Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34322e302f32332d3233203d3e203631373534.roa
File:                     3133312e3130302e34322e302f32332d3233203d3e203631373534.roa (raw, json)
Hash identifier:          79+dAQdMcTFS3v0UOGxEzPSZWqO1evcwRzk8PyYZ8Yw=
Subject key identifier:   C8:35:0C:DA:C4:5E:18:94:4E:74:F3:57:07:83:B6:F7:71:B2:11:89
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       6154C108B4D534559F73AECA7504438DDF37D4C0
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34322e302f32332d3233203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:25 +0000
ROA not before:           Fri 11 Sep 2026 20:09:25 +0000
ROA not after:            Fri 10 Sep 2027 20:14:25 +0000
asID:                     61754
IP address blocks:        131.100.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 10:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:54:c1:08:b4:d5:34:55:9f:73:ae:ca:75:04:43:8d:df:37:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:25 2026 GMT
            Not After : Sep 10 20:14:25 2027 GMT
        Subject: CN=C8350CDAC45E18944E74F3570783B6F771B21189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:dd:24:61:0c:36:12:e6:6d:20:fb:2e:8f:
                    b2:8e:63:e3:13:a7:69:84:09:b8:7b:ce:4b:d9:6e:
                    0a:a8:f4:ef:d4:d6:4e:d0:2e:6f:b9:ef:b1:4c:e6:
                    cb:04:4f:d6:1a:ac:b1:fb:8d:9b:37:36:a9:96:4b:
                    59:e2:80:fc:50:4e:cb:3e:3a:1f:2d:35:b1:f9:11:
                    ba:89:cc:9e:d6:2f:14:3c:9a:c0:ac:c4:1f:f7:0d:
                    f4:d0:0b:ac:73:7b:61:22:3d:f1:9a:e8:69:8d:a3:
                    19:40:9b:d0:86:fc:35:9b:ec:fc:b0:92:7c:99:1c:
                    b9:25:e0:50:47:36:fc:00:cd:3a:1a:42:71:b3:3c:
                    2e:a0:6d:9f:86:8c:39:ec:ee:e5:5b:41:64:99:ec:
                    12:e0:ea:ca:54:96:26:a7:a1:8e:ef:2e:4e:f9:1e:
                    0c:dc:54:63:a5:37:00:80:f4:5e:eb:99:e7:bc:aa:
                    dc:c2:ce:99:0e:a1:55:53:5a:e5:80:a0:bf:48:4e:
                    6b:23:a1:13:a1:52:b3:9e:13:53:2e:b9:70:c1:4b:
                    30:5d:04:9d:ee:f9:49:de:76:e9:f7:05:2b:15:32:
                    6d:c7:ef:75:95:0d:76:f7:e0:dc:dc:7b:4e:2b:b9:
                    29:96:f8:d1:a3:2d:f3:ff:a1:66:fb:1d:34:69:c3:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:0C:DA:C4:5E:18:94:4E:74:F3:57:07:83:B6:F7:71:B2:11:89
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3133312e3130302e34322e302f32332d3233203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:32:f9:e8:7d:5f:23:31:7a:e2:ab:c2:af:09:36:1e:a2:
         72:1b:57:5a:36:74:b0:1f:eb:e8:4c:75:3c:9e:82:4b:a6:b9:
         9d:fe:e0:3c:63:e9:06:eb:37:7f:86:76:5c:f5:92:d0:28:3a:
         47:bc:1c:4f:7c:c9:d5:88:89:1c:ce:9e:1b:39:e4:76:03:93:
         c2:ec:a6:e1:1b:2a:2e:a9:e2:bb:47:4b:40:0b:b8:35:6c:55:
         84:ff:f6:7a:5d:e8:42:d9:4d:0b:25:a2:5d:d5:af:84:a2:07:
         34:86:12:2e:67:77:89:bb:80:a5:dd:8b:34:32:d3:e7:69:83:
         ad:de:9d:da:dc:28:2d:63:97:45:f1:cf:b4:e3:1c:d4:3e:c1:
         cf:74:13:5f:fe:7c:57:00:53:6b:ee:61:c7:2c:7c:12:5b:d3:
         42:1e:da:97:af:c8:79:4a:d8:73:a4:11:4f:75:0f:c5:46:2b:
         69:95:0d:d1:01:f5:d2:3f:d5:28:4f:09:3e:d1:9f:e3:ae:89:
         66:5b:8d:e7:78:ed:dc:fd:32:85:47:7a:73:b4:ce:28:81:71:
         e4:c2:a8:31:68:9d:0f:62:73:00:9e:10:c6:36:72:07:4b:37:
         b6:c6:31:7f:03:d9:0b:4c:5a:39:d3:f6:9b:85:b5:5d:64:71:
         21:bc:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:42 2026 by rpki-client