Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134362e302f32332d3234203d3e203238363730.roa
File:                     3133312e37322e3134362e302f32332d3234203d3e203238363730.roa (raw, json)
Hash identifier:          xvA3h4/bt04iShzMysesXbuZC8tmf0spep41A8865Q8=
Subject key identifier:   FF:61:AF:74:C2:9F:6F:8A:AA:39:FD:FB:55:CA:CF:EC:43:AD:D9:19
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       71B01EEE75B91B43953933ADB70B47F48A04FA6A
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134362e302f32332d3234203d3e203238363730.roa
Signing time:             Thu 28 May 2026 20:48:16 +0000
ROA not before:           Thu 28 May 2026 20:43:16 +0000
ROA not after:            Thu 27 May 2027 20:48:16 +0000
asID:                     28670
IP address blocks:        131.72.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:1e:ee:75:b9:1b:43:95:39:33:ad:b7:0b:47:f4:8a:04:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: May 28 20:43:16 2026 GMT
            Not After : May 27 20:48:16 2027 GMT
        Subject: CN=FF61AF74C29F6F8AAA39FDFB55CACFEC43ADD919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:56:da:a9:9d:e2:01:bd:83:bd:13:55:23:
                    fc:20:03:47:9b:f6:77:ea:32:80:ac:eb:d3:09:46:
                    d0:d1:b0:85:40:7d:d6:14:12:b4:81:16:39:46:16:
                    1e:5c:8c:eb:da:3a:85:09:3d:a4:78:89:6a:0c:fb:
                    ff:15:6c:c0:72:e0:87:a1:de:47:41:65:cc:dc:1e:
                    14:fa:1c:37:d9:3d:71:06:5e:81:33:4f:db:58:71:
                    55:e3:12:2c:c5:2f:91:57:e9:3b:82:e8:73:91:30:
                    66:98:58:c2:2f:9a:f8:f2:55:50:b6:ee:c7:70:3e:
                    1b:24:5e:4a:49:c4:66:f6:53:a6:79:2a:15:85:e4:
                    ea:18:8a:e6:71:c6:c6:86:f1:48:09:1f:0c:5d:40:
                    08:49:81:c2:a1:a0:dc:5b:59:e4:d1:ae:29:fe:eb:
                    b6:dd:0b:85:4e:c8:9e:a5:4d:d9:e9:c9:ef:11:58:
                    d9:95:4b:3e:f6:50:ce:45:af:19:85:1c:13:c1:7b:
                    85:94:bc:3b:b0:7b:c4:86:21:a0:f3:23:a3:e0:97:
                    6a:eb:53:91:83:48:19:f9:04:34:66:f3:0f:74:3e:
                    47:83:5a:54:9e:4d:bf:b8:ab:e7:bf:1f:49:f2:97:
                    c8:2b:49:a1:52:e6:f1:f7:77:0e:e7:07:ce:3a:4f:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:AF:74:C2:9F:6F:8A:AA:39:FD:FB:55:CA:CF:EC:43:AD:D9:19
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134362e302f32332d3234203d3e203238363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:c2:b4:cc:29:3e:f5:e7:3f:f8:ee:46:e1:42:e1:73:d0:
         57:fe:80:4d:64:19:1b:12:21:5c:be:fe:79:58:b4:16:cf:01:
         e2:43:23:5b:a0:56:87:f4:bc:a0:eb:9c:79:9f:7e:fb:9a:04:
         4e:eb:ac:11:c2:c4:6d:56:b2:a0:93:0d:b3:06:3a:97:1f:54:
         d2:aa:ac:64:c6:7e:14:99:d4:e7:74:5b:39:ae:9c:e5:b6:c0:
         40:11:1a:2f:4b:60:84:a8:36:6a:5f:7e:ce:cf:cc:38:ef:69:
         e4:47:fe:3b:74:9f:84:c1:df:b4:b8:15:6f:5a:1e:3e:1e:a0:
         6f:88:22:fe:c3:4c:cf:98:b8:d9:b0:b7:fc:69:d9:ce:45:86:
         88:68:a8:2d:b9:7d:22:16:80:51:e6:57:6b:e3:7a:a4:1e:c2:
         0c:4c:ea:57:a1:2c:27:ce:ed:75:da:94:73:a5:a6:45:cd:32:
         38:9f:87:a5:6d:9c:97:93:39:aa:8c:86:a6:50:05:f1:b6:df:
         e0:db:a9:4a:20:5e:6e:1b:1c:9d:00:7f:fd:d4:5f:ec:f1:db:
         bd:b0:de:bf:8f:fe:8a:12:bb:19:26:d2:14:96:1a:30:23:64:
         7e:9e:20:c7:31:b6:c9:bd:9e:d7:de:f9:53:b4:65:92:a1:b0:
         c5:48:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:22:30 2026 by rpki-client