Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32342d3234203d3e20323731343130.roa
File:                     3133312e3139362e33302e302f32342d3234203d3e20323731343130.roa (raw, json)
Hash identifier:          FSxVv/yHLxIAgu1UgN4rthZdPUj35nTYplAQpBWL7m0=
Subject key identifier:   D1:64:DB:33:C3:C6:33:63:E4:51:9D:5F:49:45:B7:54:EA:03:6F:43
Certificate issuer:       /CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
Certificate serial:       5F67B89A94D2B0B7820EBB872A828AE7835F2809
Authority key identifier: FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32342d3234203d3e20323731343130.roa
Signing time:             Tue 07 Jul 2026 11:36:10 +0000
ROA not before:           Tue 07 Jul 2026 11:31:10 +0000
ROA not after:            Tue 06 Jul 2027 11:36:10 +0000
asID:                     271410
IP address blocks:        131.196.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl
                          rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:b8:9a:94:d2:b0:b7:82:0e:bb:87:2a:82:8a:e7:83:5f:28:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33EAB53E62DEA5F72C256D6AD186458E2EA636
        Validity
            Not Before: Jul  7 11:31:10 2026 GMT
            Not After : Jul  6 11:36:10 2027 GMT
        Subject: CN=D164DB33C3C63363E4519D5F4945B754EA036F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:b0:77:20:ae:dc:2d:a2:92:a0:78:96:10:
                    28:65:1a:ac:ea:0a:84:8f:f9:8c:1b:94:b9:ad:84:
                    f1:97:7f:11:4f:e2:59:69:d5:77:e3:16:f1:e8:50:
                    4c:6c:ec:37:a1:4b:ca:1a:15:79:7a:0c:53:be:ad:
                    9c:05:88:ff:d0:ac:ef:a6:6d:6b:fc:e0:f2:f5:3a:
                    ce:aa:4c:55:23:b7:c1:5c:c7:ba:75:d4:1c:17:dd:
                    75:7a:66:ac:40:90:56:b1:1a:00:20:4d:73:c3:1f:
                    00:5d:78:76:d7:40:49:0b:62:b4:a8:a2:d8:94:e3:
                    36:94:1d:5c:e9:84:89:8f:7f:a9:c1:36:19:d5:5a:
                    01:f3:5f:41:7d:9d:9c:29:fe:8c:1e:f3:9f:ef:f5:
                    f1:51:80:e2:af:89:18:18:85:5b:a9:dc:37:bd:41:
                    9e:19:11:92:6b:11:24:8b:d0:a4:60:60:2d:5f:ac:
                    7d:cb:5a:c7:96:fe:a2:41:91:8e:20:e6:cd:91:f3:
                    f7:38:5c:c9:f9:20:1b:08:d1:1d:2d:34:65:c7:05:
                    5c:47:04:60:78:d3:a6:1c:f5:cb:62:de:3a:e5:f6:
                    d6:66:25:9a:44:21:3b:ed:fa:da:ec:ed:8f:bb:bd:
                    6a:53:70:fd:d0:7f:0f:6d:4e:fd:c4:d4:68:92:bf:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:64:DB:33:C3:C6:33:63:E4:51:9D:5F:49:45:B7:54:EA:03:6F:43
            X509v3 Authority Key Identifier:
                keyid:FF:33:EA:B5:3E:62:DE:A5:F7:2C:25:6D:6A:D1:86:45:8E:2E:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33EAB53E62DEA5F72C256D6AD186458E2EA636.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyPW1k8gkoy3Cvy7ofxm3T7KxTe6kpaXKkFFY2pZPXyr/0/3133312e3139362e33302e302f32342d3234203d3e20323731343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:90:3f:e7:e9:af:8f:ea:3e:d5:3a:92:51:a3:b0:de:35:
         83:e1:0b:26:84:75:f9:03:f9:dd:45:93:61:72:11:b4:6c:7d:
         63:39:76:19:0e:64:d5:a5:7e:da:b2:1a:15:2c:98:b2:09:26:
         74:fd:32:09:fd:20:69:f2:30:d2:87:d8:a9:dc:65:d1:af:6a:
         94:3f:2d:ee:10:47:26:eb:55:51:1b:87:ad:b7:33:89:a3:46:
         b0:29:2f:f3:2c:a4:b5:1d:7e:52:80:ac:87:3d:8a:e1:3a:e4:
         70:fe:2e:99:a5:89:7b:8a:06:60:db:72:39:73:8c:97:26:89:
         9b:ec:98:89:e0:c1:2b:92:6f:48:e1:8d:5e:31:43:b3:1e:76:
         d7:03:9f:85:3f:a1:f4:8c:55:bc:38:c2:93:1e:28:62:02:ea:
         88:ab:1c:ac:18:5c:6c:4c:18:14:78:5b:2c:71:97:d4:36:c9:
         78:62:26:20:c8:46:26:65:d3:1b:f9:1a:9a:b6:63:59:79:a1:
         be:df:ec:46:10:d5:68:ad:76:64:6a:ba:a1:3a:13:5a:60:7f:
         d5:69:4f:30:78:f5:3d:42:c9:f2:02:8d:c6:39:ad:09:27:93:
         0f:e5:ea:56:e5:e8:ae:f2:b9:11:0f:2d:e8:2c:36:b3:13:7f:
         ae:78:8c:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX2e4mpTSsLeCDruHKoKK54NfKAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkYzM0VBQjUzRTYyREVBNUY3MkMyNTZENkFEMTg2NDU4
RTJFQTYzNjAeFw0yNjA3MDcxMTMxMTBaFw0yNzA3MDYxMTM2MTBaMDMxMTAvBgNV
BAMTKEQxNjREQjMzQzNDNjMzNjNFNDUxOUQ1RjQ5NDVCNzU0RUEwMzZGNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfbB3IK7cLaKSoHiWEChlGqzq
CoSP+YwblLmthPGXfxFP4llp1XfjFvHoUExs7DehS8oaFXl6DFO+rZwFiP/QrO+m
bWv84PL1Os6qTFUjt8Fcx7p11BwX3XV6ZqxAkFaxGgAgTXPDHwBdeHbXQEkLYrSo
otiU4zaUHVzphImPf6nBNhnVWgHzX0F9nZwp/owe85/v9fFRgOKviRgYhVup3De9
QZ4ZEZJrESSL0KRgYC1frH3LWseW/qJBkY4g5s2R8/c4XMn5IBsI0R0tNGXHBVxH
BGB406Yc9cti3jrl9tZmJZpEITvt+trs7Y+7vWpTcP3Qfw9tTv3E1GiSv0NdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0WTbM8PGM2PkUZ1fSUW3VOoDb0MwHwYDVR0j
BBgwFoAU/zPqtT5i3qX3LCVtatGGRY4upjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lQVzFrOGdrb3kzQ3Z5N29meG0zVDdLeFRlNmtwYVhLa0ZGWTJwWlBY
eXIvMC9GRjMzRUFCNTNFNjJERUE1RjcyQzI1NkQ2QUQxODY0NThFMkVBNjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGMzNFQUI1M0U2MkRFQTVG
NzJDMjU2RDZBRDE4NjQ1OEUyRUE2MzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N5UFcxazhna295M0N2eTdvZnhtM1Q3S3hUZTZrcGFYS2tGRlkycFpQWHlyLzAv
MzEzMzMxMmUzMTM5MzYyZTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDxB4wDQYJKoZIhvcNAQELBQADggEBAEFakD/n
6a+P6j7VOpJRo7DeNYPhCyaEdfkD+d1Fk2FyEbRsfWM5dhkOZNWlftqyGhUsmLIJ
JnT9Mgn9IGnyMNKH2KncZdGvapQ/Le4QRybrVVEbh623M4mjRrApL/MspLUdflKA
rIc9iuE65HD+LpmliXuKBmDbcjlzjJcmiZvsmIngwSuSb0jhjV4xQ7MedtcDn4U/
ofSMVbw4wpMeKGIC6oirHKwYXGxMGBR4Wyxxl9Q2yXhiJiDIRiZl0xv5Gpq2Y1l5
ob7f7EYQ1WitdmRquqE6E1pgf9VpTzB49T1CyfICjcY5rQknkw/l6lbl6K7yuREP
LegsNrMTf654jEA=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:55:25 2026 by rpki-client