Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32332d3233203d3e20323637333537.roa
File:                     3133312e3139362e35362e302f32332d3233203d3e20323637333537.roa (raw, json)
Hash identifier:          AOC7yjopJbRRufA3bWuFOXr9HW041pc/qA59Gc6b7+4=
Subject key identifier:   89:D2:B7:FF:85:B0:81:55:2F:F0:E7:F1:9C:07:BD:C1:86:5C:72:48
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       01A77A5771152F5E8479A2E0B03223AEF07357C6
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32332d3233203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:21 +0000
ROA not before:           Thu 02 Jul 2026 13:21:21 +0000
ROA not after:            Thu 01 Jul 2027 13:26:21 +0000
asID:                     267357
IP address blocks:        131.196.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:7a:57:71:15:2f:5e:84:79:a2:e0:b0:32:23:ae:f0:73:57:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:21 2026 GMT
            Not After : Jul  1 13:26:21 2027 GMT
        Subject: CN=89D2B7FF85B081552FF0E7F19C07BDC1865C7248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:13:a7:cb:d5:34:82:e6:57:4d:a1:c3:7a:
                    45:e3:a7:26:a4:83:d5:df:ba:41:f4:6f:bc:eb:0e:
                    e1:10:c6:e5:30:ba:db:3c:23:09:34:f7:fe:bc:ac:
                    a7:ba:83:56:00:ea:79:47:0f:e7:b6:b0:7b:8b:58:
                    ad:ac:ad:ef:8c:49:7f:22:cd:66:8f:7d:f8:9d:2e:
                    7e:e8:2c:75:c9:95:07:17:90:ab:d4:00:8f:50:9d:
                    bb:71:f6:9f:cf:38:d3:09:c8:bb:d3:54:76:54:a1:
                    ae:7f:26:91:b7:29:e9:d3:aa:a7:df:10:3c:40:88:
                    c7:dc:1a:c8:69:19:f2:01:d5:f0:4c:e2:30:67:83:
                    9e:97:1b:d9:76:1b:09:7e:ce:16:9a:42:88:40:a1:
                    8b:26:cb:5c:c6:96:93:7b:bb:2f:4e:a7:17:77:1f:
                    12:a8:a5:37:b0:49:c4:db:f8:2d:c1:91:2f:33:f3:
                    a7:39:15:81:c0:c6:41:a9:90:20:c2:ea:8f:95:98:
                    0f:11:f2:37:0c:13:52:a8:d1:95:c4:76:25:9d:df:
                    77:7c:a6:86:fb:22:0d:fd:a5:96:f4:1c:34:9a:d1:
                    ee:c3:7f:90:a5:88:a2:7b:da:85:a6:05:49:74:47:
                    2e:f1:a1:53:45:ce:cb:57:e6:33:6a:80:b6:a2:50:
                    a1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:B7:FF:85:B0:81:55:2F:F0:E7:F1:9C:07:BD:C1:86:5C:72:48
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32332d3233203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:9c:fa:c7:bb:11:78:fb:56:8a:2f:f2:21:6b:f3:e2:85:b6:
         fd:ac:ae:3b:b1:81:ca:a5:8e:40:60:77:94:68:dd:f1:c5:a2:
         0d:53:92:f1:a2:f7:d8:42:67:cb:e9:eb:d0:fc:a9:16:55:84:
         10:ac:fa:73:d9:95:df:46:af:a0:05:b4:a0:30:da:87:b9:17:
         7b:26:a5:ac:c2:14:6e:87:ca:20:23:e4:c9:fe:bd:68:fe:4d:
         c4:0c:43:d0:b7:94:f4:0b:de:27:4c:1a:0a:ff:3e:1b:0c:6f:
         3e:cc:a4:29:9c:a1:ae:1b:05:46:bd:3a:24:d9:e2:83:a9:b1:
         4d:d9:e2:df:56:87:77:d0:c3:db:85:d3:0d:19:af:81:0e:ac:
         96:e5:05:2b:21:76:89:64:88:28:46:2c:f4:f7:52:c6:e5:16:
         b8:5c:0a:8f:b7:53:ef:a9:6b:1c:d4:6e:9e:4e:14:b2:1d:d3:
         83:7f:70:af:fb:53:30:7e:54:94:c8:74:04:f0:06:4c:09:a5:
         4d:30:49:4d:a0:ea:2c:67:9e:7d:09:7e:77:88:a5:59:20:1a:
         75:9b:fa:77:d3:58:de:f8:77:b3:e3:d1:87:2f:ac:39:4d:be:
         39:c3:1f:4d:2e:08:5a:f1:47:69:8f:72:fa:e2:8a:7e:9f:6b:
         d9:aa:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:12 2026 by rpki-client