Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e3230382e302f32322d3332203d3e20323733333039.roa
File:                     3133312e3136312e3230382e302f32322d3332203d3e20323733333039.roa (raw, json)
Hash identifier:          WrlOxnarSugY+xuPA7w/DMd/PS0xgAU4u+62pG4Yw8I=
Subject key identifier:   97:0D:DE:F7:CF:BC:DA:92:96:52:92:6F:B7:C2:E2:16:8F:CD:08:42
Certificate issuer:       /CN=6F76316D459A632F20568D07312B32CAA4AA9152
Certificate serial:       0D4E761289CECB298817916D34E15FBA22F1979E
Authority key identifier: 6F:76:31:6D:45:9A:63:2F:20:56:8D:07:31:2B:32:CA:A4:AA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e3230382e302f32322d3332203d3e20323733333039.roa
Signing time:             Sun 29 Mar 2026 06:41:16 +0000
ROA not before:           Sun 29 Mar 2026 06:36:16 +0000
ROA not after:            Sun 28 Mar 2027 06:41:16 +0000
asID:                     273309
IP address blocks:        131.161.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 23:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4e:76:12:89:ce:cb:29:88:17:91:6d:34:e1:5f:ba:22:f1:97:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F76316D459A632F20568D07312B32CAA4AA9152
        Validity
            Not Before: Mar 29 06:36:16 2026 GMT
            Not After : Mar 28 06:41:16 2027 GMT
        Subject: CN=970DDEF7CFBCDA929652926FB7C2E2168FCD0842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:3c:89:3f:b9:61:52:95:2a:18:ec:ed:cd:
                    86:8a:4e:b2:22:44:82:fd:6b:05:1b:f7:a4:e1:43:
                    c0:d6:b5:6f:65:0c:c0:dc:53:08:cd:21:5d:e5:2a:
                    b2:00:9a:2a:91:90:0b:5d:9b:76:b6:29:05:45:76:
                    23:60:ed:67:ff:e2:6f:59:26:73:c5:69:6c:ef:53:
                    f2:93:0c:d9:3b:01:69:d7:e1:3b:dd:cc:14:70:f2:
                    c2:ac:0e:5c:e4:53:b2:dd:37:9f:13:56:d8:ad:c4:
                    3f:34:1c:25:3e:4f:f2:fb:0e:f1:99:62:b9:ba:1f:
                    76:ee:02:96:83:6a:ed:21:98:be:78:ee:01:3e:3f:
                    fa:3a:51:03:e7:be:f0:13:e9:1f:ee:22:c9:ab:de:
                    b4:f2:07:32:58:f4:7a:9a:b0:fe:a9:9d:98:0b:86:
                    0c:20:f5:08:23:21:00:9a:20:e6:89:fe:9c:6c:ae:
                    0c:8f:8a:15:aa:96:7f:21:82:1e:20:e3:2f:10:71:
                    1f:84:82:50:52:34:ed:f1:e7:22:b0:74:c1:db:c6:
                    f7:aa:9f:ed:04:ba:29:cf:98:ff:6c:d4:dc:62:0a:
                    54:e5:21:06:eb:b9:02:5f:55:78:1a:29:b0:c3:0e:
                    9a:93:13:53:44:f9:2a:2f:8a:40:5c:60:c0:36:5b:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0D:DE:F7:CF:BC:DA:92:96:52:92:6F:B7:C2:E2:16:8F:CD:08:42
            X509v3 Authority Key Identifier:
                keyid:6F:76:31:6D:45:9A:63:2F:20:56:8D:07:31:2B:32:CA:A4:AA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/6F76316D459A632F20568D07312B32CAA4AA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F76316D459A632F20568D07312B32CAA4AA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133312e3136312e3230382e302f32322d3332203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ce:da:3c:54:13:26:a1:d6:70:43:82:7e:cb:5e:0b:31:82:
         fd:b8:e4:81:95:53:23:f6:3e:d2:7d:e6:09:fe:bc:38:f5:72:
         12:3c:d3:6f:4c:53:0a:6a:57:61:54:16:41:88:4a:d6:24:11:
         fa:13:9a:2b:0e:b2:f2:c7:e1:5f:4e:ba:99:60:a7:d3:f6:80:
         51:23:50:b1:70:a7:51:9d:62:c2:51:a0:e4:17:59:7c:60:f5:
         96:bb:14:72:60:ef:3a:25:80:22:3a:01:34:e1:a1:4e:7e:2c:
         07:72:cc:a9:07:70:93:c2:e5:0d:dc:3d:0a:b2:91:62:b9:ed:
         fb:8d:aa:be:de:3b:cd:07:fa:6a:da:b1:67:5a:97:c3:92:df:
         7c:80:dc:79:53:6f:68:57:08:ee:fc:6a:79:4c:7d:a2:cc:8c:
         fb:cb:05:05:53:1c:06:f6:68:80:59:6c:99:01:d5:b2:41:30:
         a9:3d:ea:bf:06:b3:d9:52:6c:49:b9:75:26:81:36:9f:e3:4c:
         e5:55:4b:01:ec:c2:75:24:be:30:7f:50:c7:4b:db:ab:74:d4:
         32:ae:c0:b6:f7:3f:c3:1b:77:c1:5b:2b:fa:f7:82:8a:48:26:
         7a:73:77:31:5e:7e:e1:d1:35:87:3c:c9:86:90:80:da:41:eb:
         cc:27:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:26:52 2026 by rpki-client