Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa
File:                     3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa (raw, json)
Hash identifier:          roDwy3DsfFB/MoqJW4g/jCbHkirSpN1SRLrJj9T6T14=
Subject key identifier:   28:C4:E7:88:94:CD:1A:4A:63:52:03:36:9F:01:B9:7A:F6:13:3F:69
Certificate issuer:       /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
Certificate serial:       3D14A6A9DB5F6A49471201EE89FADD49516AD4E6
Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa
Signing time:             Tue 02 Jun 2026 15:46:35 +0000
ROA not before:           Tue 02 Jun 2026 15:41:35 +0000
ROA not after:            Tue 01 Jun 2027 15:46:35 +0000
asID:                     272212
IP address blocks:        131.72.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl
                          rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:14:a6:a9:db:5f:6a:49:47:12:01:ee:89:fa:dd:49:51:6a:d4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236
        Validity
            Not Before: Jun  2 15:41:35 2026 GMT
            Not After : Jun  1 15:46:35 2027 GMT
        Subject: CN=28C4E78894CD1A4A635203369F01B97AF6133F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:32:c4:a1:a8:85:c3:19:4d:73:b2:08:fa:
                    12:58:6c:cb:d5:b4:9f:c4:29:39:17:eb:2c:bd:12:
                    23:21:c2:d8:af:80:8f:75:b3:12:2e:65:dc:88:eb:
                    ac:53:85:4d:71:36:5d:8f:84:ac:07:22:b3:d2:9e:
                    dc:38:d0:0f:67:cd:ad:b4:c6:b5:96:44:4d:c5:c2:
                    14:c6:a4:b5:b1:e9:cd:20:56:0c:b5:f4:b5:45:40:
                    f1:fb:99:5f:00:7d:71:1c:40:89:cf:34:0b:f5:71:
                    24:fc:6b:88:da:b5:92:dc:97:45:d1:44:06:a0:46:
                    49:db:d8:de:dc:fa:53:d3:e2:d5:d1:f2:1b:5f:a9:
                    b7:d6:d1:d9:2f:87:ea:b1:4d:1b:4f:6a:32:d2:7d:
                    64:66:42:7a:2e:75:e9:77:28:8d:9a:ae:6d:79:4e:
                    db:ab:f6:79:63:68:5e:57:0b:9d:41:c6:24:b3:a5:
                    a1:bc:de:b3:ff:6e:9b:e4:32:6a:f6:dd:92:8c:cd:
                    d3:1d:24:3a:29:65:ba:e8:15:58:95:87:1a:a6:9d:
                    4e:5c:6d:28:d4:3d:73:f0:4f:7a:2e:9e:56:38:c6:
                    59:54:fb:cc:0a:cf:99:9e:b7:00:76:4e:b7:a1:95:
                    32:73:27:10:e7:34:8b:ba:41:5a:1c:b3:71:79:a1:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C4:E7:88:94:CD:1A:4A:63:52:03:36:9F:01:B9:7A:F6:13:3F:69
            X509v3 Authority Key Identifier:
                keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:13:86:59:2e:bc:19:1c:ec:6b:e9:93:3b:a3:05:c2:d8:15:
         1c:5c:4d:42:23:76:40:c0:ce:31:d0:af:9a:42:5f:37:18:ac:
         66:ed:3e:92:11:5a:13:c7:c6:3e:bc:14:2b:0a:b6:7d:41:0a:
         2e:88:82:bc:3e:9c:2a:89:4a:2e:10:8d:e5:7c:9b:4b:1e:21:
         09:1b:2a:30:96:8f:2c:2b:50:d5:ce:04:95:06:c4:85:1a:d7:
         08:30:04:13:c8:1e:55:28:ec:9e:ba:66:c2:a5:94:b6:b4:2e:
         bf:39:7f:2c:9e:c7:e6:c4:2e:6e:f1:95:6a:64:f3:b7:ae:da:
         27:7b:bd:1e:31:85:a0:e8:e4:69:8c:35:8f:7d:29:82:1b:10:
         79:1e:53:e5:31:66:e1:0d:be:39:fb:c8:f8:8a:88:42:99:51:
         31:70:c9:7f:ee:ce:f7:8a:47:f4:1b:e4:a8:70:50:0c:12:14:
         5c:20:62:c6:93:f4:4b:5a:53:f8:66:95:67:84:b0:de:c2:56:
         d1:15:52:9d:6a:b1:61:e9:4b:5b:8e:02:3f:fc:b0:f4:6e:49:
         1f:9d:7b:81:3a:cf:d7:fd:1f:c7:8e:8c:6b:33:bc:4d:a3:c0:
         b7:b4:1c:24:53:e3:71:91:be:41:ed:6f:38:cb:aa:0a:f9:75:
         27:eb:80:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPRSmqdtfaklHEgHuifrdSVFq1OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE
MDAyRjIzNjAeFw0yNjA2MDIxNTQxMzVaFw0yNzA2MDExNTQ2MzVaMDMxMTAvBgNV
BAMTKDI4QzRFNzg4OTRDRDFBNEE2MzUyMDMzNjlGMDFCOTdBRjYxMzNGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYTLEoaiFwxlNc7II+hJYbMvV
tJ/EKTkX6yy9EiMhwtivgI91sxIuZdyI66xThU1xNl2PhKwHIrPSntw40A9nza20
xrWWRE3FwhTGpLWx6c0gVgy19LVFQPH7mV8AfXEcQInPNAv1cST8a4jatZLcl0XR
RAagRknb2N7c+lPT4tXR8htfqbfW0dkvh+qxTRtPajLSfWRmQnoudel3KI2arm15
Ttur9nljaF5XC51BxiSzpaG83rP/bpvkMmr23ZKMzdMdJDopZbroFViVhxqmnU5c
bSjUPXPwT3ounlY4xllU+8wKz5metwB2TrehlTJzJxDnNIu6QVocs3F5oUqZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKMTniJTNGkpjUgM2nwG5evYTP2kwHwYDVR0j
BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a
UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD
MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyV3p4WXNjamhUalJMOUdhVVgzRm1Ueml6dnpuQmVTUkxHN2k2MkZuWlBMLzAv
MzEzMzMxMmUzNzMyMmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzIzMjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDSJMwDQYJKoZIhvcNAQELBQADggEBAGUThlku
vBkc7GvpkzujBcLYFRxcTUIjdkDAzjHQr5pCXzcYrGbtPpIRWhPHxj68FCsKtn1B
Ci6Igrw+nCqJSi4QjeV8m0seIQkbKjCWjywrUNXOBJUGxIUa1wgwBBPIHlUo7J66
ZsKllLa0Lr85fyyex+bELm7xlWpk87eu2id7vR4xhaDo5GmMNY99KYIbEHkeU+Ux
ZuENvjn7yPiKiEKZUTFwyX/uzveKR/Qb5KhwUAwSFFwgYsaT9EtaU/hmlWeEsN7C
VtEVUp1qsWHpS1uOAj/8sPRuSR+de4E6z9f9H8eOjGszvE2jwLe0HCRT43GRvkHt
bzjLqgr5dSfrgPI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:00:13 2026 by rpki-client