Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138332e302f32342d3234203d3e203631373037.roa
File:                     3133312e302e3138332e302f32342d3234203d3e203631373037.roa (raw, json)
Hash identifier:          gybhj3xdK76vJQ4WPG0swVMQcEKs7Yower90zD6i+4w=
Subject key identifier:   42:53:F5:7F:D5:45:14:13:34:81:F3:AA:DA:0F:B3:BD:A1:8E:8F:E2
Certificate issuer:       /CN=88AAF262AB65E110D4904D06A87B5651836799A0
Certificate serial:       39362C7021FE005028F4A4F4DD704EC1087B1396
Authority key identifier: 88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138332e302f32342d3234203d3e203631373037.roa
Signing time:             Tue 04 Aug 2026 15:58:07 +0000
ROA not before:           Tue 04 Aug 2026 15:53:07 +0000
ROA not after:            Tue 03 Aug 2027 15:58:07 +0000
asID:                     61707
IP address blocks:        131.0.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl
                          rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:36:2c:70:21:fe:00:50:28:f4:a4:f4:dd:70:4e:c1:08:7b:13:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AAF262AB65E110D4904D06A87B5651836799A0
        Validity
            Not Before: Aug  4 15:53:07 2026 GMT
            Not After : Aug  3 15:58:07 2027 GMT
        Subject: CN=4253F57FD54514133481F3AADA0FB3BDA18E8FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:7f:7d:20:4a:43:b0:f2:9d:44:57:6b:28:
                    2c:db:3c:5d:e0:7d:9b:54:86:43:27:55:cb:cb:e7:
                    c5:25:cf:91:c9:93:7b:d2:68:94:72:41:eb:17:a8:
                    1a:5a:85:80:4b:25:d0:a2:2c:4a:f5:59:e0:04:3b:
                    08:68:64:68:a2:35:b9:4a:5e:9a:72:00:cb:ff:82:
                    0b:e0:a6:fe:40:45:87:06:91:f6:61:c9:35:7f:22:
                    fb:c7:69:17:d2:13:e9:35:74:9b:fc:16:8a:3e:16:
                    49:5e:a5:2a:c2:6b:93:56:ae:8f:5a:26:13:3e:a1:
                    f9:b3:0d:b8:0a:ce:d4:6c:61:e4:1c:f8:ab:bb:5a:
                    6e:7b:0d:50:a1:1d:60:21:d4:b6:e1:49:53:e4:db:
                    fd:5e:db:17:02:b9:55:86:6a:d4:69:d0:30:d3:be:
                    68:51:04:3d:52:07:4a:ba:f9:74:00:09:17:e2:ba:
                    b7:23:38:9b:73:c3:32:a3:9a:27:72:46:27:75:ae:
                    72:ac:ad:f9:80:44:cd:4d:b8:0f:77:d4:24:ef:6c:
                    cf:c5:ae:8d:81:89:c0:2f:1b:17:16:d5:24:35:b5:
                    e4:ae:a1:00:ae:6e:be:2e:ec:12:3d:a0:a0:b3:d6:
                    f4:c7:7b:46:a8:bd:e1:51:9a:8b:4c:09:ef:a9:4f:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:53:F5:7F:D5:45:14:13:34:81:F3:AA:DA:0F:B3:BD:A1:8E:8F:E2
            X509v3 Authority Key Identifier:
                keyid:88:AA:F2:62:AB:65:E1:10:D4:90:4D:06:A8:7B:56:51:83:67:99:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/88AAF262AB65E110D4904D06A87B5651836799A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88AAF262AB65E110D4904D06A87B5651836799A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/0/3133312e302e3138332e302f32342d3234203d3e203631373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:be:c2:e9:ed:65:f5:84:12:33:04:60:13:a1:93:0f:69:5a:
         99:12:2f:23:8d:0c:d9:f7:b1:a0:f6:54:39:5b:12:97:5f:5a:
         ad:dd:b1:29:18:91:2e:bc:19:68:fe:40:7b:32:58:08:ce:58:
         8f:15:32:ce:fd:63:94:11:5d:78:e2:47:f2:d4:0d:72:d7:c1:
         a4:b6:27:ae:c4:aa:45:54:dc:55:d0:d0:b3:bb:6a:73:1e:78:
         62:93:18:05:84:e8:c0:81:c1:f8:dc:3e:ac:53:a3:16:70:57:
         b1:a1:45:ca:64:1c:f4:73:69:69:30:bc:81:56:3e:15:7a:33:
         60:67:8a:20:3b:0a:cd:ed:be:d1:41:02:d2:29:1e:cd:9f:9e:
         a1:d7:2b:aa:56:99:8a:13:d7:67:09:92:6d:0f:f2:c4:56:26:
         50:4e:1d:da:b9:92:cb:73:7d:02:85:36:91:c6:33:25:b1:92:
         89:77:3e:73:8a:1f:4f:72:b6:d3:c2:c4:51:b3:86:2c:e5:63:
         5b:fc:c2:3b:25:8d:55:ef:ec:84:0a:94:e2:e8:4c:8d:11:77:
         40:49:0a:fa:78:4c:e4:e3:20:ea:fb:22:5e:7d:5d:d7:4e:ac:
         f2:7a:5b:9a:c6:9b:f5:b2:dc:4f:b3:78:91:08:c0:92:fd:6e:
         43:8f:f7:8f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOTYscCH+AFAo9KT03XBOwQh7E5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhBQUYyNjJBQjY1RTExMEQ0OTA0RDA2QTg3QjU2NTE4
MzY3OTlBMDAeFw0yNjA4MDQxNTUzMDdaFw0yNzA4MDMxNTU4MDdaMDMxMTAvBgNV
BAMTKDQyNTNGNTdGRDU0NTE0MTMzNDgxRjNBQURBMEZCM0JEQTE4RThGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBn99IEpDsPKdRFdrKCzbPF3g
fZtUhkMnVcvL58Ulz5HJk3vSaJRyQesXqBpahYBLJdCiLEr1WeAEOwhoZGiiNblK
XppyAMv/ggvgpv5ARYcGkfZhyTV/IvvHaRfSE+k1dJv8Foo+FklepSrCa5NWro9a
JhM+ofmzDbgKztRsYeQc+Ku7Wm57DVChHWAh1LbhSVPk2/1e2xcCuVWGatRp0DDT
vmhRBD1SB0q6+XQACRfiurcjOJtzwzKjmidyRid1rnKsrfmARM1NuA931CTvbM/F
ro2BicAvGxcW1SQ1teSuoQCubr4u7BI9oKCz1vTHe0aoveFRmotMCe+pT7+LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQlP1f9VFFBM0gfOq2g+zvaGOj+IwHwYDVR0j
BBgwFoAUiKryYqtl4RDUkE0GqHtWUYNnmaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2NUTGdKdDU1aGdKNTlncW15ekoyUEs4VkhER216TlV4UER1QjllS3pn
WHQvMC84OEFBRjI2MkFCNjVFMTEwRDQ5MDREMDZBODdCNTY1MTgzNjc5OUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4QUFGMjYyQUI2NUUxMTBE
NDkwNEQwNkE4N0I1NjUxODM2Nzk5QTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdjVExnSnQ1NWhnSjU5Z3FteXpKMlBLOFZIREdtek5VeFBEdUI5ZUt6Z1h0LzAv
MzEzMzMxMmUzMDJlMzEzODMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM3
MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIMAtzANBgkqhkiG9w0BAQsFAAOCAQEAr77C6e1l9YQS
MwRgE6GTD2lamRIvI40M2fexoPZUOVsSl19ard2xKRiRLrwZaP5AezJYCM5YjxUy
zv1jlBFdeOJH8tQNctfBpLYnrsSqRVTcVdDQs7tqcx54YpMYBYTowIHB+Nw+rFOj
FnBXsaFFymQc9HNpaTC8gVY+FXozYGeKIDsKze2+0UEC0ikezZ+eodcrqlaZihPX
ZwmSbQ/yxFYmUE4d2rmSy3N9AoU2kcYzJbGSiXc+c4ofT3K208LEUbOGLOVjW/zC
OyWNVe/shAqU4uhMjRF3QEkK+nhM5OMg6vsiXn1d106s8npbmsab9bLcT7N4kQjA
kv1uQ4/3jw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:42:40 2026 by rpki-client