:83:c7:f5:51:4a:92:89:e7:58:e7:cd:
                    b7:b3:05:e2:f0:33:4f:9d:b6:31:84:f9:a2:7e:a8:
                    81:7e:c9:0b:f7:6e:3e:b9:f5:8c:f6:54:91:d3:60:
                    eb:ac:3a:e2:0f:dc:c2:27:6f:96:94:de:ef:23:78:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:8B:95:39:09:9D:EE:9E:94:7D:CD:34:A6:81:68:90:31:FC:CD
            X509v3 Authority Key Identifier:
                keyid:79:71:9B:33:10:75:61:BC:65:EE:60:09:3F:34:F6:9C:BD:2F:52:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/79719B33107561BC65EE60093F34F69CBD2F5257.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79719B33107561BC65EE60093F34F69CBD2F5257.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4LLrprnHMXL2qERpsWt4ExzERDi6qR15cuic7zHMWWZF/0/3133312e3130382e3138302e302f32322d3234203d3e203631363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d8:fc:4c:0f:10:b7:31:40:a7:3f:ac:b3:d3:b8:be:58:04:
         35:80:21:8b:b0:a2:c4:7b:91:08:19:69:9e:fe:d7:fa:ff:d0:
         53:01:61:6c:e6:e9:06:4d:76:c8:d8:7c:c0:93:a5:d6:f2:ac:
         f8:e7:ed:e0:2b:f4:3f:40:fc:ed:b6:11:fe:ee:e4:14:77:86:
         9e:3d:f3:6f:73:76:c3:7a:5a:23:b8:4a:6a:bd:03:bc:c3:c4:
         8a:57:a2:9b:a3:f9:b4:b5:c9:8b:e6:88:9c:9d:2c:ad:8c:8e:
         9e:cb:03:60:43:aa:b0:86:a4:39:07:3f:8b:fc:c8:cf:d5:36:
         fa:cc:b3:5e:d7:e0:77:cb:f5:b1:ac:8a:3b:e3:dd:49:f6:cc:
         5a:d1:41:43:35:c5:9c:01:7f:a3:c9:85:32:5d:6f:d6:67:82:
         ec:90:69:6b:f2:dd:bf:dd:e4:b4:0e:fb:35:88:ca:48:cb:c8:
         a7:18:ea:25:02:61:dd:02:99:71:9c:91:1f:66:3d:15:f9:d2:
         e2:09:8a:46:a1:ac:e0:d0:4f:8a:b8:e7:a9:63:f0:db:8b:9a:
         59:a9:fc:a8:56:b8:65:cc:ee:4a:d5:03:11:f2:f5:02:ba:04:
         d2:90:dd:28:3f:95:fd:15:a5:69:6d:10:61:ca:d7:0e:b8:06:
         52:54:f3:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWa62ItBQh+FSEqdrr5zYhcXBGA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3MTlCMzMxMDc1NjFCQzY1RUU2MDA5M0YzNEY2OUNC
RDJGNTI1NzAeFw0yNjAxMjkxMjQ0NTRaFw0yNzAxMjgxMjQ5NTRaMDMxMTAvBgNV
BAMTKDlBMzU4Qjk1MzkwOTlERUU5RTk0N0RDRDM0QTY4MTY4OTAzMUZDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcDOoZIzPAXiezO3ZAuVkkTFm
J3JnBMb8EiTwFVDaoYLCP+aBlmQQoHLQf9nyWXlEvwDmDAbZj0fq14LDSYV/qCs4
dNh5X4c0I2TMYJWSQl+TujB6mH/HSf4OYbPOc5fpWHPMGkVTGlUmlmLQrbdADoyV
YghYmechYGsPYEqVPCihTvTCMFxylBpHIcm2epGyiiy/21MxZTi4qnKfkatOG27V
okAr5PUFu0Y/VX59IoHoN8ZgIbKF80tY5N06G1o1T9K7bjmDx/VRSpKJ51jnzbez
BeLwM0+dtjGE+aJ+qIF+yQv3bj659Yz2VJHTYOusOuIP3MInb5aU3u8jeLE5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmjWLlTkJne6elH3NNKaBaJAx/M0wHwYDVR0j
BBgwFoAUeXGbMxB1Ybxl7mAJPzT2nL0vUlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNExMcnBybkhNWEwycUVScHNXdDRFeHpFUkRpNnFSMTVjdWljN3pITVdX
WkYvMC83OTcxOUIzMzEwNzU2MUJDNjVFRTYwMDkzRjM0RjY5Q0JEMkY1MjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5NzE5QjMzMTA3NTYxQkM2
NUVFNjAwOTNGMzRGNjlDQkQyRjUyNTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRMTHJwcm5ITVhMMnFFUnBzV3Q0RXh6RVJEaTZxUjE1Y3VpYzd6SE1XV1pGLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDbLQwDQYJKoZIhvcNAQELBQADggEBACPY/EwP
ELcxQKc/rLPTuL5YBDWAIYuwosR7kQgZaZ7+1/r/0FMBYWzm6QZNdsjYfMCTpdby
rPjn7eAr9D9A/O22Ef7u5BR3hp49829zdsN6WiO4Smq9A7zDxIpXopuj+bS1yYvm
iJydLK2Mjp7LA2BDqrCGpDkHP4v8yM/VNvrMs17X4HfL9bGsijvj3Un2zFrRQUM1
xZwBf6PJhTJdb9ZnguyQaWvy3b/d5LQO+zWIykjLyKcY6iUCYd0CmXGckR9mPRX5
0uIJikahrODQT4q456lj8NuLmlmp/KhWuGXM7krVAxHy9QK6BNKQ3Sg/lf0VpWlt
EGHK1w64BlJU86Q=
-----END CERTIFICATE-----
Generated at Mon Feb 23 04:23:22 2026 by rpki-client