Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (raw, json)
Hash identifier:          fXRzxTZ4SVZKlNgNj6ELoJsHmBnWDE0dC7JE3VPDLNg=
Subject key identifier:   35:AB:8E:C8:2B:02:AF:2A:B8:C8:52:9D:E5:AD:BB:48:76:8F:64:7E
Certificate issuer:       /CN=6EF7630B8EE4B1934465B83DC700990F6C34EAA6
Certificate serial:       7C213371E5690F4455F5319F3514C000CCF06FE5
Authority key identifier: 6E:F7:63:0B:8E:E4:B1:93:44:65:B8:3D:C7:00:99:0F:6C:34:EA:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa
Signing time:             Fri 11 Sep 2026 16:50:15 +0000
ROA not before:           Fri 11 Sep 2026 16:45:15 +0000
ROA not after:            Fri 10 Sep 2027 16:50:15 +0000
asID:                     61680
IP address blocks:        131.108.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:21:33:71:e5:69:0f:44:55:f5:31:9f:35:14:c0:00:cc:f0:6f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF7630B8EE4B1934465B83DC700990F6C34EAA6
        Validity
            Not Before: Sep 11 16:45:15 2026 GMT
            Not After : Sep 10 16:50:15 2027 GMT
        Subject: CN=35AB8EC82B02AF2AB8C8529DE5ADBB48768F647E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:d2:f7:6f:43:e0:f4:4d:95:6a:7b:7e:08:
                    38:b7:14:53:fd:97:22:bd:39:e8:e9:ca:29:38:0a:
                    f7:99:58:47:9c:f2:f5:de:9c:e5:41:19:91:f0:47:
                    86:3a:26:73:04:ac:b0:ba:d0:8b:77:a6:71:1f:c9:
                    53:ad:c1:2c:e5:a5:47:df:b6:d7:ba:da:91:ce:99:
                    5a:10:b2:e8:5d:f8:a8:dd:f1:6f:4b:74:59:ea:c5:
                    4a:ad:65:45:d0:3a:92:f0:2c:55:cd:e5:56:82:27:
                    54:b0:a2:07:e6:8f:52:5a:c9:a7:44:df:37:25:0f:
                    38:3f:89:3f:08:ed:b3:b7:7d:34:ca:86:db:8f:8f:
                    23:37:31:ed:fa:dc:52:f4:be:3b:32:8a:68:e8:0a:
                    b2:7e:f8:c1:aa:c7:1e:55:8c:70:b7:c5:94:f3:d3:
                    87:d8:00:6b:2d:5b:36:79:eb:f4:4e:8f:30:f2:d6:
                    45:6d:f2:76:c5:d8:78:06:8a:13:ee:1f:05:9d:1f:
                    da:07:b5:bf:d3:5c:8f:bb:93:21:a6:6e:84:6c:66:
                    51:87:c1:3e:b7:c5:56:82:df:d2:7a:7b:4a:65:a9:
                    30:16:8f:37:bd:c6:4c:f6:fb:bb:b3:2d:33:95:9d:
                    07:ff:42:ae:1f:3f:7a:75:89:ab:27:79:e5:77:b7:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:8E:C8:2B:02:AF:2A:B8:C8:52:9D:E5:AD:BB:48:76:8F:64:7E
            X509v3 Authority Key Identifier:
                keyid:6E:F7:63:0B:8E:E4:B1:93:44:65:B8:3D:C7:00:99:0F:6C:34:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EF7630B8EE4B1934465B83DC700990F6C34EAA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3232203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:a5:08:6f:93:65:4c:ba:e5:03:ae:d0:06:30:1e:9f:e2:
         d7:e0:db:c7:cf:d4:96:36:b7:0b:60:ce:3d:98:7f:e3:f8:56:
         10:b9:ad:19:16:b5:c9:b7:02:75:35:57:22:4c:b5:a0:92:14:
         77:8b:a2:c0:5d:e7:a3:ec:96:2d:63:c3:d6:7e:81:ac:77:b6:
         bb:56:24:07:c7:58:08:45:6a:e6:3b:7f:8c:80:a6:e8:23:1a:
         5d:31:49:dd:35:33:17:ef:7c:fc:f1:fc:1c:d4:41:6e:62:75:
         56:a1:16:45:9c:97:6d:7a:61:bc:1f:61:6c:4c:13:71:ce:26:
         11:58:78:de:9b:37:c4:20:3c:96:5c:4f:83:98:b2:02:79:af:
         a5:19:35:be:de:36:cf:db:a8:bb:5e:69:c5:ca:97:92:2e:47:
         63:ce:69:64:2b:d6:59:28:fa:d9:cb:d4:ad:45:25:64:8b:26:
         24:81:f5:28:12:4f:48:98:3d:2f:9f:e8:e9:c8:8b:2d:8e:56:
         14:8b:2d:ac:2f:55:63:b0:e3:49:ac:ef:ff:8f:55:4a:b0:43:
         1e:27:da:45:23:61:88:84:3e:4c:8e:60:4b:d2:bf:ea:a2:4f:
         45:cf:78:67:18:8d:c7:3e:b8:47:3c:6b:d3:54:3c:20:e0:20:
         e0:2e:80:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:12:23 2026 by rpki-client