Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3134382e302f32332d3233203d3e20323632383234.roa
File:                     3133312e302e3134382e302f32332d3233203d3e20323632383234.roa (raw, json)
Hash identifier:          uWqlGh9atBJoUzRU0vnc5qsFkZEiBCONQolhMOqjYBg=
Subject key identifier:   DD:78:41:44:8D:0E:C0:E1:F2:14:E9:E9:A7:AF:EE:18:17:16:87:FB
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       4B6E9DFA54E8EC2F373742189A670421B7A0C4BC
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3134382e302f32332d3233203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:53:22 +0000
ROA not before:           Sun 05 Jul 2026 23:48:22 +0000
ROA not after:            Sun 04 Jul 2027 23:53:22 +0000
asID:                     262824
IP address blocks:        131.0.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:9d:fa:54:e8:ec:2f:37:37:42:18:9a:67:04:21:b7:a0:c4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:48:22 2026 GMT
            Not After : Jul  4 23:53:22 2027 GMT
        Subject: CN=DD7841448D0EC0E1F214E9E9A7AFEE18171687FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:50:63:cf:a9:6e:b6:b2:41:21:5f:27:45:
                    e7:2b:3a:c0:4c:18:31:af:f8:33:8a:07:9a:bc:fe:
                    b8:c5:0b:de:e7:51:35:7f:8a:e0:de:2f:13:5c:c7:
                    21:43:cc:c1:3f:0c:6a:37:82:f6:af:56:80:0e:57:
                    14:cc:bf:c0:11:37:ee:e8:43:6b:e4:13:a5:3c:70:
                    88:4e:e0:fe:a2:7e:e9:13:8b:05:ba:09:21:23:56:
                    3e:2c:3e:e2:e2:e4:b2:5b:ac:e5:8d:ca:f0:90:c4:
                    ab:3a:3c:ea:0d:ff:e8:f1:aa:99:0e:b2:a8:4b:63:
                    47:17:84:d6:bd:0e:79:d1:f5:11:8f:5d:7f:c0:2a:
                    98:8e:89:64:8c:73:a7:ce:4e:2f:b9:8a:e3:4c:5b:
                    48:60:45:04:95:d8:31:0b:b7:d4:2d:61:31:5d:da:
                    b5:3c:10:ed:ab:fd:ba:c5:5f:58:0e:a2:1b:5b:29:
                    ef:c4:f8:86:fe:ef:7a:79:40:f8:ac:81:63:1b:ac:
                    2c:0e:70:33:e2:0b:37:e7:12:26:b1:da:69:4d:9c:
                    45:87:61:e6:56:51:6b:8b:f4:7f:e6:be:0b:9c:ef:
                    57:d1:2d:1a:93:ad:06:91:e3:79:08:45:81:5e:ab:
                    19:4c:d3:3f:ff:19:19:28:8f:c8:47:81:03:33:0b:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:41:44:8D:0E:C0:E1:F2:14:E9:E9:A7:AF:EE:18:17:16:87:FB
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3134382e302f32332d3233203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:35:9f:cd:e3:38:11:d3:07:8b:ea:45:23:27:3a:7b:3d:
         19:ab:9f:12:ec:f9:d3:5a:dd:4a:d8:82:a5:51:96:22:3a:38:
         c7:65:bb:81:2f:6f:7f:cb:e1:bf:f0:16:7c:7b:e2:2d:3f:bd:
         33:89:48:39:8b:c6:11:ad:1a:de:68:17:c2:56:92:56:4b:fc:
         06:2b:e9:15:d4:5d:cb:59:d7:a0:90:39:7b:ab:f4:79:76:65:
         d6:a9:cb:2f:40:e7:c3:53:be:56:32:23:a9:cb:d4:62:c7:99:
         2b:58:79:3b:68:e3:1f:85:a1:e6:00:7a:af:25:71:1d:71:c3:
         30:af:d4:34:38:67:01:55:12:88:fa:ac:82:9e:a0:72:32:ea:
         07:e1:ae:36:6f:12:4d:10:61:db:15:70:be:53:5e:c7:a8:33:
         78:7f:c9:46:52:5c:4c:c6:00:20:db:ac:18:36:9a:53:d0:d2:
         46:e1:60:02:7a:44:02:7a:96:59:22:b2:cd:52:f6:1a:95:24:
         07:47:2f:af:b0:49:13:c9:cd:61:55:55:b3:3b:41:9e:40:88:
         a3:9f:6d:c6:b8:c2:27:5e:44:36:03:f4:b6:81:67:2e:f1:0e:
         3d:d9:88:ae:a4:f8:ba:ba:2f:29:14:f7:9e:b8:70:e2:1a:05:
         90:ae:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:55 2026 by rpki-client