Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa
File:                     3133312e302e36342e302f32322d3234203d3e203533303738.roa (raw, json)
Hash identifier:          5j5ccoxu280UTW3UkbatNzrdFMw8T4Arx4FJxEHmZak=
Subject key identifier:   84:EE:6E:9E:82:E2:82:76:4D:71:A7:BE:8E:FA:55:06:2B:5D:62:6C
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       242656DF8609766F1BE8CDC40AE566C750ECFC9E
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa
Signing time:             Tue 19 May 2026 22:50:04 +0000
ROA not before:           Tue 19 May 2026 22:45:04 +0000
ROA not after:            Tue 18 May 2027 22:50:04 +0000
asID:                     53078
IP address blocks:        131.0.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 16:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:26:56:df:86:09:76:6f:1b:e8:cd:c4:0a:e5:66:c7:50:ec:fc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: May 19 22:45:04 2026 GMT
            Not After : May 18 22:50:04 2027 GMT
        Subject: CN=84EE6E9E82E282764D71A7BE8EFA55062B5D626C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:c6:d7:d3:1f:b4:54:e9:bb:ef:f7:b9:17:
                    54:65:d0:20:68:53:e8:fc:25:30:43:04:ee:6e:a3:
                    5c:bc:55:7b:24:f7:ad:38:c3:ba:0c:82:92:3c:59:
                    de:c7:86:f1:b1:d2:6c:a0:82:19:f5:1d:22:13:33:
                    c3:37:ed:db:e5:7b:48:1a:97:77:1a:7a:6c:66:08:
                    74:73:df:7e:75:f6:93:90:85:86:a4:04:64:ae:97:
                    fe:9a:7b:6b:15:0d:6a:5f:23:9e:e7:86:e8:ae:da:
                    8e:cd:ae:e9:d9:3e:e5:d2:fa:12:a6:2e:7e:30:12:
                    24:f2:53:c5:59:53:d3:3f:aa:c7:ae:20:a2:c7:21:
                    21:3b:00:94:f9:09:8d:a1:a8:dc:92:46:f5:44:80:
                    6e:08:53:25:90:a1:b6:f5:57:6a:2c:ec:b8:9a:0b:
                    c8:92:fe:87:0b:ca:74:2c:a7:bf:18:5e:6d:1c:1a:
                    f6:bf:b9:29:0b:38:ab:6e:8e:5c:8d:6f:bf:2d:f6:
                    19:e5:23:84:d1:2a:fa:e7:65:b8:d3:c6:8e:98:3d:
                    34:bf:e6:ae:be:b5:6a:76:d9:94:b7:bf:a2:60:89:
                    55:95:0b:e6:a7:d8:54:71:2b:af:0e:1c:41:51:ca:
                    60:99:ae:d3:93:6a:36:92:cd:1b:23:55:17:15:82:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:6E:9E:82:E2:82:76:4D:71:A7:BE:8E:FA:55:06:2B:5D:62:6C
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3133312e302e36342e302f32322d3234203d3e203533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:c8:04:04:ad:08:0f:57:b3:71:46:84:90:af:fa:6b:9f:
         02:df:b1:c8:92:f8:73:65:55:57:fa:5c:b9:4c:9b:1d:55:93:
         ff:f2:a9:81:b1:ce:ac:10:86:27:3a:45:21:66:55:20:94:ee:
         9e:cb:44:55:fe:34:c2:5a:87:4b:da:bc:87:ac:54:d2:f4:51:
         86:94:c0:78:39:cb:1a:80:18:c3:3e:9b:c8:3f:e1:44:56:f2:
         fa:1a:73:f4:33:2a:23:57:e9:10:e0:db:67:d7:fb:d0:b5:fc:
         ad:bb:a8:8c:5e:17:f7:6f:38:dc:91:a9:b3:39:71:8e:45:d9:
         51:d2:5c:02:70:b5:27:e5:05:09:0d:9a:4f:d1:85:df:4b:da:
         92:57:e2:0d:ae:30:5a:4c:31:1b:7c:98:74:d5:86:f9:2c:9e:
         e9:e2:14:ff:42:64:06:f3:57:fa:71:25:89:27:92:62:2c:d1:
         7a:a0:16:26:94:37:74:fe:63:87:0b:6c:09:d1:64:fe:96:1f:
         ac:e5:a4:4b:8f:dd:d3:b3:78:0a:43:52:9d:1b:0c:13:ad:84:
         93:23:aa:d3:0c:46:d5:39:c5:87:aa:44:0d:be:6e:f4:d1:12:
         f3:ad:97:d5:6c:67:e2:8b:bd:a2:3a:9a:7d:1a:73:af:70:0a:
         62:54:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:18:54 2026 by rpki-client