Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/3133312e3235352e38382e302f32322d3232203d3e20323634343833.roa
File:                     3133312e3235352e38382e302f32322d3232203d3e20323634343833.roa (raw, json)
Hash identifier:          VlriyzxTy3o09QhMyG3Bg/Z8br3JN1IFJcHxKdZnPtw=
Subject key identifier:   BE:6A:F4:F6:EC:A2:80:08:5C:F1:5F:D0:7B:E5:12:33:38:51:69:FE
Certificate issuer:       /CN=686C2A5E6458EFDC4EB683675D32A235E6A80A68
Certificate serial:       4E49AE4EFD9559B7B17422F6C90029C7ABDBBD87
Authority key identifier: 68:6C:2A:5E:64:58:EF:DC:4E:B6:83:67:5D:32:A2:35:E6:A8:0A:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/3133312e3235352e38382e302f32322d3232203d3e20323634343833.roa
Signing time:             Tue 15 Sep 2026 01:43:05 +0000
ROA not before:           Tue 15 Sep 2026 01:38:05 +0000
ROA not after:            Tue 14 Sep 2027 01:43:05 +0000
asID:                     264483
IP address blocks:        131.255.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.crl
                          rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 02:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:ae:4e:fd:95:59:b7:b1:74:22:f6:c9:00:29:c7:ab:db:bd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686C2A5E6458EFDC4EB683675D32A235E6A80A68
        Validity
            Not Before: Sep 15 01:38:05 2026 GMT
            Not After : Sep 14 01:43:05 2027 GMT
        Subject: CN=BE6AF4F6ECA280085CF15FD07BE51233385169FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:1b:40:d5:b4:e6:b7:d8:8a:d3:68:b0:c2:
                    e6:28:6b:ad:40:63:8c:22:46:33:ff:0c:3b:2b:f7:
                    bf:fa:61:06:db:84:fb:21:14:c2:26:c0:b5:a9:43:
                    61:58:bf:36:28:2d:83:7c:00:24:20:74:62:36:a9:
                    e7:85:be:d5:34:1c:e5:f1:89:4c:1a:fd:a9:74:aa:
                    9c:65:5d:a2:a0:5e:1c:cd:57:ba:aa:d5:c0:fe:4f:
                    a3:6f:b0:19:df:24:f7:4d:c2:b9:d6:0d:8d:fd:63:
                    18:e5:52:78:ce:05:f7:09:3c:9e:9b:7d:21:74:7d:
                    23:35:20:ef:66:cb:f0:61:96:2b:f5:df:04:b8:ce:
                    b1:60:e7:d1:32:96:f6:e9:3f:0a:fc:1b:d2:50:41:
                    e3:a8:48:61:37:28:ae:5f:1b:9b:b1:d7:60:b3:6c:
                    77:c8:88:1f:83:02:38:b5:45:77:59:33:14:15:9e:
                    f7:36:a5:97:ee:a3:f8:53:76:1a:c3:4a:06:1b:29:
                    1c:11:64:fd:9c:79:69:a3:8f:a9:ef:44:f8:e0:2c:
                    60:d9:c7:3a:68:ef:5f:68:67:21:81:dc:a5:12:e1:
                    ca:b7:9b:d5:c4:5d:af:06:af:45:c5:45:9e:9d:46:
                    3e:88:cb:82:cc:42:d5:1b:72:5e:35:78:d2:cf:82:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6A:F4:F6:EC:A2:80:08:5C:F1:5F:D0:7B:E5:12:33:38:51:69:FE
            X509v3 Authority Key Identifier:
                keyid:68:6C:2A:5E:64:58:EF:DC:4E:B6:83:67:5D:32:A2:35:E6:A8:0A:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/686C2A5E6458EFDC4EB683675D32A235E6A80A68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686C2A5E6458EFDC4EB683675D32A235E6A80A68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FMRVg9eBvGnb1NZjkhXf4sKoUMNSEoGauSEWkija8fqY/0/3133312e3235352e38382e302f32322d3232203d3e20323634343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:4c:83:b9:ec:c7:f3:4b:e8:1a:c8:57:26:aa:1d:0d:62:f9:
         1a:ae:1d:11:d6:45:ce:5a:f6:85:f4:1a:44:66:dd:d4:6b:f4:
         ad:74:b4:2d:59:91:1b:a7:04:4b:2d:33:34:97:c3:80:f3:73:
         ac:a8:f8:7f:d8:99:4c:33:b2:56:cb:6f:99:b9:ce:5d:d5:71:
         b0:be:1b:0f:2d:3b:df:85:d3:7e:3c:a5:94:1b:db:fa:4a:6f:
         09:71:a7:3a:db:a7:9b:5f:7c:96:43:57:3a:94:18:c4:fc:e4:
         50:9d:d1:d5:ce:fa:21:5a:17:1c:fd:1b:4a:68:18:a4:0c:32:
         ce:b7:ec:53:1c:b4:b1:f9:06:c2:6e:5e:29:aa:e1:e9:c8:db:
         a9:f1:86:b7:1d:c1:9e:f8:a6:05:4f:eb:63:35:1e:61:49:69:
         4f:02:b9:f3:bb:2f:64:b7:10:28:50:0d:c7:ed:40:c1:3f:d0:
         42:24:74:97:f9:dd:27:75:2a:6c:8d:e8:83:84:97:8c:1a:ea:
         64:d6:75:d2:ba:8a:67:a9:17:9a:b5:ca:f0:ad:3c:58:00:ac:
         2c:b9:64:f7:76:97:b6:f9:6a:87:74:32:dc:81:e7:fd:74:df:
         8d:21:89:e3:04:f8:76:b2:e2:e1:92:e3:eb:4b:4c:c6:f9:c7:
         3a:52:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:53:19 2026 by rpki-client