Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/3133312e37322e3132382e302f32322d3234203d3e203631373434.roa
File:                     3133312e37322e3132382e302f32322d3234203d3e203631373434.roa (raw, json)
Hash identifier:          J64N350fUcPMSh9aGl2AECHNo4mKI5Ni5XTtMei4OPI=
Subject key identifier:   FE:D7:47:65:D2:9F:92:09:DB:E2:34:72:6D:58:78:6F:CB:F0:50:2A
Certificate issuer:       /CN=B946CFF8BBCE38B4E926F35027B766151DC7E4C1
Certificate serial:       3CE1B25E1F7525B19B29A9D2F32794132A44A1DF
Authority key identifier: B9:46:CF:F8:BB:CE:38:B4:E9:26:F3:50:27:B7:66:15:1D:C7:E4:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/3133312e37322e3132382e302f32322d3234203d3e203631373434.roa
Signing time:             Thu 29 Jan 2026 19:17:13 +0000
ROA not before:           Thu 29 Jan 2026 19:12:13 +0000
ROA not after:            Thu 28 Jan 2027 19:17:13 +0000
asID:                     61744
IP address blocks:        131.72.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.crl
                          rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 22:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e1:b2:5e:1f:75:25:b1:9b:29:a9:d2:f3:27:94:13:2a:44:a1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B946CFF8BBCE38B4E926F35027B766151DC7E4C1
        Validity
            Not Before: Jan 29 19:12:13 2026 GMT
            Not After : Jan 28 19:17:13 2027 GMT
        Subject: CN=FED74765D29F9209DBE234726D58786FCBF0502A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:ca:9d:df:a9:5d:9d:f1:45:af:77:6d:22:
                    46:d1:45:52:f9:e9:0c:fe:2b:d6:95:20:f4:d9:a0:
                    b1:84:b0:8c:72:a6:35:97:fe:74:43:85:57:66:35:
                    80:81:55:90:bc:15:ac:ac:d6:1c:dd:40:bf:85:db:
                    47:38:94:14:b6:de:db:b8:20:10:c4:1b:8f:e9:4b:
                    e4:aa:bf:a0:07:fd:d6:93:30:b0:95:c3:10:b4:ce:
                    d1:df:60:88:4f:75:30:1f:8e:e9:ee:5d:58:d9:d9:
                    c9:9e:5c:e8:67:e1:2c:06:65:b7:5a:80:72:fd:10:
                    23:0c:6c:da:79:8e:5a:a6:c0:71:e7:b1:9e:6f:5d:
                    8b:a2:e1:ef:2b:fa:7a:d9:2f:3d:0d:b8:01:81:a4:
                    03:17:10:53:b2:ed:5b:6e:25:79:5c:3b:0a:d1:21:
                    3e:3b:40:d2:51:cd:06:37:27:37:92:65:63:7d:18:
                    c8:06:9f:d9:d0:f3:0d:53:0b:de:7f:8c:6e:dd:db:
                    d4:27:d3:bb:b2:4d:8b:59:31:2c:20:11:55:90:ba:
                    5f:a7:89:0a:25:9b:47:4f:c7:3f:4c:59:08:f6:75:
                    ba:0f:57:a0:e5:49:52:62:31:94:9d:b1:a4:4c:e5:
                    10:e1:4f:51:6a:bb:68:9c:28:2a:b4:9c:8e:8c:f4:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D7:47:65:D2:9F:92:09:DB:E2:34:72:6D:58:78:6F:CB:F0:50:2A
            X509v3 Authority Key Identifier:
                keyid:B9:46:CF:F8:BB:CE:38:B4:E9:26:F3:50:27:B7:66:15:1D:C7:E4:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B946CFF8BBCE38B4E926F35027B766151DC7E4C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FZNsT1triUi8b8LBJCcrekFegnzHBvmm7ECn6V1vpjD/0/3133312e37322e3132382e302f32322d3234203d3e203631373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:af:37:f6:72:3a:8d:d2:1f:20:4a:b7:38:a7:db:f0:f4:
         7a:66:47:e0:f3:df:4f:b7:56:8d:a2:a2:d2:2d:05:b3:18:5d:
         60:8a:20:1e:dd:be:fc:d1:9a:6b:bd:01:3e:a6:90:ca:05:aa:
         07:bb:c0:19:42:cf:39:9d:fe:13:47:77:89:ba:91:1e:2e:a1:
         b8:15:67:27:4e:70:3d:5d:3e:57:f6:36:fe:bc:51:33:12:a4:
         d1:68:32:64:b3:11:a1:1a:73:31:fb:b9:c9:1e:db:f7:93:19:
         2e:01:7b:e3:ce:cf:10:2c:8b:18:7f:96:63:b0:29:ad:75:46:
         79:02:ba:03:92:64:8e:f8:fe:40:bc:c3:81:10:ae:d0:30:9e:
         1f:36:a2:41:3a:99:8f:9e:10:ce:00:05:a8:91:44:56:59:51:
         1f:e7:87:4c:5e:74:a7:4f:b3:14:44:24:e3:ee:63:94:d7:ec:
         e4:6d:65:67:fe:14:6e:bd:3b:61:f7:e5:6d:fa:ce:23:db:0a:
         60:12:99:e2:a5:13:da:8f:e4:89:89:da:e6:b3:86:b9:dc:88:
         45:f9:1a:23:ec:0b:a3:81:60:48:ed:7f:99:07:68:3b:0f:1e:
         db:3d:6a:ad:06:21:88:18:94:7e:4c:0f:99:5b:8f:ee:ac:9d:
         45:a3:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:51:58 2026 by rpki-client