Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32322d3332203d3e20323634343232.roa
File:                     3133312e3232312e3137322e302f32322d3332203d3e20323634343232.roa (raw, json)
Hash identifier:          tRvlMpq54WWq/c0+9P4l5DzhQcbvESY7W/mObJTVIgg=
Subject key identifier:   B2:81:12:0B:68:BF:9C:46:90:DC:91:15:E0:A5:26:AC:A9:C5:BF:8B
Certificate issuer:       /CN=2E048958E225522495C4274F116BBF079B300B09
Certificate serial:       0CA2D5E444E9DB70DDE391F50F073DD9915BBBA4
Authority key identifier: 2E:04:89:58:E2:25:52:24:95:C4:27:4F:11:6B:BF:07:9B:30:0B:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E048958E225522495C4274F116BBF079B300B09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32322d3332203d3e20323634343232.roa
Signing time:             Thu 04 Jun 2026 14:58:49 +0000
ROA not before:           Thu 04 Jun 2026 14:53:49 +0000
ROA not after:            Thu 03 Jun 2027 14:58:49 +0000
asID:                     264422
IP address blocks:        131.221.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/2E048958E225522495C4274F116BBF079B300B09.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/2E048958E225522495C4274F116BBF079B300B09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E048958E225522495C4274F116BBF079B300B09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a2:d5:e4:44:e9:db:70:dd:e3:91:f5:0f:07:3d:d9:91:5b:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E048958E225522495C4274F116BBF079B300B09
        Validity
            Not Before: Jun  4 14:53:49 2026 GMT
            Not After : Jun  3 14:58:49 2027 GMT
        Subject: CN=B281120B68BF9C4690DC9115E0A526ACA9C5BF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:b4:1b:43:6a:37:77:46:cd:3b:3f:05:4f:
                    c7:07:7e:ce:27:c0:0f:e3:25:f4:8a:b7:37:f2:ac:
                    77:f4:3c:4a:41:6b:9d:ed:1c:df:cb:b3:2f:c1:ee:
                    b1:55:61:33:92:e5:48:40:7e:e8:03:22:56:28:ee:
                    91:b3:14:61:1f:91:cc:00:c4:89:55:49:7e:93:52:
                    63:22:8a:c7:73:11:6f:7e:77:84:70:32:b4:97:eb:
                    25:4f:5f:11:a4:70:c3:37:98:e9:af:87:46:e0:9a:
                    5b:22:13:9a:09:cd:14:24:fb:31:17:34:52:9a:c3:
                    10:69:79:8b:53:83:2f:db:bc:64:81:f7:e9:d3:42:
                    bd:af:4e:8c:d8:b9:7a:03:ad:45:77:73:ac:fd:25:
                    27:bd:ab:b5:95:8a:bc:da:02:b5:e4:10:1e:44:60:
                    6b:d3:4e:96:e6:6d:3a:df:53:43:37:40:be:8f:a2:
                    2f:a6:d2:2b:55:2c:03:0d:15:3d:77:f7:81:8b:2f:
                    ab:c1:12:f6:d7:c3:8c:68:c8:f5:12:44:26:c1:ed:
                    0d:a2:08:8e:e4:46:1b:43:bf:f7:f5:d5:9a:75:2e:
                    49:60:17:70:62:42:bd:d0:83:c2:96:eb:ca:7c:59:
                    b6:06:9a:1d:d8:1e:53:62:c4:18:4b:15:a9:5f:2c:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:12:0B:68:BF:9C:46:90:DC:91:15:E0:A5:26:AC:A9:C5:BF:8B
            X509v3 Authority Key Identifier:
                keyid:2E:04:89:58:E2:25:52:24:95:C4:27:4F:11:6B:BF:07:9B:30:0B:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/2E048958E225522495C4274F116BBF079B300B09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E048958E225522495C4274F116BBF079B300B09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32322d3332203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:fd:59:11:b2:8e:a0:a5:ae:a3:80:85:e7:bf:40:4e:bb:1b:
         83:78:87:17:60:6e:c3:14:9f:d8:b9:31:18:89:4a:f9:04:3b:
         38:ed:f4:35:fd:99:36:fa:0a:ac:39:f7:6f:a1:cf:db:fa:07:
         11:85:57:26:d8:1b:a8:cb:8b:ae:55:67:1f:f5:b8:72:39:0d:
         5a:08:55:c3:ba:8f:dc:a5:ff:e9:95:8d:44:13:5a:bd:b0:c6:
         e2:bb:4d:aa:3e:bd:d2:80:99:68:31:ac:b3:8a:e5:ce:45:55:
         fd:ec:da:4f:b8:75:76:9d:25:72:6e:8f:e7:2c:02:a5:b0:5d:
         46:69:df:f1:60:20:d9:b8:0c:7a:db:17:0e:55:f4:bf:da:9d:
         02:e4:c5:2e:90:16:db:ac:4f:c0:b6:56:eb:96:e9:2b:89:26:
         d8:b7:37:9f:f8:a8:50:de:15:b8:11:81:40:33:ac:c7:e0:9a:
         9b:1e:30:44:d6:69:02:8a:0a:64:c6:d7:ad:0d:af:38:73:d0:
         05:24:ac:2a:bc:52:d4:80:41:35:5c:86:0d:51:69:22:3f:67:
         d5:3b:ce:52:fa:51:4b:23:74:5c:dc:99:5e:32:44:c0:5a:b6:
         f1:35:2f:8d:be:6e:7d:5a:95:7d:b5:46:e2:b3:6f:a7:05:e2:
         70:7f:7d:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDKLV5ETp23Dd45H1Dwc92ZFbu6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUwNDg5NThFMjI1NTIyNDk1QzQyNzRGMTE2QkJGMDc5
QjMwMEIwOTAeFw0yNjA2MDQxNDUzNDlaFw0yNzA2MDMxNDU4NDlaMDMxMTAvBgNV
BAMTKEIyODExMjBCNjhCRjlDNDY5MERDOTExNUUwQTUyNkFDQTlDNUJGOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5bQbQ2o3d0bNOz8FT8cHfs4n
wA/jJfSKtzfyrHf0PEpBa53tHN/Lsy/B7rFVYTOS5UhAfugDIlYo7pGzFGEfkcwA
xIlVSX6TUmMiisdzEW9+d4RwMrSX6yVPXxGkcMM3mOmvh0bgmlsiE5oJzRQk+zEX
NFKawxBpeYtTgy/bvGSB9+nTQr2vTozYuXoDrUV3c6z9JSe9q7WVirzaArXkEB5E
YGvTTpbmbTrfU0M3QL6Poi+m0itVLAMNFT1394GLL6vBEvbXw4xoyPUSRCbB7Q2i
CI7kRhtDv/f11Zp1LklgF3BiQr3Qg8KW68p8WbYGmh3YHlNixBhLFalfLBjDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsoESC2i/nEaQ3JEV4KUmrKnFv4swHwYDVR0j
BBgwFoAULgSJWOIlUiSVxCdPEWu/B5swCwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC8yRTA0ODk1OEUyMjU1MjI0OTVDNDI3NEYxMTZCQkYwNzlCMzAwQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMDQ4OTU4RTIyNTUyMjQ5
NUM0Mjc0RjExNkJCRjA3OUIzMDBCMDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPdrDANBgkqhkiG9w0BAQsFAAOCAQEAq/1Z
EbKOoKWuo4CF579ATrsbg3iHF2BuwxSf2LkxGIlK+QQ7OO30Nf2ZNvoKrDn3b6HP
2/oHEYVXJtgbqMuLrlVnH/W4cjkNWghVw7qP3KX/6ZWNRBNavbDG4rtNqj690oCZ
aDGss4rlzkVV/ezaT7h1dp0lcm6P5ywCpbBdRmnf8WAg2bgMetsXDlX0v9qdAuTF
LpAW26xPwLZW65bpK4km2Lc3n/ioUN4VuBGBQDOsx+Camx4wRNZpAooKZMbXrQ2v
OHPQBSSsKrxS1IBBNVyGDVFpIj9n1TvOUvpRSyN0XNyZXjJEwFq28TUvjb5ufVqV
fbVG4rNvpwXicH99bQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:53:42 2026 by rpki-client