Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32342d3234203d3e203631363834.roa
File:                     3133312e3130382e3139302e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          IdEJ4vn8xL8YV0mSWmwK8LcS+AZM2hysGOUrqiLeBys=
Subject key identifier:   75:4D:FA:FD:BD:E7:AF:63:B1:0A:BC:25:AC:F4:D7:C8:9C:53:CC:9D
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       25D4C1AC3F812352EB4BD7F9007AF33F581415C0
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 25 Feb 2026 14:54:06 +0000
ROA not before:           Wed 25 Feb 2026 14:49:06 +0000
ROA not after:            Wed 24 Feb 2027 14:54:06 +0000
asID:                     61684
IP address blocks:        131.108.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 00:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d4:c1:ac:3f:81:23:52:eb:4b:d7:f9:00:7a:f3:3f:58:14:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Feb 25 14:49:06 2026 GMT
            Not After : Feb 24 14:54:06 2027 GMT
        Subject: CN=754DFAFDBDE7AF63B10ABC25ACF4D7C89C53CC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:ed:b3:69:f0:41:14:3f:0e:0b:70:33:9e:
                    59:b6:69:43:c7:bf:db:57:c6:97:a5:d2:fc:d3:bc:
                    5e:91:e4:6a:6b:d8:07:1f:11:f5:9f:ea:5c:1f:be:
                    dd:59:e3:87:e1:0b:9c:03:99:fa:01:65:98:be:12:
                    12:8a:f5:b5:0a:fa:94:93:7f:21:f0:64:99:b6:62:
                    9c:96:1d:1b:af:3f:94:10:a9:4b:ff:12:21:a0:49:
                    90:24:a4:51:58:f6:bc:e5:a7:d3:92:94:ea:9e:d1:
                    cf:77:2d:52:97:2f:c6:15:5f:6b:f2:f5:ae:f4:4d:
                    1a:cd:cc:aa:bf:85:38:6d:c8:86:6c:b8:37:82:ce:
                    bc:e3:19:ff:e8:36:9c:8e:8d:8b:74:37:dd:73:ff:
                    c4:a9:f3:f3:bc:7a:87:bc:00:a9:7a:63:ad:98:43:
                    57:8b:f9:21:47:e5:3a:fb:4c:5f:3a:56:12:c7:4c:
                    ff:65:0e:ce:65:b8:c2:74:c4:2b:2e:06:ff:8d:78:
                    dc:f1:c6:98:0f:bd:33:9a:ef:ee:32:f1:d5:6a:70:
                    a8:7c:17:fc:bf:74:6f:d8:ac:ff:74:4c:c3:f1:39:
                    a5:b1:1f:c0:cd:95:ef:c0:40:22:5f:52:2e:6e:1c:
                    47:f4:39:2f:09:25:bb:56:37:40:f8:f5:e2:89:04:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:FA:FD:BD:E7:AF:63:B1:0A:BC:25:AC:F4:D7:C8:9C:53:CC:9D
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:0c:91:01:f6:be:7b:ee:1a:44:f3:81:a3:67:24:3c:b2:
         4c:45:53:70:0e:59:f7:c4:5b:16:3a:19:88:10:68:a7:54:82:
         f4:32:f7:63:cc:fb:f9:1a:2f:23:68:31:5f:35:97:5b:cb:9c:
         88:be:10:53:91:68:29:dd:22:71:ba:aa:38:b4:6e:76:c0:38:
         b8:4e:9b:a0:5a:31:23:0d:6e:36:84:79:8b:de:26:f2:f4:b5:
         6d:37:07:c4:5c:f8:c4:d0:4f:d1:c7:e3:c0:41:ee:c9:a4:cb:
         8d:56:08:77:ca:d5:4b:41:03:f9:b7:cd:42:3e:74:39:c8:04:
         ce:2f:e7:9a:98:4d:80:6c:92:31:5f:1f:37:6b:44:19:68:41:
         1f:6b:97:9d:ef:52:41:59:88:6b:87:f8:65:5d:44:6d:c1:76:
         4d:76:4d:b5:d0:34:92:cc:fe:2b:80:7a:58:b5:a5:b7:5a:ac:
         f5:c4:05:05:ae:64:fd:dd:59:32:0c:87:5f:49:3e:d2:e0:66:
         f5:69:c0:49:37:22:bc:2d:40:bf:37:53:87:58:bb:10:85:6f:
         de:12:76:9c:18:c6:80:09:e9:3b:35:5b:c0:23:c3:13:fc:8d:
         ba:a0:36:c5:c1:2e:8b:87:43:c5:43:60:1a:28:ef:02:b7:63:
         7c:b0:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:45:11 2026 by rpki-client