Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3230382e302f32342d3234203d3e20323632393739.roa
File:                     3133312e3235352e3230382e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          JAm1OPc1aZo8su0Dm/CVQlewO9VuqimjmmKg/xkNy+Y=
Subject key identifier:   F0:A2:94:79:7B:A0:68:69:A1:00:FA:72:7A:57:FD:05:A3:1E:15:27
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       3B5720C84A954E190117C5C89E771CC1F45E6E94
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3230382e302f32342d3234203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:32:33 +0000
ROA not before:           Wed 29 Jul 2026 17:27:33 +0000
ROA not after:            Wed 28 Jul 2027 17:32:33 +0000
asID:                     262979
IP address blocks:        131.255.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:57:20:c8:4a:95:4e:19:01:17:c5:c8:9e:77:1c:c1:f4:5e:6e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:27:33 2026 GMT
            Not After : Jul 28 17:32:33 2027 GMT
        Subject: CN=F0A294797BA06869A100FA727A57FD05A31E1527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:24:3f:ce:82:6d:76:3e:eb:e4:8f:ca:45:
                    c3:3d:9d:19:38:ad:77:1e:75:a3:12:85:7c:31:99:
                    63:b1:0c:3d:00:fe:20:cb:f8:a0:2b:c2:be:98:01:
                    da:03:63:8b:48:de:26:12:bb:cc:45:18:7c:32:3d:
                    11:cc:c7:13:38:8a:9e:c2:40:59:89:e7:cb:38:e0:
                    ed:01:e8:a7:6f:3e:00:e1:76:67:dd:00:24:35:08:
                    22:b8:aa:6c:95:86:7a:40:85:7e:98:95:1e:fb:df:
                    5b:3a:3b:94:d3:01:52:fe:ef:3d:1d:29:15:df:38:
                    dd:95:6d:6f:be:df:80:d1:a0:97:d6:b6:f3:f4:6c:
                    a1:69:de:e4:f2:51:c1:eb:aa:b3:53:46:b4:95:6a:
                    4c:87:f2:22:b9:d3:eb:a3:c5:2c:a3:38:da:2a:49:
                    4c:d3:73:93:8f:90:f2:1a:e6:81:6d:a6:59:f5:86:
                    80:23:3f:f3:6c:98:61:a8:c8:fd:bf:66:07:4f:00:
                    de:ff:3f:36:b6:27:c7:d8:70:ad:11:c2:60:ff:b2:
                    54:a9:54:06:af:63:81:03:5f:e1:6d:d5:06:d3:ea:
                    d7:6b:61:fa:14:cf:61:89:92:89:79:f9:35:81:0c:
                    78:35:85:1d:c5:98:ba:6d:e3:76:5f:f2:51:19:13:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A2:94:79:7B:A0:68:69:A1:00:FA:72:7A:57:FD:05:A3:1E:15:27
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3230382e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9b:49:ed:be:6e:20:af:57:a1:aa:65:b4:4e:0b:9b:4f:40:
         98:bd:dc:28:a0:fc:7f:a0:3e:ee:52:90:d8:04:43:ca:62:b5:
         4c:28:26:7c:86:33:5e:4a:3c:cb:ff:f9:23:58:1f:8e:70:68:
         40:67:0c:fd:11:63:1d:ad:2e:81:10:8c:b8:08:92:c2:3c:9c:
         9a:1d:1d:8a:34:02:c0:33:67:ac:73:10:29:3d:2a:e0:dd:b5:
         92:36:ca:ad:dd:78:60:59:8b:05:6a:f3:86:74:61:2c:bc:dd:
         ff:f3:8b:07:ac:35:8f:03:24:08:fa:a1:c5:8e:1d:77:00:40:
         a1:28:af:1d:d7:f4:8e:a5:7c:20:3a:8e:03:bc:55:19:4b:2b:
         c2:95:3d:0c:2b:67:20:54:69:61:0d:56:b1:e0:06:92:aa:73:
         84:01:7d:16:67:cf:8d:08:46:5b:8e:f8:49:58:e3:3c:7c:ec:
         c8:6c:32:0d:40:76:d2:37:1b:0c:bc:e9:80:59:d7:d6:4b:e3:
         cf:24:ae:60:92:41:7e:58:8a:65:9d:4b:1a:aa:1e:67:29:74:
         9c:c2:00:fb:51:1d:4a:bf:dc:29:88:32:e7:3e:29:b8:78:3c:
         ae:1c:01:c8:9a:8b:37:85:f2:24:5e:b7:23:03:66:94:9b:bf:
         28:fe:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:40:42 2026 by rpki-client