Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa
File:                     3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa (raw, json)
Hash identifier:          XFnyHNMcS3xafNjFdIHz+k/5LIEveNqwwvFRN5MBJ6U=
Subject key identifier:   FF:69:23:4C:44:B0:BB:ED:38:4B:E3:C9:A5:85:33:C8:A0:54:11:42
Certificate issuer:       /CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
Certificate serial:       6045C1ABF84EE9FB90C862CD512324CC1E7EAD02
Authority key identifier: 31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa
Signing time:             Fri 25 Sep 2026 18:38:55 +0000
ROA not before:           Fri 25 Sep 2026 18:33:55 +0000
ROA not after:            Fri 24 Sep 2027 18:38:55 +0000
asID:                     264491
IP address blocks:        131.255.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl
                          rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 03:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:45:c1:ab:f8:4e:e9:fb:90:c8:62:cd:51:23:24:cc:1e:7e:ad:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F8E6FF8983C82E59B61AFBC11BB7FAE753297B
        Validity
            Not Before: Sep 25 18:33:55 2026 GMT
            Not After : Sep 24 18:38:55 2027 GMT
        Subject: CN=FF69234C44B0BBED384BE3C9A58533C8A0541142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:35:80:41:31:7c:0b:e6:2a:ab:17:48:eb:
                    ac:b0:72:ef:d9:9d:bc:2c:97:d1:07:f1:e7:89:72:
                    b1:37:ff:cb:3b:b4:60:f5:f6:55:5a:e3:93:a8:8f:
                    bc:1e:89:b0:e8:06:6a:a2:71:dc:56:51:ce:d4:e6:
                    0a:34:61:a2:09:d4:3a:b6:66:06:ca:26:13:e3:31:
                    c5:58:e3:c6:cd:1c:40:65:26:f0:e7:4a:9d:ed:30:
                    ac:f4:34:81:67:59:c3:a1:47:b8:ce:5a:b2:4a:f0:
                    5b:db:9b:96:f1:9e:05:ac:b5:3c:5a:ab:81:63:0f:
                    bc:d7:05:21:04:8b:b2:39:27:5c:8f:95:bc:a0:31:
                    f1:62:c1:34:a3:73:5e:a6:64:21:2a:4a:d6:95:b1:
                    99:89:5f:d5:eb:7e:1d:b0:f2:a5:3b:6c:b0:d4:73:
                    72:f6:af:47:a8:f0:4f:76:a9:a3:17:32:f1:ec:a5:
                    92:f6:2e:51:86:8a:2f:89:54:2c:7b:22:60:1d:fb:
                    3a:4d:1f:99:98:2f:1d:77:c1:f5:d4:21:7b:41:e0:
                    8f:2b:da:83:cd:8e:fd:7e:f5:fc:f2:75:28:c5:10:
                    d7:8b:f4:01:f5:97:5a:57:8a:2a:44:00:49:99:31:
                    c9:47:89:9f:6e:fa:45:a3:67:7f:85:84:34:f7:15:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:69:23:4C:44:B0:BB:ED:38:4B:E3:C9:A5:85:33:C8:A0:54:11:42
            X509v3 Authority Key Identifier:
                keyid:31:F8:E6:FF:89:83:C8:2E:59:B6:1A:FB:C1:1B:B7:FA:E7:53:29:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31F8E6FF8983C82E59B61AFBC11BB7FAE753297B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133312e3235352e3137362e302f32322d3234203d3e20323634343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:1f:7c:bf:83:9d:e8:8e:7e:e9:60:c4:21:51:54:14:53:16:
         e0:b3:47:c0:5b:ef:31:67:81:c6:43:fe:f2:82:25:a3:a5:95:
         ea:82:75:e7:6f:bc:e9:84:bf:9f:39:00:b0:37:7b:1d:3c:f3:
         fb:93:23:1f:9a:a4:77:e8:f0:80:fa:f7:43:c9:3a:cf:bc:e6:
         48:e4:d4:2a:75:a2:12:75:d1:66:f5:eb:d9:48:5c:87:17:a1:
         de:ee:6b:94:fd:92:bc:c1:ef:92:98:38:0c:58:a2:f9:ba:ac:
         ca:97:37:4c:72:00:29:ee:f4:be:16:8c:f4:ac:2b:2a:6d:52:
         46:80:2d:f4:5d:00:28:fc:53:73:b8:1f:ee:d7:1d:ff:74:e4:
         bb:63:52:92:c8:62:fb:bd:ec:02:93:55:f8:89:54:bb:15:2a:
         8c:e5:d4:e9:dc:27:b7:01:86:c1:cb:03:21:fa:20:4b:97:c8:
         3e:fa:f9:c4:02:41:62:34:2f:bb:6f:57:9d:c1:9e:ec:43:60:
         3a:30:2f:55:14:0c:18:5e:ae:9b:6c:7a:bb:a6:13:d3:48:a4:
         69:c8:67:1b:11:8d:78:c6:4a:3f:07:9f:f8:48:5f:f6:6d:7a:
         79:52:2f:f8:68:15:e4:aa:15:cd:81:8f:d8:ea:50:0d:ab:82:
         48:3e:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:16 2026 by rpki-client