Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32342d3234203d3e20323637333537.roa
File:                     3133312e3139362e35362e302f32342d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          NHsInNa94f0NTbcsI9A/KtIpiOT5ZaPyRnY68uE+jJo=
Subject key identifier:   5A:04:2C:9B:DF:9D:CD:6E:E4:DF:8C:22:A4:C1:AE:2A:84:19:C1:7E
Certificate issuer:       /CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
Certificate serial:       5586216C26D3CAFAA83AA1637782A032963908EE
Authority key identifier: 22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32342d3234203d3e20323637333537.roa
Signing time:             Thu 02 Jul 2026 13:26:20 +0000
ROA not before:           Thu 02 Jul 2026 13:21:20 +0000
ROA not after:            Thu 01 Jul 2027 13:26:20 +0000
asID:                     267357
IP address blocks:        131.196.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:86:21:6c:26:d3:ca:fa:a8:3a:a1:63:77:82:a0:32:96:39:08:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22003C7E7945DDECEA49DB4BC81112456EF56BF6
        Validity
            Not Before: Jul  2 13:21:20 2026 GMT
            Not After : Jul  1 13:26:20 2027 GMT
        Subject: CN=5A042C9BDF9DCD6EE4DF8C22A4C1AE2A8419C17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:ee:7f:b9:e7:d0:45:a9:6d:6c:e0:ff:38:
                    f4:67:49:2a:9a:5a:fd:2a:a3:54:1b:de:36:10:65:
                    42:a6:8e:2e:9a:7a:32:b9:fc:2a:55:3d:e8:22:a5:
                    8f:e2:01:ac:e5:31:ce:89:91:2a:7e:56:6a:10:f3:
                    5a:77:8f:3c:31:5f:d6:73:64:6e:3e:b0:ce:7b:00:
                    44:82:44:c3:16:3c:ab:bc:1f:25:94:48:97:96:8a:
                    53:12:ea:e0:7b:b7:d8:01:f9:b1:1b:c8:09:4d:7a:
                    65:5f:60:36:27:65:41:cb:10:ea:07:d7:04:27:68:
                    f5:96:d8:0a:90:93:17:6f:86:d5:d2:6e:75:3b:97:
                    8b:42:91:9e:f2:8c:6b:01:c0:84:ca:35:51:fc:de:
                    7e:ff:b4:f0:84:d5:e5:48:59:06:3d:45:6c:49:ba:
                    f2:4e:2a:0a:f9:49:27:40:b2:f9:2d:02:f9:69:d9:
                    ae:0a:19:30:94:7f:f8:4a:6c:e6:b3:f1:2f:a8:65:
                    df:02:01:4b:d1:e8:9a:0f:bd:6a:b2:c6:74:4c:46:
                    2b:62:fc:bd:c4:cd:32:c6:bd:dc:e3:73:ce:9f:23:
                    c1:23:db:91:d3:e6:44:07:12:65:36:36:9d:a7:15:
                    35:4f:87:26:a6:53:c4:9e:04:a4:63:7a:8d:51:bc:
                    6b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:2C:9B:DF:9D:CD:6E:E4:DF:8C:22:A4:C1:AE:2A:84:19:C1:7E
            X509v3 Authority Key Identifier:
                keyid:22:00:3C:7E:79:45:DD:EC:EA:49:DB:4B:C8:11:12:45:6E:F5:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/22003C7E7945DDECEA49DB4BC81112456EF56BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22003C7E7945DDECEA49DB4BC81112456EF56BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/0/3133312e3139362e35362e302f32342d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:20:73:30:5d:83:31:21:79:3c:0b:17:82:c3:24:96:e0:b9:
         b9:81:ae:c4:f1:3f:5d:6c:cc:3d:00:c6:9c:55:dd:d6:d6:f3:
         20:b8:d2:6e:8f:30:db:97:25:90:4e:90:c1:1d:fb:23:4b:b7:
         45:26:dc:89:15:2f:45:77:30:04:40:2b:e0:e1:5f:9d:14:b9:
         97:a2:9e:0d:e6:ce:98:39:ac:12:74:ac:cd:67:71:f3:a4:3f:
         84:2f:9b:e9:f3:01:41:e6:fe:f2:a9:d4:d1:59:2c:03:28:53:
         1a:24:80:57:60:8b:cd:a6:70:ba:f1:80:c5:6c:36:77:ed:64:
         8f:19:e2:2a:b4:f2:3b:12:40:88:7a:e8:cd:88:d7:98:ea:b7:
         66:19:2f:b2:cf:a9:e4:93:21:f9:f4:a1:73:43:8b:ec:cc:c0:
         ec:62:d1:3c:13:43:14:95:03:cf:f3:b5:76:44:52:db:36:bb:
         b2:72:19:2b:38:25:a4:08:39:76:ff:14:91:f8:5d:c9:98:8f:
         c5:a8:35:5d:9d:b9:9e:14:43:90:3d:e8:50:85:1a:86:26:4b:
         16:af:45:3b:0e:9a:4d:52:72:8e:3e:17:40:f5:95:36:a3:42:
         98:81:d0:b5:cd:d8:ff:02:de:52:83:6a:13:84:20:65:54:9c:
         13:6f:2e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:37 2026 by rpki-client