Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3231302e302f32342d3234203d3e20323632393739.roa
File:                     3133312e3235352e3231302e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          qqRk/d2FjZBhJW23aS91H3UoO+6FAmU/g6GAgvIr+44=
Subject key identifier:   EB:29:56:99:6A:94:74:30:70:BB:59:E3:23:2A:B2:06:FB:7F:6E:DF
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       5E05F4A1D206DFE86D9B4A5C9546E2CAC528B66E
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3231302e302f32342d3234203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:42 +0000
ROA not before:           Wed 29 Jul 2026 17:30:42 +0000
ROA not after:            Wed 28 Jul 2027 17:35:42 +0000
asID:                     262979
IP address blocks:        131.255.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:05:f4:a1:d2:06:df:e8:6d:9b:4a:5c:95:46:e2:ca:c5:28:b6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:42 2026 GMT
            Not After : Jul 28 17:35:42 2027 GMT
        Subject: CN=EB2956996A94743070BB59E3232AB206FB7F6EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:42:0e:29:3c:15:5d:60:99:82:eb:4a:5b:
                    98:e8:d1:55:e9:5e:3f:22:e9:70:fe:65:35:2a:19:
                    4c:95:7a:24:3e:cd:03:c7:3b:3f:2b:8e:87:40:6d:
                    15:ae:06:37:f0:ee:b5:78:ee:36:8a:08:cd:83:66:
                    12:41:d4:62:6f:3f:7d:a5:7b:5f:0f:5e:d4:d7:d1:
                    0f:2a:25:b0:d7:f0:8e:6f:db:58:c2:e1:9d:55:30:
                    64:2d:35:64:3c:98:d8:39:25:cd:2b:cb:08:7e:51:
                    48:c5:e0:99:5d:77:07:4b:24:44:9a:07:32:c9:fd:
                    01:84:05:23:c2:53:45:63:2d:23:7b:a3:20:b6:e1:
                    15:7d:cc:9e:64:12:83:78:df:e9:a3:16:4a:e1:5a:
                    7c:ad:41:6f:57:52:f7:17:7d:2b:bd:91:17:fa:1c:
                    61:5b:cc:4b:61:a7:fe:b8:2c:2a:44:a5:ba:23:d9:
                    83:ef:ea:d9:b9:58:61:b8:a7:28:20:1f:b2:24:28:
                    6e:7d:87:4f:68:92:c6:2a:47:fe:80:2a:e8:fd:75:
                    24:54:a9:2d:9f:0d:24:b0:fd:31:c4:b0:3a:5c:96:
                    13:55:f7:09:73:ed:21:02:2b:f8:6f:40:2e:ca:09:
                    9f:df:48:cc:b6:04:6d:95:73:f2:2b:d5:3c:60:6d:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:56:99:6A:94:74:30:70:BB:59:E3:23:2A:B2:06:FB:7F:6E:DF
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133312e3235352e3231302e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f7:02:50:f9:c7:1b:e4:df:d4:ed:3b:13:54:0d:f0:8c:59:
         5d:7f:31:98:8e:da:88:de:f2:6d:36:fe:47:0a:2f:a9:24:05:
         06:5d:13:ca:73:8b:16:79:9c:87:6e:59:a0:7d:b1:84:3a:e9:
         df:6c:98:92:01:7e:13:0d:fb:04:58:a1:08:81:53:62:e2:6f:
         bb:74:ff:38:26:9f:04:07:0f:81:31:77:59:24:ac:71:b6:6b:
         68:e9:c5:d5:7c:ae:f2:30:14:30:81:01:dd:c8:06:ac:81:ba:
         4b:c4:82:f2:73:02:48:8e:9b:6b:06:4e:5a:69:22:71:ba:47:
         f7:a4:41:6a:00:d9:24:6c:65:c8:a6:e2:d7:ee:12:c3:d7:95:
         04:4e:7b:4b:70:cd:ef:52:7f:62:e5:c2:ea:36:98:2b:66:99:
         95:96:75:b3:86:18:87:eb:e5:ec:d5:a8:64:85:56:9d:7d:cd:
         05:5c:60:e8:dc:27:14:96:88:d8:f5:97:a6:e9:42:d3:0c:a6:
         16:08:c4:06:e4:98:e0:44:7a:ba:4e:ba:0a:15:27:83:04:52:
         3b:58:67:7a:05:93:17:b3:04:21:72:ab:04:51:61:3d:92:6a:
         b7:a2:81:aa:1a:4f:30:7a:01:73:0f:db:c3:0b:40:1e:84:28:
         d1:09:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:14:35 2026 by rpki-client