Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa
File:                     3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa (raw, json)
Hash identifier:          UJpbZavO+3UVhq5rzxecMPJGN0KAB+fGSYh2ShPdJDQ=
Subject key identifier:   D5:5C:B7:ED:35:47:7E:01:EB:87:D6:2E:66:C2:4F:70:3E:37:8A:FC
Certificate issuer:       /CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
Certificate serial:       7C2223AAC2DCAF99690810C7DC9C658EBC986B2F
Authority key identifier: 4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa
Signing time:             Thu 18 Jun 2026 15:12:03 +0000
ROA not before:           Thu 18 Jun 2026 15:07:03 +0000
ROA not after:            Thu 17 Jun 2027 15:12:03 +0000
asID:                     264429
IP address blocks:        131.221.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl
                          rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:22:23:aa:c2:dc:af:99:69:08:10:c7:dc:9c:65:8e:bc:98:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B2D308A10AC4264B7DC7D903FFE478F2A400E1D
        Validity
            Not Before: Jun 18 15:07:03 2026 GMT
            Not After : Jun 17 15:12:03 2027 GMT
        Subject: CN=D55CB7ED35477E01EB87D62E66C24F703E378AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:ed:78:79:8f:c2:20:82:3f:46:1b:50:28:
                    fd:ee:9b:db:78:b5:da:f2:40:f7:f7:73:42:d1:63:
                    7e:6d:1d:1b:e5:f8:d1:00:05:33:07:e5:dc:da:d4:
                    6d:7b:75:01:3f:c2:48:e4:1f:7a:e5:4c:61:dd:1f:
                    d1:9f:6b:40:3f:5a:cb:61:81:f7:c8:b8:0f:1c:c6:
                    dd:83:e4:5e:f1:28:cc:7a:ec:4d:f4:cb:8e:9b:b1:
                    0f:5a:33:ba:dc:59:12:a7:b0:56:ff:f7:2d:e1:4b:
                    2a:35:c2:d2:98:17:f0:f7:75:af:fc:de:9b:a0:91:
                    d1:59:f6:83:c4:59:32:6e:57:61:35:3e:ef:c2:83:
                    2d:c6:cd:8a:f7:5a:ef:8b:97:81:31:df:ac:3f:cc:
                    a2:44:54:e9:92:b7:2e:77:6f:f6:9c:ff:af:11:64:
                    a3:83:1d:31:7a:19:15:42:14:44:09:57:02:ac:48:
                    79:c3:0d:1a:c3:98:1a:a0:de:bf:a0:4c:34:08:3c:
                    26:d9:99:d9:08:21:5a:9f:1a:0a:53:e9:52:f4:40:
                    87:91:eb:66:36:d7:40:a1:3f:b1:e1:b9:f1:f4:72:
                    ef:17:5a:70:0d:10:5f:62:02:e4:e2:50:1f:c9:f3:
                    77:09:d5:11:ab:25:aa:a2:b4:6e:93:cd:5b:4e:ff:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5C:B7:ED:35:47:7E:01:EB:87:D6:2E:66:C2:4F:70:3E:37:8A:FC
            X509v3 Authority Key Identifier:
                keyid:4B:2D:30:8A:10:AC:42:64:B7:DC:7D:90:3F:FE:47:8F:2A:40:0E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B2D308A10AC4264B7DC7D903FFE478F2A400E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/0/3133312e3232312e3133322e302f32322d3332203d3e20323634343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:f5:22:4f:8f:37:88:3f:d9:df:fe:60:f6:a1:6f:ff:4a:
         19:73:18:ff:45:4f:e0:37:7c:9e:27:eb:c4:86:33:44:71:97:
         09:93:d6:0a:7f:7a:a1:38:a7:a8:0b:f8:df:b1:d2:cc:e0:64:
         42:ad:ea:86:be:14:91:43:63:10:80:9a:fe:18:04:27:7b:41:
         c9:cf:21:0b:4c:d2:68:39:b2:77:b4:0b:80:eb:47:d2:65:11:
         f6:2a:e1:2d:03:7e:17:16:0b:60:4e:02:9a:25:8b:3f:2f:97:
         dc:e5:de:d0:db:6f:66:b9:ba:38:a3:8c:31:da:a4:94:43:7a:
         cb:f0:08:0b:a9:83:d9:ff:53:c9:b2:ea:0b:2c:10:99:40:0a:
         ee:7b:5c:59:e4:fe:15:54:96:d0:1d:db:c3:53:47:b3:9d:a1:
         e4:78:68:f4:f8:64:18:a7:3a:60:07:25:ce:c6:da:50:96:ca:
         d0:19:39:4b:75:b3:a5:44:0a:b7:52:d2:b6:3d:fc:28:e4:e6:
         c3:40:75:b8:d2:f9:8d:54:cc:6a:e6:49:50:c1:86:84:e3:f9:
         af:0f:97:9a:e3:27:c5:ba:1d:7f:fd:73:1b:4b:8b:f2:f3:3b:
         63:4f:ea:85:ec:b8:8b:ec:15:6d:7d:0d:5c:1d:b1:dd:4d:29:
         50:33:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:09 2026 by rpki-client