Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa
File:                     3133312e3130302e36382e302f32322d3234203d3e203533313433.roa (raw, json)
Hash identifier:          LbeY4T4+UEeyrdPbOf5B22iHKF5UuGQ9jdX0lFyYN7g=
Subject key identifier:   E6:E4:47:9A:5C:23:03:B4:41:19:7E:99:70:36:A1:48:9B:C2:DF:ED
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       03F91DFAF1C9F76818E506EF691AA0E57337CC86
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     53143
IP address blocks:        131.100.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f9:1d:fa:f1:c9:f7:68:18:e5:06:ef:69:1a:a0:e5:73:37:cc:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=E6E4479A5C2303B441197E997036A1489BC2DFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:82:60:82:70:45:db:eb:d2:3b:a8:5a:26:
                    25:d2:7c:f5:f7:97:9e:c9:e9:40:15:6a:af:42:38:
                    c3:e2:6d:f2:ab:da:2c:65:f2:d3:5b:95:a2:5b:76:
                    e6:f5:1f:cf:c4:17:0c:b9:b1:b1:50:9a:6d:9b:ba:
                    f5:4f:7f:fd:85:70:68:e5:d2:a4:f0:e6:fc:19:b8:
                    29:11:90:b0:9e:e8:e8:0a:55:8e:25:e2:1d:76:eb:
                    79:14:30:a4:f4:8b:e8:7f:12:c4:67:75:ba:22:3e:
                    c6:ef:db:dc:18:78:45:39:fb:9b:eb:ea:a8:61:86:
                    3b:d6:c4:fd:bc:17:8f:9e:3c:49:12:63:db:d8:d9:
                    72:69:48:51:2f:d5:49:f4:36:a7:eb:b1:14:04:05:
                    43:36:af:d9:50:c4:2f:7d:90:ea:d9:ab:29:5a:fe:
                    8b:79:c6:87:85:d3:92:78:86:da:7b:88:42:5c:c6:
                    a5:83:e9:37:d2:48:bd:1f:41:30:6b:61:d1:21:d2:
                    2f:f5:72:7d:80:16:96:e4:7b:6e:ed:96:6d:53:73:
                    5a:95:d6:de:72:b3:72:b3:1c:7b:38:88:56:3d:67:
                    01:b5:7e:84:1a:23:cf:ba:5c:77:4c:0b:14:8f:e3:
                    ce:dc:ff:a2:6a:aa:24:88:2a:f2:f6:1a:aa:7e:35:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:47:9A:5C:23:03:B4:41:19:7E:99:70:36:A1:48:9B:C2:DF:ED
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3133312e3130302e36382e302f32322d3234203d3e203533313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:4a:69:f8:13:52:16:9d:9c:d2:2f:76:ac:a4:c0:a4:b2:
         99:8d:d0:04:9f:ae:02:02:1a:73:2a:fa:11:ee:0e:ad:4f:3e:
         79:6f:65:9f:d1:e9:5a:d1:6c:c7:84:57:9a:d1:6f:f0:bf:25:
         bf:28:7c:ee:50:ea:c0:e8:10:fd:7b:a4:e0:7a:3d:32:dd:61:
         0f:da:de:88:e1:54:03:fe:c6:ec:06:5b:fe:6d:d5:73:3a:3b:
         05:71:a4:21:61:63:79:81:62:ae:f0:95:04:86:0d:24:49:48:
         18:f4:61:13:c4:e8:a3:95:38:2c:5f:c6:17:01:8f:59:f6:9b:
         9c:d5:d8:97:a9:79:77:55:da:1b:1a:b2:dc:94:ea:4b:2d:d7:
         bd:09:14:3b:f6:a8:29:67:c9:50:e1:c7:d1:13:2a:9c:5b:41:
         5b:50:de:1d:f0:75:a5:01:a8:b9:1b:e6:67:2c:04:d6:f1:ff:
         db:21:14:6f:bf:e1:69:ea:e0:29:9f:53:0b:9c:c3:3c:d5:7c:
         b2:d3:58:a8:de:51:cc:ac:a2:e4:c8:8d:e7:60:0b:4a:44:07:
         a6:62:f5:9e:92:e5:1c:5c:c1:c8:39:58:62:53:76:2d:db:3a:
         f5:5b:e6:75:17:a8:81:ba:c5:92:d3:a8:16:ef:1a:93:06:89:
         6f:f8:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:47:54 2026 by rpki-client