Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3133312e302e33362e302f32322d3234203d3e20323636353339.roa
File:                     3133312e302e33362e302f32322d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          syAFMkV2QkxnklGqMlyV2Al+izbMDCvgKDG7b1Wa0VE=
Subject key identifier:   30:69:F5:23:88:2F:AD:03:72:F0:9D:25:C9:6C:2A:B2:49:5E:29:BB
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       1904918C62A3890C8A6659EDAC95A62DB08C35BA
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3133312e302e33362e302f32322d3234203d3e20323636353339.roa
Signing time:             Tue 27 Oct 2026 12:54:32 +0000
ROA not before:           Tue 27 Oct 2026 12:49:32 +0000
ROA not after:            Tue 26 Oct 2027 12:54:32 +0000
asID:                     266539
IP address blocks:        131.0.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 07:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:91:8c:62:a3:89:0c:8a:66:59:ed:ac:95:a6:2d:b0:8c:35:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Oct 27 12:49:32 2026 GMT
            Not After : Oct 26 12:54:32 2027 GMT
        Subject: CN=3069F523882FAD0372F09D25C96C2AB2495E29BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:6f:39:73:cd:4d:27:32:1d:48:1e:a5:30:
                    71:be:78:30:93:86:47:db:b5:9c:73:94:38:42:5e:
                    f0:f0:8d:c9:eb:4e:0c:8c:51:2d:6b:c2:f5:21:bb:
                    1b:b0:61:38:c1:31:e9:9b:c7:c6:b8:ed:58:72:f3:
                    b0:b7:21:c6:f6:1a:9c:f0:d9:c9:33:06:96:ab:fa:
                    35:a5:15:24:54:93:82:4a:95:8b:70:f9:a2:91:57:
                    f2:07:7a:f7:da:8a:38:b2:98:b7:72:84:c3:11:68:
                    ce:f4:6c:58:99:ee:81:45:eb:5c:ff:c8:11:e2:6c:
                    21:67:85:0f:ca:b6:32:c9:ef:98:f7:ad:41:12:c9:
                    94:c3:09:33:fe:c4:d0:52:58:4d:65:19:f0:38:56:
                    6a:7c:82:cd:06:b6:3d:b5:ee:2f:0a:48:08:b0:cd:
                    e3:7d:cb:70:d7:66:3e:fb:d9:42:5a:84:95:06:58:
                    3c:a5:a2:67:e7:23:15:79:7c:45:f5:90:e0:cd:e2:
                    6b:c1:c4:f1:d0:ba:e8:0a:73:18:aa:f4:c6:b8:5a:
                    05:11:12:22:7b:d2:ca:1b:02:30:45:52:ac:90:0e:
                    1e:e7:86:1d:f4:d9:a4:7c:a3:b6:33:df:26:d9:ab:
                    4d:3b:89:15:37:b7:2d:ee:8a:fb:78:1e:00:8f:c9:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:F5:23:88:2F:AD:03:72:F0:9D:25:C9:6C:2A:B2:49:5E:29:BB
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3133312e302e33362e302f32322d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:d4:6e:57:3b:ea:75:02:77:81:fd:dd:8a:87:c1:eb:9e:
         a7:df:18:9c:a3:40:ce:e8:f4:c0:6a:2d:fb:3b:3b:f9:f5:92:
         cb:5c:d9:20:e5:9f:49:18:2c:3d:cd:e0:02:20:91:b2:41:85:
         80:2a:69:1e:da:65:7d:70:42:1f:42:66:52:89:11:92:65:f3:
         73:2f:fc:10:d6:de:b1:73:ed:a1:c7:3f:24:9c:15:21:38:13:
         f9:45:d1:1d:ec:2e:43:0e:ad:b0:f0:e5:9f:78:3c:7a:a1:8f:
         fd:5a:9a:29:7e:c8:e1:c3:0b:d8:87:42:cf:1f:83:0c:35:b2:
         d0:8b:46:1a:f1:44:93:63:f1:24:6d:dd:e1:de:04:bb:e5:2f:
         59:85:4f:4a:fc:b6:49:02:dd:12:cd:1c:ed:79:05:80:d3:46:
         cd:58:df:bf:7f:91:64:e8:d7:ca:3b:61:de:35:5b:ba:1e:41:
         97:fa:56:83:a9:76:d2:be:70:7b:68:70:9e:83:22:8e:1e:d7:
         3e:21:4f:f9:87:f4:42:ea:c5:c1:ad:94:5c:1e:b8:5d:b8:af:
         3d:19:d6:3e:0f:b6:83:0a:ad:01:f6:c5:19:8d:fc:c9:34:f6:
         5f:d3:32:95:16:be:47:69:91:ff:9e:a2:60:85:04:42:c3:14:
         aa:93:ae:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:01:43 2026 by rpki-client