Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
File:                     3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa (raw, json)
Hash identifier:          SmzY93Q5JCkjlIjkcjR7NAdb3xhdGd7Hb9BrhtsFH10=
Subject key identifier:   0D:96:A3:E8:37:5D:61:BE:47:DA:8F:E6:83:DE:CD:CE:F2:A7:25:05
Certificate issuer:       /CN=E2D9846CEE4D21AA545F30565FD0121FBB599C61
Certificate serial:       11F6D12BE54DA277E8D305C9961C95A3637ED915
Authority key identifier: E2:D9:84:6C:EE:4D:21:AA:54:5F:30:56:5F:D0:12:1F:BB:59:9C:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa
Signing time:             Thu 20 Aug 2026 18:39:45 +0000
ROA not before:           Thu 20 Aug 2026 18:34:45 +0000
ROA not after:            Thu 19 Aug 2027 18:39:45 +0000
asID:                     265905
IP address blocks:        131.196.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.crl
                          rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:d1:2b:e5:4d:a2:77:e8:d3:05:c9:96:1c:95:a3:63:7e:d9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2D9846CEE4D21AA545F30565FD0121FBB599C61
        Validity
            Not Before: Aug 20 18:34:45 2026 GMT
            Not After : Aug 19 18:39:45 2027 GMT
        Subject: CN=0D96A3E8375D61BE47DA8FE683DECDCEF2A72505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:71:92:f2:34:0b:a7:0e:36:96:46:c8:21:
                    9d:49:24:f4:6b:e4:49:61:ba:84:2f:69:df:42:9e:
                    95:1f:29:10:aa:97:8c:c0:bc:14:72:40:58:f6:6b:
                    d5:5c:2c:ef:fb:a9:70:70:16:d8:9e:fc:61:5b:9a:
                    46:2c:34:d8:0b:69:5a:08:3f:2c:50:9e:7d:62:bf:
                    44:8b:fc:52:7a:81:06:ad:85:2a:0c:4a:bc:6a:71:
                    f1:6c:47:b3:cc:3a:8f:32:53:19:ed:dd:32:76:4a:
                    23:0b:64:58:67:2d:e7:74:e2:c9:ca:3b:b8:20:a2:
                    17:01:bf:80:db:db:d0:c6:03:5f:40:aa:83:82:09:
                    d8:24:2d:d7:00:10:18:85:02:18:32:ec:7a:7e:13:
                    ba:c1:26:dd:ca:78:f4:90:f8:52:69:8b:7c:d3:1a:
                    8d:11:8d:e0:11:dc:e7:f8:5b:b2:0b:4b:20:b3:03:
                    da:eb:71:41:75:f0:e9:26:b3:75:1f:56:1b:ea:1f:
                    5b:15:9b:b0:ab:fc:ff:8f:fb:95:19:bd:88:fb:21:
                    38:08:65:95:e9:0e:26:28:00:72:95:bc:6b:74:b1:
                    f6:6f:c6:f2:79:4f:5a:4c:f0:11:cc:22:6f:c9:03:
                    60:9c:6b:3c:92:fe:9a:fe:71:99:1d:2d:4f:70:45:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:96:A3:E8:37:5D:61:BE:47:DA:8F:E6:83:DE:CD:CE:F2:A7:25:05
            X509v3 Authority Key Identifier:
                keyid:E2:D9:84:6C:EE:4D:21:AA:54:5F:30:56:5F:D0:12:1F:BB:59:9C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/E2D9846CEE4D21AA545F30565FD0121FBB599C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9846CEE4D21AA545F30565FD0121FBB599C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3234203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:ea:ab:d7:cc:a5:b1:9e:ef:04:d8:ea:b6:40:97:90:14:
         fb:f7:bf:e9:4b:57:70:7f:5c:0f:97:e5:5f:15:f6:15:a1:4f:
         4e:53:62:8a:e9:9b:bb:6a:7e:65:9f:6f:0f:94:31:ce:b3:68:
         46:52:8b:b1:08:fc:49:fe:d4:13:8e:d2:55:c1:f8:eb:80:c3:
         87:85:0f:e8:b4:97:e8:e6:8a:8e:e6:43:15:58:dd:85:a6:ac:
         9c:87:ac:24:db:6a:bc:5a:b1:80:23:25:4a:f0:e3:24:68:9b:
         16:4f:6f:7a:8c:4c:41:3f:3c:3c:ac:2f:f6:17:c2:82:24:25:
         97:d7:50:6d:61:b9:a3:de:fa:fc:9b:ec:7a:81:df:98:5f:ae:
         f6:40:66:d3:b4:d1:b6:9f:eb:3f:8c:98:a0:c2:b5:1c:17:df:
         39:67:53:6e:4d:e9:54:1e:de:bc:58:eb:62:97:0b:b4:37:14:
         01:17:fd:4d:56:c5:5c:a0:a9:ad:21:e6:46:01:85:82:3a:27:
         25:94:e8:32:a5:26:74:fe:50:5d:37:ec:b4:e6:e9:eb:37:bc:
         bb:c0:25:f9:5e:5b:81:80:82:88:37:fc:f3:3e:80:72:8f:7e:
         64:bc:dd:bb:77:58:91:cf:b3:27:d8:04:21:1a:a4:eb:f0:ee:
         5a:c2:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:54:27 2026 by rpki-client