Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32332d3233203d3e20323731343130.roa
File:                     3133312e3139362e33302e302f32332d3233203d3e20323731343130.roa (raw, json)
Hash identifier:          +aLj7hTQUCg+iKcEVzdD/HHwjqyHRU/qMa+84JARs1Q=
Subject key identifier:   C8:41:AC:1C:B2:9E:14:DC:DA:07:56:3A:F7:89:81:4A:33:5E:C8:5E
Certificate issuer:       /CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
Certificate serial:       19EB1C72A12F59C91738A42688BD6215F3CC53CF
Authority key identifier: FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32332d3233203d3e20323731343130.roa
Signing time:             Tue 07 Jul 2026 11:36:11 +0000
ROA not before:           Tue 07 Jul 2026 11:31:11 +0000
ROA not after:            Tue 06 Jul 2027 11:36:11 +0000
asID:                     271410
IP address blocks:        131.196.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl
                          rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:eb:1c:72:a1:2f:59:c9:17:38:a4:26:88:bd:62:15:f3:cc:53:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
        Validity
            Not Before: Jul  7 11:31:11 2026 GMT
            Not After : Jul  6 11:36:11 2027 GMT
        Subject: CN=C841AC1CB29E14DCDA07563AF789814A335EC85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:9f:99:75:57:ed:eb:66:c7:38:4d:70:db:
                    76:28:1e:80:6a:46:3b:53:95:17:e1:da:0b:79:82:
                    c1:c6:3d:68:1d:11:c3:e6:51:8d:0e:6b:9c:1b:d7:
                    48:26:7a:7f:ce:f5:e1:d2:ab:15:ed:32:29:ef:6f:
                    39:07:5c:a2:08:fe:1f:1e:1c:39:f6:e8:cb:b8:fe:
                    65:df:b3:60:39:d1:4a:6d:49:c7:c3:f2:4d:55:ca:
                    77:18:4b:d8:9d:eb:7a:f6:75:e2:0c:89:d3:03:a7:
                    f9:22:68:12:e8:ca:f0:81:c2:3a:c5:a7:e3:94:84:
                    65:b8:e9:a5:7b:19:6a:b4:b5:11:7d:a1:61:c1:6e:
                    c3:e8:6a:99:02:57:e7:bc:6e:a4:12:ce:99:8a:16:
                    38:7a:f0:86:17:ac:30:62:8b:dd:3b:9f:28:48:97:
                    46:73:b3:b2:f5:76:fa:c4:2a:39:02:b6:5d:1e:52:
                    a5:42:14:dc:72:99:95:63:59:56:e9:53:4d:40:29:
                    ae:31:a8:76:5e:72:a1:41:79:ed:70:dc:2b:3b:2d:
                    a4:8f:4d:f7:aa:4f:d1:d9:e7:02:43:97:9e:00:f8:
                    e7:40:35:9b:8c:55:e6:79:41:b6:11:7e:5f:3f:13:
                    a5:da:2e:b9:34:54:a6:01:17:4b:6d:ab:c2:6f:49:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:AC:1C:B2:9E:14:DC:DA:07:56:3A:F7:89:81:4A:33:5E:C8:5E
            X509v3 Authority Key Identifier:
                keyid:FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32332d3233203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:34:8f:1c:cf:de:39:94:19:ee:e0:86:ed:68:d9:25:ff:ba:
         41:30:a5:2a:f5:51:10:46:7a:bb:9d:6f:ad:04:2e:83:4d:e9:
         eb:9e:0f:c4:7e:ec:99:fb:68:c0:8d:cf:03:a1:fa:ae:f2:49:
         c2:3e:10:76:55:79:11:0d:78:83:25:eb:88:c9:6d:eb:72:12:
         ee:33:60:75:f0:e8:e8:f0:c6:33:b3:ea:d4:fe:a8:08:c6:a0:
         0c:fe:6d:5f:f3:56:10:5b:07:5d:4e:f2:f9:c7:f3:08:7b:f6:
         c6:a4:40:b8:dc:17:dd:f2:9d:dc:28:ae:ab:8d:92:38:78:4d:
         d6:bf:e7:14:07:d4:f4:8f:5a:11:63:30:11:dd:d0:f3:32:6f:
         3d:bf:a9:81:93:c4:5b:1e:8a:aa:a8:fb:e9:6f:34:9d:5d:7d:
         27:8e:a8:87:a8:11:de:d0:c1:bf:5a:81:bf:65:69:b6:21:8e:
         b0:bf:7c:f9:33:5a:b1:23:9d:65:95:f7:85:66:da:08:19:14:
         05:12:f5:fa:4e:62:82:38:57:dc:ee:f9:c2:47:a8:13:09:4a:
         47:67:b3:4c:26:61:dd:ad:6f:62:16:cc:54:2a:24:c7:85:44:
         ec:cb:d3:b2:90:06:51:aa:fb:86:5a:49:2d:00:31:c2:1d:43:
         f3:1f:54:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGesccqEvWckXOKQmiL1iFfPMU88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzM0VBQjUzRTYyREVBNUY3MkMyNTZENkFEMTg2NDU4
RTJFQTYzNjAeFw0yNjA3MDcxMTMxMTFaFw0yNzA3MDYxMTM2MTFaMDMxMTAvBgNV
BAMTKEM4NDFBQzFDQjI5RTE0RENEQTA3NTYzQUY3ODk4MTRBMzM1RUM4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfK5+ZdVft62bHOE1w23YoHoBq
RjtTlRfh2gt5gsHGPWgdEcPmUY0Oa5wb10gmen/O9eHSqxXtMinvbzkHXKII/h8e
HDn26Mu4/mXfs2A50UptScfD8k1VyncYS9id63r2deIMidMDp/kiaBLoyvCBwjrF
p+OUhGW46aV7GWq0tRF9oWHBbsPoapkCV+e8bqQSzpmKFjh68IYXrDBii907nyhI
l0Zzs7L1dvrEKjkCtl0eUqVCFNxymZVjWVbpU01AKa4xqHZecqFBee1w3Cs7LaSP
TfeqT9HZ5wJDl54A+OdANZuMVeZ5QbYRfl8/E6XaLrk0VKYBF0ttq8JvSQQ3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyEGsHLKeFNzaB1Y694mBSjNeyF4wHwYDVR0j
BBgwFoAU/zPqtT5i3qX3LCVtatGGRY4upjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY
eXIvMC9GRjMzRUFCNTNFNjJERUE1RjcyQzI1NkQ2QUQxODY0NThFMkVBNjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNFQUI1M0U2MkRFQTVG
NzJDMjU2RDZBRDE4NjQ1OEUyRUE2MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N5UFcxazhna295M0N2eTdvZnhtM1Q3S3hUZTZrcGFYS2tGRlkycFpQWHlyLzAv
MzEzMzMxMmUzMTM5MzYyZTMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDxB4wDQYJKoZIhvcNAQELBQADggEBAAI0jxzP
3jmUGe7ghu1o2SX/ukEwpSr1URBGerudb60ELoNN6eueD8R+7Jn7aMCNzwOh+q7y
ScI+EHZVeRENeIMl64jJbetyEu4zYHXw6OjwxjOz6tT+qAjGoAz+bV/zVhBbB11O
8vnH8wh79sakQLjcF93yndworquNkjh4Tda/5xQH1PSPWhFjMBHd0PMybz2/qYGT
xFseiqqo++lvNJ1dfSeOqIeoEd7Qwb9agb9labYhjrC/fPkzWrEjnWWV94Vm2ggZ
FAUS9fpOYoI4V9zu+cJHqBMJSkdns0wmYd2tb2IWzFQqJMeFROzL07KQBlGq+4Za
SS0AMcIdQ/MfVF8=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:33 2026 by rpki-client