Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234382e302f32322d3234203d3e20323638393535.roa
File:                     3133312e3130382e3234382e302f32322d3234203d3e20323638393535.roa (raw, json)
Hash identifier:          vEyxf+xCPsmdmldD8k0GkrX0+9M4f6s+bldgr3YSzII=
Subject key identifier:   E7:32:30:23:8B:C2:55:4F:15:6E:34:C1:5E:17:BD:7A:C1:44:C3:55
Certificate issuer:       /CN=C19C559525E01BE6FFDA662BBAE24FF6592AC02C
Certificate serial:       523999449BBF9AD6EBBC53A1CD521F2A3F35CDAF
Authority key identifier: C1:9C:55:95:25:E0:1B:E6:FF:DA:66:2B:BA:E2:4F:F6:59:2A:C0:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234382e302f32322d3234203d3e20323638393535.roa
Signing time:             Tue 15 Sep 2026 12:05:03 +0000
ROA not before:           Tue 15 Sep 2026 12:00:03 +0000
ROA not after:            Tue 14 Sep 2027 12:05:03 +0000
asID:                     268955
IP address blocks:        131.108.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 15:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:99:44:9b:bf:9a:d6:eb:bc:53:a1:cd:52:1f:2a:3f:35:cd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C559525E01BE6FFDA662BBAE24FF6592AC02C
        Validity
            Not Before: Sep 15 12:00:03 2026 GMT
            Not After : Sep 14 12:05:03 2027 GMT
        Subject: CN=E73230238BC2554F156E34C15E17BD7AC144C355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:40:97:f0:9a:45:ed:bd:c0:97:41:13:e0:
                    d3:e0:25:23:69:42:1c:c8:26:18:d5:af:76:7b:9c:
                    6b:e6:d8:12:12:aa:d4:97:4d:7b:7c:96:00:18:58:
                    15:95:f0:b3:ba:bd:7d:a2:f1:b2:3d:df:92:68:1b:
                    36:64:26:99:e7:a3:37:5c:4d:77:2d:e0:36:6b:64:
                    a5:45:18:0a:a5:f9:c3:e6:dc:d5:52:f5:e0:e7:b1:
                    35:fa:0f:26:c2:bd:5d:7f:70:07:6c:76:40:3e:4c:
                    fe:d3:7a:2e:b0:07:9a:b2:ef:fc:63:1f:50:9d:02:
                    31:f1:54:9f:07:18:bc:97:08:2e:93:bd:5c:67:e3:
                    37:73:f5:a6:23:f7:7e:79:cb:bc:0d:42:1d:4c:a1:
                    a1:65:ec:0d:21:d8:c8:9b:b2:dd:99:7e:bb:75:3f:
                    14:5d:1c:0e:eb:61:ce:21:20:ff:38:6d:96:bc:8e:
                    01:c3:6f:c5:eb:d0:29:b5:02:b7:8e:43:a0:8c:bc:
                    95:91:8b:b4:e9:1d:c9:b4:70:7f:84:b4:10:4d:3c:
                    99:c4:85:9a:aa:12:2e:d7:58:ae:32:00:cd:d6:17:
                    a4:ee:de:5e:33:61:31:ae:ba:c9:42:20:08:07:c7:
                    39:38:17:5e:26:e1:ed:35:e3:4f:34:4d:ec:80:b9:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:30:23:8B:C2:55:4F:15:6E:34:C1:5E:17:BD:7A:C1:44:C3:55
            X509v3 Authority Key Identifier:
                keyid:C1:9C:55:95:25:E0:1B:E6:FF:DA:66:2B:BA:E2:4F:F6:59:2A:C0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C559525E01BE6FFDA662BBAE24FF6592AC02C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3133312e3130382e3234382e302f32322d3234203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:e0:7a:0a:ef:31:87:b8:3f:40:c1:0e:45:81:3a:fa:d6:
         02:79:ff:08:05:a9:12:11:6a:56:92:cd:f0:1f:4d:52:d1:35:
         50:fa:e8:2a:5d:1c:fe:55:a9:5c:ea:04:fa:b1:bd:65:ab:fd:
         52:08:a4:8e:e4:04:62:16:79:f1:37:e5:b9:fa:2b:2d:a1:65:
         3c:7a:7f:17:bb:c0:94:c3:98:c6:91:6b:cf:45:3c:e7:92:60:
         4e:7e:19:ad:bd:8e:d7:52:65:45:5a:59:e8:c7:df:9b:b0:92:
         fc:75:98:47:30:4f:a9:17:ad:63:e0:e3:dd:64:88:65:98:38:
         c2:d7:b7:7d:87:78:60:62:90:55:b4:2e:5d:5d:84:0c:77:f3:
         b9:f9:a6:d6:3c:37:6e:96:1a:bc:ae:1f:f1:85:db:e1:d8:ce:
         df:87:37:67:2c:ac:73:3f:2c:b0:b4:9e:e0:a4:6e:22:3c:59:
         ba:54:65:40:4f:9a:fa:bd:a2:9a:cf:64:94:46:9a:13:dd:56:
         c0:f3:04:ea:0d:90:54:e2:c9:b1:56:86:21:d8:66:68:43:8e:
         c1:6c:ef:7d:7c:5e:f4:51:c0:16:a5:14:3b:9f:a7:dc:b4:c1:
         a3:62:96:0d:66:10:a6:80:aa:41:6a:c0:e5:c8:9d:d1:5e:3f:
         68:ca:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:33:03 2026 by rpki-client