Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3135302e302f32332d3233203d3e20323632383234.roa
File:                     3133312e302e3135302e302f32332d3233203d3e20323632383234.roa (raw, json)
Hash identifier:          gC1bZeJyW0RaEyaLJGQ9iC6ZHXp3JdcxTG+wnM3ZeiQ=
Subject key identifier:   FD:93:61:67:F5:2B:F5:48:99:12:B2:09:5D:13:88:09:95:54:F0:F1
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       259D6181491D60470BF11A8B85281DD95C5D024E
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3135302e302f32332d3233203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:53:43 +0000
ROA not before:           Sun 05 Jul 2026 23:48:43 +0000
ROA not after:            Sun 04 Jul 2027 23:53:43 +0000
asID:                     262824
IP address blocks:        131.0.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9d:61:81:49:1d:60:47:0b:f1:1a:8b:85:28:1d:d9:5c:5d:02:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:48:43 2026 GMT
            Not After : Jul  4 23:53:43 2027 GMT
        Subject: CN=FD936167F52BF5489912B2095D1388099554F0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:4b:1f:3a:b7:40:33:44:02:22:8a:a3:9a:
                    4c:7e:8d:c7:a0:e7:85:7e:9e:f0:cb:aa:9d:e0:5b:
                    74:e5:82:26:86:fe:d4:18:d9:d3:45:ae:e5:50:d8:
                    50:5a:9b:54:0d:d9:b3:e5:11:f3:d7:aa:2f:45:89:
                    7b:ef:5d:35:cf:48:2e:66:f6:64:1f:7c:5f:7b:25:
                    7a:74:2f:65:14:f2:24:3f:5c:8a:ec:60:9a:85:fc:
                    ee:3a:ff:36:a1:8a:0d:44:fb:fe:af:5f:e1:32:7c:
                    1a:be:86:53:19:1c:6b:37:1d:6c:ca:8d:f9:0e:8d:
                    bf:b4:b8:4f:45:3d:33:b3:4e:2b:35:9e:17:18:51:
                    ec:07:60:7b:73:06:4f:19:9e:29:77:e5:ea:d5:e3:
                    89:43:e9:2b:70:7a:97:77:07:fa:0c:b7:b9:70:85:
                    f4:48:43:1c:fc:28:38:b8:e4:0f:34:3a:27:9a:79:
                    46:c0:03:6d:31:73:f4:5a:0c:2a:73:29:ca:d3:a7:
                    03:bc:73:47:4d:1d:fc:e5:cd:17:f7:42:b8:9d:7a:
                    74:af:16:ad:3b:22:4c:b9:33:0c:64:7a:92:04:03:
                    cb:a1:51:22:28:d0:d0:d8:8a:ca:2d:2e:39:e2:1f:
                    40:84:5d:61:27:4b:76:c1:f5:38:9b:31:e6:ad:8e:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:93:61:67:F5:2B:F5:48:99:12:B2:09:5D:13:88:09:95:54:F0:F1
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3133312e302e3135302e302f32332d3233203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:28:f5:e4:6e:f1:90:fa:36:87:dd:01:a0:27:07:3d:6d:
         a9:ac:aa:14:5e:7a:e2:b7:3e:e6:ba:5a:09:2a:1f:d6:73:91:
         5f:53:05:f6:41:ae:83:aa:8b:be:45:50:0a:45:a3:1a:5d:5b:
         70:4c:b6:a1:85:2a:32:8f:b1:ca:60:20:1a:78:ab:cc:7e:24:
         41:35:b8:4c:92:b8:b0:31:b6:bb:83:c8:57:ae:37:8c:ce:f7:
         2d:6f:d6:d4:a5:27:46:b1:87:a3:6e:19:ec:16:a1:a7:71:2c:
         0e:40:76:ac:4e:5f:76:79:7e:ad:86:44:b3:67:bd:33:ad:7a:
         e7:08:ff:fe:46:72:dd:9c:f8:81:87:d6:f4:89:67:d0:a4:7f:
         89:e9:1a:72:09:28:cb:65:02:da:bc:fc:7a:f3:af:ec:ca:c3:
         fc:8b:0d:32:a5:f3:57:c7:9a:0d:2f:f7:61:6d:49:56:46:4a:
         8e:16:33:c5:88:e9:34:3f:b7:da:53:16:b8:92:f1:11:d0:0c:
         94:9c:b8:0e:f3:48:f1:61:63:af:7c:bb:22:9f:aa:60:a3:a6:
         3e:b0:06:26:d9:7b:af:15:e0:c1:de:17:38:49:63:a0:dc:47:
         75:e2:0d:79:ca:26:c3:f8:65:14:cc:da:16:ff:d4:0f:23:b3:
         92:34:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:57 2026 by rpki-client