Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
File:                     3133312e3130382e382e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          Nj1xTfzSNHQmUg2skji3dVxhXZsvkz4AY6tEi6hSADs=
Subject key identifier:   51:84:C8:C8:A5:60:60:D4:87:B3:23:F1:CE:C8:64:C5:75:DD:80:0E
Certificate issuer:       /CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
Certificate serial:       30EE3E647BE349A7483E2A9FD7E0018C428D689A
Authority key identifier: 69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa
Signing time:             Wed 25 Feb 2026 12:25:18 +0000
ROA not before:           Wed 25 Feb 2026 12:20:18 +0000
ROA not after:            Wed 24 Feb 2027 12:25:18 +0000
asID:                     263424
IP address blocks:        131.108.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 04:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ee:3e:64:7b:e3:49:a7:48:3e:2a:9f:d7:e0:01:8c:42:8d:68:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695A28FC133EB5408B9BA126D9FFE20884EDECD2
        Validity
            Not Before: Feb 25 12:20:18 2026 GMT
            Not After : Feb 24 12:25:18 2027 GMT
        Subject: CN=5184C8C8A56060D487B323F1CEC864C575DD800E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:e2:07:f1:ab:58:93:ca:3a:ec:0f:dc:f8:
                    74:7d:0a:c4:43:65:10:56:f6:52:6e:b4:c9:56:37:
                    95:ac:86:76:56:00:59:a5:a6:8b:9e:e0:cf:e2:e4:
                    7a:43:5d:34:1e:39:cf:b0:c0:9b:f0:7e:47:ce:32:
                    78:54:cb:7a:0c:ef:a0:09:33:72:c9:e9:76:4c:88:
                    26:c1:fd:d6:17:1f:3e:64:71:b7:45:74:5c:c8:cd:
                    67:67:17:cd:7c:56:f2:85:ad:50:f2:92:03:80:4a:
                    e9:5f:c5:5e:07:9e:62:ad:47:22:19:c2:6d:08:08:
                    5a:8a:7f:c6:6e:19:cb:dd:a9:e6:6b:20:10:f2:3a:
                    7b:fd:4c:ec:17:b4:56:7c:1a:62:ad:98:0f:83:37:
                    25:de:c0:7c:65:23:f5:3e:70:e2:a4:f3:de:ff:ce:
                    da:08:6f:32:01:43:53:45:ec:6b:95:a6:a6:7d:5a:
                    4e:39:71:93:c2:3b:20:22:87:73:a0:2f:46:90:22:
                    70:15:1f:ff:5a:77:e2:5c:bc:f7:f9:f3:1f:63:56:
                    56:2e:fa:f8:a8:fa:ed:ca:bb:58:84:48:4e:d5:d2:
                    be:c5:f9:ea:a8:8c:06:c9:f8:38:fb:3e:5c:17:c3:
                    e4:46:57:20:2b:4b:f0:3f:88:44:6a:41:92:a4:dc:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:C8:C8:A5:60:60:D4:87:B3:23:F1:CE:C8:64:C5:75:DD:80:0E
            X509v3 Authority Key Identifier:
                keyid:69:5A:28:FC:13:3E:B5:40:8B:9B:A1:26:D9:FF:E2:08:84:ED:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/695A28FC133EB5408B9BA126D9FFE20884EDECD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695A28FC133EB5408B9BA126D9FFE20884EDECD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/2/3133312e3130382e382e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:b9:c6:21:6a:cc:b5:0b:72:2b:6f:f0:c3:2f:b1:2c:f4:
         e3:05:d0:84:53:ab:ad:83:c9:bf:63:c3:e0:30:11:d8:c1:07:
         6a:b6:06:73:2d:9f:aa:1f:57:bc:7b:4f:c1:f6:97:ba:f1:62:
         13:59:12:e7:34:42:57:21:3a:b0:fa:24:f0:dc:fd:e6:60:82:
         6a:71:19:e5:53:7c:f4:2d:f6:5c:cd:4b:23:a8:20:8d:cb:56:
         69:54:b4:d7:83:bb:45:5c:da:aa:00:8e:5b:c2:13:8d:29:92:
         a9:6c:39:38:23:a6:dd:6a:2e:8f:26:24:3d:ed:ad:86:4b:46:
         b3:fb:ac:85:c5:c0:3f:12:94:58:ea:bf:92:86:d0:1b:85:c4:
         43:87:1e:3a:c1:8c:8f:07:56:08:93:db:8c:7a:87:1d:29:df:
         f1:8d:6b:4a:11:00:ee:34:4d:d6:02:01:b6:85:91:24:e0:e0:
         8a:62:49:aa:3e:21:ed:5f:10:49:89:77:a3:e2:24:52:cc:dd:
         f4:98:a1:dd:f2:b9:d9:86:c5:59:c5:4e:05:ba:f4:8c:b6:b6:
         ea:fa:7d:4c:77:df:1c:dd:9b:dd:17:35:3c:69:2e:24:7b:98:
         e5:d5:97:0b:b1:25:c6:73:c7:28:a1:dc:f7:5d:98:ff:56:77:
         43:c4:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:41:16 2026 by rpki-client