Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
File:                     3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          Lj4wSZE300sAGfjM4tYFwoGwS7nyt+6tlOFsrpa6v/s=
Subject key identifier:   F4:5C:4E:3D:AE:D5:C5:4B:DF:F1:6C:CC:58:A4:83:11:80:76:94:9F
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       1D2C959D146E4A488020A9A49CE02FA2FD2AB053
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 25 Feb 2026 14:54:10 +0000
ROA not before:           Wed 25 Feb 2026 14:49:10 +0000
ROA not after:            Wed 24 Feb 2027 14:54:10 +0000
asID:                     61684
IP address blocks:        131.108.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 00:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2c:95:9d:14:6e:4a:48:80:20:a9:a4:9c:e0:2f:a2:fd:2a:b0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Feb 25 14:49:10 2026 GMT
            Not After : Feb 24 14:54:10 2027 GMT
        Subject: CN=F45C4E3DAED5C54BDFF16CCC58A483118076949F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:57:22:dc:be:a0:d2:2a:3b:33:86:97:e4:
                    a9:ec:d9:c6:62:31:33:82:42:7d:04:9d:41:1b:aa:
                    8f:26:ed:69:39:5a:80:e9:b0:22:a1:78:3d:4c:d8:
                    1f:e0:58:eb:e4:78:d3:1c:97:a8:70:38:c5:38:bd:
                    73:23:86:ce:1e:fb:5a:91:6c:45:1c:a2:b4:e6:9f:
                    a3:30:65:27:6f:3d:12:24:e1:c8:4a:28:0e:a0:e1:
                    24:f1:db:4f:c9:b9:ea:93:2c:bd:9c:e4:ba:0b:c3:
                    b7:c7:9e:a5:fb:63:fa:4f:44:58:53:48:09:de:d8:
                    bb:bb:98:8e:81:52:9f:ad:f6:22:59:cf:c5:69:4a:
                    4b:0d:ff:0c:86:72:fb:4f:08:8f:a9:6f:e7:b0:62:
                    1c:82:e4:bb:8b:8a:8d:62:9f:56:c7:10:75:a8:6d:
                    1f:90:5a:ed:a8:df:23:64:37:a6:84:3a:14:10:73:
                    13:f8:41:8c:c8:d5:f4:63:52:3d:9e:b2:fa:08:e4:
                    76:8b:be:9c:fd:d5:74:5a:f4:a8:87:20:b4:16:7d:
                    87:02:32:ac:32:cd:b5:8a:75:41:c1:af:75:eb:3d:
                    d8:41:d1:7a:b8:ae:76:43:70:c7:07:67:af:66:dc:
                    8f:fa:01:e9:64:40:98:25:29:5b:78:58:9d:f9:b9:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5C:4E:3D:AE:D5:C5:4B:DF:F1:6C:CC:58:A4:83:11:80:76:94:9F
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:81:17:4f:8b:c1:2a:1d:2c:ec:39:86:7b:b0:46:87:5a:
         a4:05:23:38:a9:a0:49:e9:42:7c:ab:1c:86:33:85:a6:18:db:
         5d:97:ed:b5:01:01:af:4a:ce:a1:0b:ed:e9:04:52:2b:ba:61:
         09:b5:65:44:3b:e6:4b:95:11:25:db:5f:fc:7c:32:a6:45:1b:
         da:66:26:80:59:ba:94:87:d0:f8:93:3d:fc:67:7c:d9:85:d1:
         94:99:8b:f8:51:c4:b8:65:70:0c:67:eb:af:7e:25:e5:57:a7:
         b7:70:4d:e6:1b:72:2a:06:e2:ea:c8:31:a1:9f:ee:ce:94:9c:
         d7:e6:cd:77:4d:47:8e:89:01:5e:23:4b:8d:cf:d6:69:42:ca:
         28:62:63:3d:a0:5d:22:e6:3a:f0:6b:f9:0f:6f:3f:a0:ec:db:
         cf:c3:94:ae:a5:2a:ac:65:b3:98:4b:0a:ec:69:de:f4:32:87:
         03:36:7c:67:1d:33:25:bf:99:a5:d7:de:1b:e9:f8:01:7a:e8:
         b0:53:5d:19:6d:c0:63:2d:94:f5:fe:65:f4:e3:4b:81:d5:af:
         37:ee:3d:e8:ea:fc:ac:37:0b:ea:11:e6:f3:b8:1c:bb:c2:bc:
         3e:f3:4a:33:3b:1c:c4:a2:99:f5:45:7b:b3:72:a9:8c:44:63:
         f8:ed:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:19:08 2026 by rpki-client