Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa
File:                     3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          n5ln/CZPXd7Bkf3s6DOGW6WFvJzizZL5y7UvtGizehs=
Subject key identifier:   A7:B0:E5:40:1B:8E:B3:5F:7A:67:AB:3A:42:1D:2A:90:28:BA:64:B5
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       13FCD8B3199DF6974253BF4681546593C76ACAD2
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa
Signing time:             Thu 15 Oct 2026 16:58:18 +0000
ROA not before:           Thu 15 Oct 2026 16:53:18 +0000
ROA not after:            Thu 14 Oct 2027 16:58:18 +0000
asID:                     262777
IP address blocks:        131.255.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:fc:d8:b3:19:9d:f6:97:42:53:bf:46:81:54:65:93:c7:6a:ca:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Oct 15 16:53:18 2026 GMT
            Not After : Oct 14 16:58:18 2027 GMT
        Subject: CN=A7B0E5401B8EB35F7A67AB3A421D2A9028BA64B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:00:4e:87:0c:c7:6b:9f:12:48:d1:b6:25:b6:
                    2e:42:d8:e6:e1:62:90:76:43:f7:72:25:84:29:b6:
                    b1:4f:e5:78:6d:fd:57:86:0a:f0:1a:54:b2:10:02:
                    58:66:c3:09:1d:33:79:0b:ac:b1:f7:a6:77:a8:8e:
                    32:ba:85:a1:54:65:8b:6c:e1:08:d8:a1:68:f2:2c:
                    da:0c:68:98:ac:5d:3f:57:27:e1:ae:40:81:ed:e7:
                    db:c9:09:6f:65:d4:30:10:f3:94:fd:bd:8a:e0:44:
                    4f:a1:67:39:8e:ec:68:5a:a4:4a:38:af:c2:6d:c2:
                    48:fc:92:3e:df:9f:79:fe:26:5b:77:84:b3:81:b2:
                    1b:85:2e:16:9e:ed:0a:85:06:ae:2c:99:a5:3f:af:
                    c4:55:21:8c:7f:d0:d0:50:07:f5:62:34:92:6b:fb:
                    7c:21:ff:fb:12:a8:f3:eb:ff:de:27:c8:b2:32:c8:
                    c4:e8:2b:1f:81:8c:83:b5:ce:0f:2b:db:77:0f:27:
                    f1:2b:b0:39:a4:17:33:ec:67:54:a0:99:92:22:83:
                    4d:ce:f0:65:3e:1b:0f:66:c9:a2:08:89:6c:6d:1e:
                    b0:bb:ef:95:a0:4c:a3:ed:76:95:75:7d:40:f6:cb:
                    c3:af:c0:20:a6:39:fa:6d:80:c7:99:0f:19:64:6b:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B0:E5:40:1B:8E:B3:5F:7A:67:AB:3A:42:1D:2A:90:28:BA:64:B5
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3133312e3235352e34382e302f32322d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:b1:ea:dd:d7:1b:c4:e8:06:9b:63:fd:56:9f:c9:44:f3:
         ff:44:82:4d:07:59:bf:96:0f:ae:81:8d:51:b0:d0:7d:73:d9:
         20:47:34:bb:71:58:eb:fb:6d:bc:40:4d:06:75:c9:71:5d:0d:
         ee:f0:55:86:90:b0:9b:ce:15:bd:f5:56:70:8a:85:09:f0:a2:
         fd:25:5b:85:90:e3:a0:a0:46:d7:50:99:b3:24:63:23:28:a4:
         1a:66:cb:91:75:a8:f6:d7:ab:53:22:b1:86:e3:03:31:14:6b:
         c5:6f:31:9d:8e:20:c1:80:36:35:8f:b4:97:cf:5c:b6:6b:43:
         68:8b:7e:55:5c:e4:04:75:d3:35:14:70:d2:b5:27:9f:f6:ad:
         d0:d7:ca:24:9a:9b:c5:00:d9:18:3d:a1:7c:90:2b:ac:5e:41:
         4f:f4:da:87:12:76:b4:77:1c:b0:7f:fd:79:c1:97:a8:b2:5c:
         11:fa:45:31:35:df:e2:73:31:6c:54:10:c3:ec:48:07:82:30:
         e6:d0:60:74:46:f3:b3:cc:46:10:c3:4b:7d:6e:15:57:db:9c:
         87:a1:dd:0e:a3:b5:b5:42:38:18:34:04:b4:0e:cb:c7:01:d4:
         d1:67:ad:ef:52:6b:8e:33:e9:d6:5a:1c:42:88:11:04:e4:15:
         39:59:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:55:54 2026 by rpki-client