Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa
File:                     3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa (raw, json)
Hash identifier:          RMYZyRqaielyTrdBLudfacFr9NI7nsCvNgczKmp3qgw=
Subject key identifier:   C4:2C:36:9A:5E:A1:36:A4:DA:84:1D:59:20:FE:AF:BB:F8:2A:1A:85
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       260BA426DC7E982B404E74E91C6070A353650A44
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa
Signing time:             Fri 22 May 2026 12:08:45 +0000
ROA not before:           Fri 22 May 2026 12:03:45 +0000
ROA not after:            Fri 21 May 2027 12:08:45 +0000
asID:                     198949
IP address blocks:        132.255.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 06 Jun 2026 11:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0b:a4:26:dc:7e:98:2b:40:4e:74:e9:1c:60:70:a3:53:65:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: May 22 12:03:45 2026 GMT
            Not After : May 21 12:08:45 2027 GMT
        Subject: CN=C42C369A5EA136A4DA841D5920FEAFBBF82A1A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:13:fa:d7:23:18:36:ee:2f:db:d9:4b:ea:
                    ec:23:d1:6b:6e:ef:db:1e:2e:ca:c9:12:f7:3e:ee:
                    04:4a:8a:7d:aa:18:d8:74:14:8c:8f:30:09:02:df:
                    a7:fa:be:f1:e3:81:9d:a7:02:e1:e7:48:dd:58:80:
                    cd:b4:e2:c6:3c:3a:6c:06:be:b1:ea:04:f1:ef:53:
                    5f:97:d2:96:08:fa:66:0b:97:47:8d:ce:59:b0:92:
                    b2:94:57:ff:53:18:30:0e:e0:aa:ea:12:fa:b6:63:
                    3b:e6:e5:d0:a6:5d:42:52:03:b5:a3:3f:02:d6:33:
                    f0:9e:5c:5d:4f:1d:e0:b9:05:6a:d1:73:4b:77:1f:
                    39:91:34:75:06:61:73:85:33:ea:db:08:1c:08:10:
                    11:b5:4e:b5:64:00:93:2d:51:39:68:98:ad:2f:27:
                    11:c2:b8:32:33:35:a1:52:29:c7:ce:2a:50:f9:b2:
                    c7:1f:6e:c4:e5:b0:3a:c2:c6:ca:0b:b8:82:e5:5b:
                    8c:f6:d1:81:3c:d2:b8:e9:b6:13:7c:44:3a:3a:cb:
                    8e:50:82:a0:6e:c8:36:16:ef:53:5c:c5:3b:b7:6c:
                    13:0f:d6:00:fd:50:6f:56:db:e1:84:37:1b:90:4b:
                    34:07:e4:cb:b9:17:38:2e:46:11:03:64:72:40:bf:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2C:36:9A:5E:A1:36:A4:DA:84:1D:59:20:FE:AF:BB:F8:2A:1A:85
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3133322e3235352e31362e302f32322d3232203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:b3:59:da:19:ab:3d:e1:5e:b2:e4:ba:0e:a3:57:53:2b:d7:
         d0:a7:e8:10:87:94:7d:c2:5d:56:95:49:ca:11:e0:92:a6:c7:
         c4:88:0b:2a:ae:f7:d4:6a:f7:5d:e6:23:82:a3:04:1d:ac:4b:
         43:f4:bb:af:6b:f3:b5:70:6e:aa:86:f2:53:93:f5:59:75:af:
         ce:0c:e0:5f:9e:73:b9:1a:09:fe:ad:f2:53:d4:6b:3d:5e:0a:
         36:2c:67:6b:6a:60:1f:8a:70:e4:53:53:a5:cc:32:f8:29:8e:
         d5:f8:75:25:f1:02:a9:1d:b7:e4:0f:c5:2f:52:c1:6d:9b:ea:
         37:2d:7e:ba:ed:ed:e4:a6:16:da:48:22:d5:76:87:72:fe:3a:
         6f:51:9b:f3:7d:04:ad:9e:f0:aa:6b:65:a0:e3:24:de:17:09:
         d9:1e:10:d8:09:96:d3:d0:e9:23:b0:ec:c5:41:8a:9c:cd:64:
         2f:53:f8:93:5e:54:ee:a2:d8:7c:ab:87:4e:1d:d6:fe:94:f8:
         4d:8a:16:83:f8:a8:ed:a7:86:f3:c0:e2:70:dc:9e:15:fa:f8:
         24:e4:41:f3:fb:ad:69:71:b0:65:ac:e5:0b:97:c3:e7:b5:da:
         59:7f:e8:00:23:3a:e0:e2:67:a0:95:24:d5:45:10:da:7b:a9:
         6d:bd:df:21
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJgukJtx+mCtATnTpHGBwo1NlCkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM5NkE1QkQ0NUIwRkI4RUI0REM2MDM1MjRGOUFGRTg0
MUQzMEQ1QTAeFw0yNjA1MjIxMjAzNDVaFw0yNzA1MjExMjA4NDVaMDMxMTAvBgNV
BAMTKEM0MkMzNjlBNUVBMTM2QTREQTg0MUQ1OTIwRkVBRkJCRjgyQTFBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkBP61yMYNu4v29lL6uwj0Wtu
79seLsrJEvc+7gRKin2qGNh0FIyPMAkC36f6vvHjgZ2nAuHnSN1YgM204sY8OmwG
vrHqBPHvU1+X0pYI+mYLl0eNzlmwkrKUV/9TGDAO4KrqEvq2Yzvm5dCmXUJSA7Wj
PwLWM/CeXF1PHeC5BWrRc0t3HzmRNHUGYXOFM+rbCBwIEBG1TrVkAJMtUTlomK0v
JxHCuDIzNaFSKcfOKlD5sscfbsTlsDrCxsoLuILlW4z20YE80rjpthN8RDo6y45Q
gqBuyDYW71NcxTu3bBMP1gD9UG9W2+GENxuQSzQH5Mu5FzguRhEDZHJAv+I5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxCw2ml6hNqTahB1ZIP6vu/gqGoUwHwYDVR0j
BBgwFoAUnJalvUWw+4603GA1JPmv6EHTDVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1IzejJwcmM0cnJ1cGVCYmVvekJhVUZVNDlCWUdaNkFuTUVHYWFKM2FM
UjEvMC85Qzk2QTVCRDQ1QjBGQjhFQjREQzYwMzUyNEY5QUZFODQxRDMwRDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDOTZBNUJENDVCMEZCOEVC
NERDNjAzNTI0RjlBRkU4NDFEMzBENUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dSM3oycHJjNHJydXBlQmJlb3pCYVVGVTQ5QllHWjZBbk1FR2FhSjNhTFIxLzAv
MzEzMzMyMmUzMjM1MzUyZTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTM5
MzgzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKE/xAwDQYJKoZIhvcNAQELBQADggEBAIqzWdoZ
qz3hXrLkug6jV1Mr19Cn6BCHlH3CXVaVScoR4JKmx8SICyqu99Rq913mI4KjBB2s
S0P0u69r87VwbqqG8lOT9Vl1r84M4F+ec7kaCf6t8lPUaz1eCjYsZ2tqYB+KcORT
U6XMMvgpjtX4dSXxAqkdt+QPxS9SwW2b6jctfrrt7eSmFtpIItV2h3L+Om9Rm/N9
BK2e8KprZaDjJN4XCdkeENgJltPQ6SOw7MVBipzNZC9T+JNeVO6i2Hyrh04d1v6U
+E2KFoP4qO2nhvPA4nDcnhX6+CTkQfP7rWlxsGWs5QuXw+e12ll/6AAjOuDiZ6CV
JNVFENp7qW293yE=
-----END CERTIFICATE-----
Generated at Fri Jun 5 23:18:21 2026 by rpki-client