Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
File:                     3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (raw, json)
Hash identifier:          BsZe1jE3uF7fFXVHAMf822fU2sg9pWzUHDmrY9Uv94w=
Subject key identifier:   3B:C7:54:E9:89:AB:35:56:41:F0:55:CE:6D:1C:7B:1B:18:36:92:E8
Certificate issuer:       /CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
Certificate serial:       0D43868042B3C5292A07B31E804C3DAE51A09DE3
Authority key identifier: DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
Signing time:             Wed 13 May 2026 19:33:27 +0000
ROA not before:           Wed 13 May 2026 19:28:27 +0000
ROA not after:            Wed 12 May 2027 19:33:27 +0000
asID:                     61660
IP address blocks:        131.108.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:86:80:42:b3:c5:29:2a:07:b3:1e:80:4c:3d:ae:51:a0:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD1EC34B31393132B6FA9377712BFCA752E5330
        Validity
            Not Before: May 13 19:28:27 2026 GMT
            Not After : May 12 19:33:27 2027 GMT
        Subject: CN=3BC754E989AB355641F055CE6D1C7B1B183692E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:c3:12:27:79:f9:0c:ad:11:ae:da:30:2a:
                    a2:df:b3:77:fa:7d:62:b3:25:01:ae:08:c5:9a:cb:
                    d5:b7:1c:39:81:79:25:c5:10:0b:b7:2b:a1:58:43:
                    ac:57:9d:0a:09:72:f6:7e:96:15:6a:0d:f5:14:b9:
                    39:1f:c0:0c:1a:21:c7:85:28:28:a4:fb:c5:52:a7:
                    58:5f:82:7f:c8:cf:33:db:aa:11:4b:4d:76:1d:17:
                    b3:82:65:fb:28:92:83:66:8b:e8:6c:77:cf:8a:89:
                    dc:45:32:f3:42:c6:15:1f:4e:3b:55:8d:2a:30:13:
                    8b:69:9f:48:ff:cf:03:33:c5:e5:a6:08:bb:bf:d7:
                    7c:4b:ec:66:ba:82:33:81:51:da:1f:1f:ec:bf:80:
                    5d:61:1e:a2:13:ef:2d:45:a8:19:a2:ac:1a:d9:56:
                    6f:64:0d:fd:1f:e0:3a:7c:96:22:93:01:da:2c:95:
                    76:ea:31:c7:40:90:ef:b8:43:5d:c4:0d:99:09:a1:
                    73:df:d6:79:0b:3f:15:47:58:51:3f:d4:7d:c2:51:
                    b6:2a:08:20:38:bc:27:f8:e7:dd:1b:f0:9e:8f:8f:
                    1e:7a:da:f5:04:6e:aa:9a:4c:6b:50:07:ef:94:5a:
                    e3:78:3a:cf:7e:3d:8b:20:33:be:93:d4:58:27:eb:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C7:54:E9:89:AB:35:56:41:F0:55:CE:6D:1C:7B:1B:18:36:92:E8
            X509v3 Authority Key Identifier:
                keyid:DD:D1:EC:34:B3:13:93:13:2B:6F:A9:37:77:12:BF:CA:75:2E:53:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD1EC34B31393132B6FA9377712BFCA752E5330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:30:b4:0d:85:36:2b:24:45:8f:63:05:13:b8:4e:61:ed:f3:
         95:81:4d:2e:7c:13:a9:1c:c9:24:0a:77:0f:f2:1d:ab:19:5e:
         92:53:ba:c3:61:e2:8e:82:af:40:8a:72:cf:6c:10:6f:bf:13:
         fb:27:2d:c5:dc:55:69:fb:ac:df:71:d3:ff:4a:29:d7:ee:84:
         ba:cc:5d:b4:4e:e2:48:bd:9c:25:d2:c7:3a:86:93:df:65:d8:
         5e:ab:2b:15:22:7a:99:1b:3c:7c:72:5b:c4:8d:a6:9b:81:86:
         ed:d5:23:1b:d7:19:f3:7f:bd:93:0a:1a:3c:39:31:35:79:17:
         a6:72:df:19:a3:09:30:6f:e8:1e:97:0f:5a:87:88:7f:e2:83:
         97:6d:93:91:6b:61:2d:8e:3d:a3:61:bc:a7:c5:70:8e:d3:08:
         54:e1:d1:ea:9c:3c:17:09:08:0c:3d:b8:ad:24:81:0f:a5:0f:
         17:b7:b0:16:f5:ef:a4:44:03:5b:d6:3e:ed:2d:b4:a3:61:1d:
         62:1b:d7:9c:cc:5e:f8:fa:57:65:c7:0b:1f:2b:54:1f:a6:66:
         26:ec:a2:0f:79:cf:48:93:e1:d4:87:17:f8:70:76:25:23:30:
         ce:34:a8:b3:b7:20:df:60:d7:ef:4e:a2:7c:61:be:09:e4:5b:
         4f:c7:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:32 2026 by rpki-client