Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa
File:                     3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa (raw, json)
Hash identifier:          UL+1AtfhvXhfmRrJsVDqu91w9ihaICX/zHgkAv6eVcc=
Subject key identifier:   55:33:AB:23:5C:45:9B:F1:06:95:F6:8B:2B:4A:AE:B0:8C:F0:C8:19
Certificate issuer:       /CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
Certificate serial:       398616C66A3C4A4A3FE43591CD13C651B45C7E07
Authority key identifier: 26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa
Signing time:             Fri 04 Sep 2026 00:00:43 +0000
ROA not before:           Thu 03 Sep 2026 23:55:43 +0000
ROA not after:            Fri 03 Sep 2027 00:00:43 +0000
asID:                     265144
IP address blocks:        131.161.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl
                          rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 07:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:16:c6:6a:3c:4a:4a:3f:e4:35:91:cd:13:c6:51:b4:5c:7e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB
        Validity
            Not Before: Sep  3 23:55:43 2026 GMT
            Not After : Sep  3 00:00:43 2027 GMT
        Subject: CN=5533AB235C459BF10695F68B2B4AAEB08CF0C819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:de:68:05:24:34:49:29:79:17:55:5b:4f:
                    8e:00:45:84:6d:dd:be:c5:65:03:70:d7:13:17:dd:
                    b5:b9:d0:00:30:9b:6d:4a:cb:71:ae:8a:cd:b6:84:
                    d4:62:bd:81:ff:9c:89:5f:7f:da:8f:a2:c9:8b:15:
                    95:f7:56:03:46:78:8b:d4:0f:36:dc:6a:6c:4d:2d:
                    31:b7:65:5b:a2:e3:ee:ff:cc:1f:99:95:74:53:49:
                    8a:f4:07:ad:75:78:b7:12:c5:9f:84:d1:14:ff:3d:
                    b8:5b:6b:1d:f5:f3:fb:40:5b:d6:e4:92:04:b8:56:
                    5d:ba:3a:08:14:1c:e6:3b:01:79:34:b1:17:7a:61:
                    d0:15:39:c8:2c:60:5d:20:e7:40:14:cf:f7:55:aa:
                    9e:4c:f8:16:0d:a2:b2:1a:b9:cb:1b:ec:cf:59:a2:
                    d9:32:a5:57:05:a6:c2:9e:2f:97:93:ad:8e:65:c2:
                    4d:c4:8d:b8:cf:99:52:14:53:0d:22:7d:24:9a:18:
                    a4:2d:93:a1:09:59:1b:ae:5d:96:cc:e8:8c:55:30:
                    a3:a1:1a:a0:e7:3c:56:41:d3:f0:3e:0c:9e:d6:ac:
                    44:cc:eb:70:35:9a:66:a4:64:98:48:62:e9:f5:e8:
                    1c:ea:f4:26:ac:9a:a9:ff:1c:87:27:fe:7c:6a:e7:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:AB:23:5C:45:9B:F1:06:95:F6:8B:2B:4A:AE:B0:8C:F0:C8:19
            X509v3 Authority Key Identifier:
                keyid:26:03:A7:E1:5E:8B:AC:50:EB:CE:EA:3B:D4:57:6E:CF:50:06:CE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2603A7E15E8BAC50EBCEEA3BD4576ECF5006CEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HirWxfy9dche4bZCpxKKbeQWEVZQWvHCtrCX1RRuC8eW/0/3133312e3136312e34342e302f32322d3234203d3e20323635313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:c7:77:a5:a3:74:b7:96:23:df:d7:71:fb:26:d1:5e:52:
         0f:0b:46:6e:ab:d2:e6:5d:32:ad:15:19:2e:ea:24:af:32:dd:
         1d:d4:a5:52:a2:7a:cd:1e:38:ff:ee:ce:58:8c:04:eb:bd:50:
         43:fe:a6:49:ab:75:8f:91:3c:41:1f:20:6c:b1:f9:cb:fe:93:
         17:84:7a:d4:fc:09:f9:17:c9:ec:00:70:ad:af:db:8f:59:27:
         64:8f:54:aa:bc:b0:aa:d5:be:c3:bc:ee:60:b5:f9:ff:9f:d2:
         16:c8:24:6d:b5:34:4e:00:4e:48:87:1c:8d:0f:d5:e9:af:93:
         06:75:4f:64:d6:24:ee:78:d6:65:c1:45:cc:9e:5c:48:ad:b6:
         32:4f:bd:6c:6e:bf:14:06:6d:5a:9e:c8:02:38:e8:90:25:fd:
         75:8e:2b:db:db:5e:93:8a:1f:67:0e:97:20:b9:1e:43:6b:f1:
         74:b8:9b:a5:f9:a7:98:70:ed:c3:4e:83:f1:98:9a:4c:7b:1d:
         cf:82:42:b8:c4:ae:11:79:c8:b0:c5:97:98:3c:dd:f4:2c:e6:
         57:9f:82:5b:fa:03:02:2a:54:f2:9f:d1:11:d6:13:2c:e9:06:
         e5:fb:9c:25:09:84:3c:b5:be:1b:74:35:07:8d:15:aa:2d:94:
         c8:a0:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:54:29 2026 by rpki-client