Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3332203d3e203631383734.roa
File:                     3133312e302e35362e302f32322d3332203d3e203631383734.roa (raw, json)
Hash identifier:          penxWEEsTsnUhEP16z5RIHTxUzlbRJL25aDRPg3NEx8=
Subject key identifier:   10:A7:A4:8E:67:AF:7D:23:9B:BA:00:96:E4:9E:41:5B:5D:29:6E:67
Certificate issuer:       /CN=5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92
Certificate serial:       53961BD21E5E85B3C89501E8723B068E1EDBED2D
Authority key identifier: 5B:97:EF:7D:C5:90:1D:C0:DA:1E:C6:96:4B:07:E5:C2:A4:5A:EE:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3332203d3e203631383734.roa
Signing time:             Thu 11 Jun 2026 14:49:43 +0000
ROA not before:           Thu 11 Jun 2026 14:44:43 +0000
ROA not after:            Thu 10 Jun 2027 14:49:43 +0000
asID:                     61874
IP address blocks:        131.0.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.crl
                          rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:96:1b:d2:1e:5e:85:b3:c8:95:01:e8:72:3b:06:8e:1e:db:ed:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92
        Validity
            Not Before: Jun 11 14:44:43 2026 GMT
            Not After : Jun 10 14:49:43 2027 GMT
        Subject: CN=10A7A48E67AF7D239BBA0096E49E415B5D296E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:ca:b4:49:91:0b:ef:bc:96:ac:73:27:e6:
                    b0:b2:92:3a:90:b5:81:1b:47:40:67:1f:ff:73:a0:
                    ea:80:ed:4a:9a:11:0a:d4:81:46:9e:d2:78:64:7c:
                    39:35:e6:b3:9e:72:41:ef:dd:f6:e2:3f:7e:3f:d8:
                    ab:52:f7:01:46:ab:88:9b:b6:33:25:8b:55:6e:96:
                    90:36:30:a4:23:bf:4f:cc:31:b8:29:1f:cd:15:a2:
                    68:cb:a0:8c:0b:49:05:46:3c:72:80:bd:e0:41:3f:
                    7e:50:05:d5:cb:39:20:54:28:e3:6b:5d:51:99:86:
                    12:de:52:d6:7d:f5:99:da:eb:2f:7d:02:d3:51:36:
                    3d:70:3d:65:50:c2:15:b7:43:a6:79:1c:d9:52:1f:
                    34:d7:4f:8d:7f:2d:0a:1d:c5:fc:cf:85:25:f0:b7:
                    2d:ef:f8:db:aa:8a:b1:23:79:9c:32:61:4b:64:1d:
                    42:78:65:02:86:58:47:e4:c5:d9:3a:32:08:0f:4a:
                    9b:8c:cd:f2:f3:a4:9f:56:40:8f:5c:e2:1d:ad:39:
                    b5:f3:5a:fe:1c:9e:c7:64:38:20:91:46:c2:ef:79:
                    a1:8f:fc:5e:b6:dc:88:b0:8f:3c:46:ec:44:a9:c8:
                    23:f6:52:52:0e:e6:19:66:70:fe:03:a5:e4:1a:d3:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:A4:8E:67:AF:7D:23:9B:BA:00:96:E4:9E:41:5B:5D:29:6E:67
            X509v3 Authority Key Identifier:
                keyid:5B:97:EF:7D:C5:90:1D:C0:DA:1E:C6:96:4B:07:E5:C2:A4:5A:EE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97EF7DC5901DC0DA1EC6964B07E5C2A45AEE92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/0/3133312e302e35362e302f32322d3332203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:b5:db:79:d8:4f:09:b8:f6:00:5b:b3:e5:98:80:24:91:
         fc:2e:be:d0:de:72:5b:c8:34:47:c6:38:fc:96:9c:55:da:e9:
         c7:8a:27:77:6e:06:88:1e:f4:4d:38:fd:1c:18:06:57:b7:32:
         4b:1b:3f:72:27:02:fe:c0:ef:4e:c0:09:fb:04:ec:b8:72:97:
         d4:e4:ca:00:54:93:1b:4d:23:2d:89:72:0a:99:32:03:c5:cb:
         64:a5:ad:5e:71:9e:d5:00:91:e5:e0:ba:d4:12:11:69:a7:b9:
         bc:76:43:b2:ed:7e:5c:63:68:8d:4c:96:d2:34:64:c3:e7:cc:
         ca:d7:b5:74:fe:1e:ff:ee:0b:7e:9b:fb:a8:b1:01:14:76:6c:
         9a:d7:83:ad:59:f5:b8:db:81:7e:5a:1b:56:7d:a6:25:d7:6c:
         4a:5e:69:ad:36:40:93:6d:17:51:a7:6c:e8:f1:9e:bb:eb:15:
         b0:5c:e3:a8:d5:e2:83:75:c2:8a:fc:00:1b:2e:00:c5:72:c4:
         6a:39:9f:3b:50:93:dc:01:f9:4b:8a:80:db:e1:85:68:42:10:
         9a:8f:bd:8e:0c:8b:59:95:0c:2b:08:22:13:38:a1:9d:a3:47:
         59:4b:e3:94:cf:ad:e3:54:3b:41:43:14:13:c0:d2:cf:c3:ee:
         cd:8e:86:77
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUU5Yb0h5ehbPIlQHocjsGjh7b7S0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI5N0VGN0RDNTkwMURDMERBMUVDNjk2NEIwN0U1QzJB
NDVBRUU5MjAeFw0yNjA2MTExNDQ0NDNaFw0yNzA2MTAxNDQ5NDNaMDMxMTAvBgNV
BAMTKDEwQTdBNDhFNjdBRjdEMjM5QkJBMDA5NkU0OUU0MTVCNUQyOTZFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBacq0SZEL77yWrHMn5rCykjqQ
tYEbR0BnH/9zoOqA7UqaEQrUgUae0nhkfDk15rOeckHv3fbiP34/2KtS9wFGq4ib
tjMli1VulpA2MKQjv0/MMbgpH80VomjLoIwLSQVGPHKAveBBP35QBdXLOSBUKONr
XVGZhhLeUtZ99Zna6y99AtNRNj1wPWVQwhW3Q6Z5HNlSHzTXT41/LQodxfzPhSXw
ty3v+NuqirEjeZwyYUtkHUJ4ZQKGWEfkxdk6MggPSpuMzfLzpJ9WQI9c4h2tObXz
Wv4cnsdkOCCRRsLveaGP/F623IiwjzxG7ESpyCP2UlIO5hlmcP4DpeQa0wJVAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEKekjmevfSObugCW5J5BW10pbmcwHwYDVR0j
BBgwFoAUW5fvfcWQHcDaHsaWSwflwqRa7pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFoNVFoU1BMZlp3R2RCdFNmNU1IS0EyZ3hLY1FDUUNOaXY4b2kyYjJH
a0svMC81Qjk3RUY3REM1OTAxREMwREExRUM2OTY0QjA3RTVDMkE0NUFFRTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCOTdFRjdEQzU5MDFEQzBE
QTFFQzY5NjRCMDdFNUMyQTQ1QUVFOTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxaDVRaFNQTGZad0dkQnRTZjVNSEtBMmd4S2NRQ1FDTml2OG9pMmIyR2tLLzAv
MzEzMzMxMmUzMDJlMzUzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2MzEzODM3
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKDADgwDQYJKoZIhvcNAQELBQADggEBAI3Ktdt52E8JuPYA
W7PlmIAkkfwuvtDeclvINEfGOPyWnFXa6ceKJ3duBoge9E04/RwYBle3MksbP3In
Av7A707ACfsE7Lhyl9TkygBUkxtNIy2JcgqZMgPFy2SlrV5xntUAkeXgutQSEWmn
ubx2Q7LtflxjaI1MltI0ZMPnzMrXtXT+Hv/uC36b+6ixARR2bJrXg61Z9bjbgX5a
G1Z9piXXbEpeaa02QJNtF1GnbOjxnrvrFbBc46jV4oN1wor8ABsuAMVyxGo5nztQ
k9wB+UuKgNvhhWhCEJqPvY4Mi1mVDCsIIhM4oZ2jR1lL45TPreNUO0FDFBPA0s/D
7s2Ohnc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:20:51 2026 by rpki-client