Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
File:                     3133312e37322e34342e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier:          JPg3R7ofp7MABsf+nb/karmz8NXIIaUiqadCc47Xggc=
Subject key identifier:   47:4C:E6:A6:17:46:63:5D:F7:0E:0E:84:93:BB:75:60:01:D3:75:82
Certificate issuer:       /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial:       056ABA4626D1EA898619B06C6E3056244892993F
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa
Signing time:             Mon 31 Aug 2026 13:30:49 +0000
ROA not before:           Mon 31 Aug 2026 13:25:49 +0000
ROA not after:            Mon 30 Aug 2027 13:30:49 +0000
asID:                     61712
IP address blocks:        131.72.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
                          rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 15:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6a:ba:46:26:d1:ea:89:86:19:b0:6c:6e:30:56:24:48:92:99:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
        Validity
            Not Before: Aug 31 13:25:49 2026 GMT
            Not After : Aug 30 13:30:49 2027 GMT
        Subject: CN=474CE6A61746635DF70E0E8493BB756001D37582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:21:83:d4:30:53:ac:a7:96:31:5e:40:28:
                    c0:11:31:c6:c0:11:42:59:cd:9a:68:58:32:d8:1e:
                    48:55:8d:6f:f8:37:d3:00:d1:f4:b0:61:11:29:d0:
                    45:59:4d:1b:c0:73:33:a9:63:6d:cc:3d:4a:c6:c7:
                    bd:37:16:c3:4f:76:f1:b7:cf:a5:1a:58:e2:50:13:
                    a4:01:77:0c:42:d9:af:5b:e8:5f:f6:de:ca:6b:19:
                    2d:78:e0:f6:bd:8d:9c:94:2c:28:3f:c5:c2:29:c6:
                    63:32:db:45:36:75:86:06:fc:27:56:70:02:7d:22:
                    c0:dc:97:9b:74:ca:03:e9:74:fb:1a:1c:17:aa:87:
                    47:a4:a4:9c:64:e4:8e:f9:86:d6:0c:08:5f:f9:4d:
                    ed:38:d5:2e:ae:d7:35:1f:7e:84:b4:1b:23:21:cf:
                    b5:35:b2:fb:f0:80:c1:70:43:a3:40:c6:bf:0e:e1:
                    70:85:79:dc:97:73:59:89:69:ce:98:57:5f:30:82:
                    cc:7b:76:eb:f1:76:17:1b:81:84:f4:93:b8:ab:73:
                    92:37:df:00:43:3a:a9:c5:15:74:c0:8d:01:55:2c:
                    cf:03:76:74:73:8d:5e:06:cd:5d:36:89:e4:89:35:
                    41:3e:8a:f5:10:4c:e9:3a:5b:93:ed:4d:fc:5b:68:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:E6:A6:17:46:63:5D:F7:0E:0E:84:93:BB:75:60:01:D3:75:82
            X509v3 Authority Key Identifier:
                keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/3133312e37322e34342e302f32322d3332203d3e203631373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:39:b1:4d:75:b8:89:32:7c:55:01:56:d8:35:fb:2f:20:a2:
         98:1e:df:3d:43:1a:02:af:63:39:63:06:d1:80:b7:23:4c:8f:
         49:7d:fe:8f:0e:20:9d:18:85:d7:86:80:5e:ba:07:35:12:f9:
         d8:39:5b:9d:fc:9a:e1:20:97:d8:f0:a4:e5:6a:20:19:8c:4d:
         61:c7:63:94:d2:87:14:f9:54:c2:d6:fa:a2:bb:56:27:27:15:
         e7:e4:48:fb:43:7f:aa:73:55:b1:f5:96:70:62:dc:3b:f6:d7:
         60:79:12:00:47:95:21:02:e4:0c:a9:ac:f7:0d:21:c9:f7:c4:
         9a:2f:ee:88:3a:e4:92:90:1c:4e:c6:53:b8:3e:db:d2:c6:b6:
         cf:09:51:a6:73:e8:83:07:ce:f7:e1:b8:9f:81:58:44:9e:52:
         cd:3b:82:3b:e5:94:19:43:bd:0c:fd:9c:e1:b3:67:1c:ee:cc:
         17:94:26:dd:44:b3:47:73:98:aa:1b:17:93:67:de:55:b4:5c:
         f6:23:36:84:dd:2f:50:ec:37:b8:23:12:49:20:c6:0d:06:71:
         58:4f:aa:30:a3:71:26:c6:82:44:4f:f9:89:4e:d5:8f:0d:a1:
         72:f4:b3:0f:b8:05:cd:da:1c:92:52:55:99:95:9c:b5:d0:18:
         18:2b:d9:b6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBWq6RibR6omGGbBsbjBWJEiSmT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy
NkMxOERDNDAeFw0yNjA4MzExMzI1NDlaFw0yNzA4MzAxMzMwNDlaMDMxMTAvBgNV
BAMTKDQ3NENFNkE2MTc0NjYzNURGNzBFMEU4NDkzQkI3NTYwMDFEMzc1ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejyGD1DBTrKeWMV5AKMARMcbA
EUJZzZpoWDLYHkhVjW/4N9MA0fSwYREp0EVZTRvAczOpY23MPUrGx703FsNPdvG3
z6UaWOJQE6QBdwxC2a9b6F/23sprGS144Pa9jZyULCg/xcIpxmMy20U2dYYG/CdW
cAJ9IsDcl5t0ygPpdPsaHBeqh0ekpJxk5I75htYMCF/5Te041S6u1zUffoS0GyMh
z7U1svvwgMFwQ6NAxr8O4XCFedyXc1mJac6YV18wgsx7duvxdhcbgYT0k7irc5I3
3wBDOqnFFXTAjQFVLM8DdnRzjV4GzV02ieSJNUE+ivUQTOk6W5PtTfxbaNIpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUR0zmphdGY133Dg6Ek7t1YAHTdYIwHwYDVR0j
BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw
MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzEzMzMxMmUzNzMyMmUzNDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoNILDANBgkqhkiG9w0BAQsFAAOCAQEAkDmxTXW4iTJ8
VQFW2DX7LyCimB7fPUMaAq9jOWMG0YC3I0yPSX3+jw4gnRiF14aAXroHNRL52Dlb
nfya4SCX2PCk5WogGYxNYcdjlNKHFPlUwtb6ortWJycV5+RI+0N/qnNVsfWWcGLc
O/bXYHkSAEeVIQLkDKms9w0hyffEmi/uiDrkkpAcTsZTuD7b0sa2zwlRpnPogwfO
9+G4n4FYRJ5SzTuCO+WUGUO9DP2c4bNnHO7MF5Qm3USzR3OYqhsXk2feVbRc9iM2
hN0vUOw3uCMSSSDGDQZxWE+qMKNxJsaCRE/5iU7Vjw2hcvSzD7gFzdocklJVmZWc
tdAYGCvZtg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:01:16 2026 by rpki-client