Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3332203d3e203631373531.roa
File:                     3133312e37322e3235322e302f32322d3332203d3e203631373531.roa (raw, json)
Hash identifier:          rNpngRzUgsDyq89oZ2xtRyq6sPfI1C6KquHQrYES4TA=
Subject key identifier:   FC:FA:8F:99:6B:D1:8F:D5:B4:65:48:F8:C4:50:E6:AC:BE:72:05:42
Certificate issuer:       /CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
Certificate serial:       3393A1184203234A8D82EDE1C90C1E83C9A802B9
Authority key identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3332203d3e203631373531.roa
Signing time:             Mon 18 May 2026 18:16:33 +0000
ROA not before:           Mon 18 May 2026 18:11:33 +0000
ROA not after:            Mon 17 May 2027 18:16:33 +0000
asID:                     61751
IP address blocks:        131.72.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl
                          rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:93:a1:18:42:03:23:4a:8d:82:ed:e1:c9:0c:1e:83:c9:a8:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
        Validity
            Not Before: May 18 18:11:33 2026 GMT
            Not After : May 17 18:16:33 2027 GMT
        Subject: CN=FCFA8F996BD18FD5B46548F8C450E6ACBE720542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:5d:16:b5:8e:c3:dd:50:19:6e:a8:23:e3:
                    2f:6d:0d:1a:b7:18:ae:6b:88:15:6c:2f:74:ed:73:
                    61:c3:4d:06:6c:57:23:9d:73:47:75:3e:7d:7c:7b:
                    d8:5c:3c:5a:7e:4a:57:1d:6b:ec:e1:40:96:3f:71:
                    5b:02:b8:d3:bd:68:4c:95:34:cf:81:e8:36:e2:06:
                    53:51:c3:24:15:98:89:1c:af:78:d6:ac:8c:f4:86:
                    fb:83:8d:3f:ec:80:ec:5f:3b:09:4f:38:55:1f:ff:
                    6a:09:be:1e:a8:78:7f:5c:25:f6:7b:f0:57:02:c1:
                    3c:8d:37:00:7e:da:69:92:50:02:64:af:c3:03:9e:
                    bf:12:ea:15:75:dd:f1:9a:43:cc:bc:71:7e:ab:09:
                    f4:52:64:e5:2a:f0:9f:13:1e:41:04:51:74:be:09:
                    bf:03:3c:e3:9e:4b:18:b0:d7:0a:f1:98:8b:87:51:
                    e9:94:11:69:ca:67:21:f5:52:e9:c2:68:83:a9:00:
                    07:c1:f9:5b:e2:0d:f5:5d:fa:68:39:0d:b2:4f:7f:
                    6a:e6:9c:7b:de:f8:f9:5d:53:07:b8:be:65:36:68:
                    07:08:80:96:5b:94:95:31:4b:2d:bd:2a:b2:8e:9b:
                    0c:d0:ee:5e:51:aa:f7:36:53:b6:63:4f:13:32:cf:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:8F:99:6B:D1:8F:D5:B4:65:48:F8:C4:50:E6:AC:BE:72:05:42
            X509v3 Authority Key Identifier:
                keyid:6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3133312e37322e3235322e302f32322d3332203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:09:4d:9b:3a:14:96:fe:39:dd:bf:a2:00:87:c4:6c:54:85:
         69:e2:f5:b8:9b:f2:dd:c9:74:c1:44:22:d7:93:38:4a:01:17:
         4d:37:05:c1:4c:9f:dc:c6:86:07:67:5b:52:5c:7a:e8:3d:9c:
         b3:84:f9:52:9d:ac:eb:f5:50:94:47:14:14:ff:82:43:7b:88:
         a5:3b:c9:12:fb:58:22:7d:09:d3:25:80:e7:b2:1c:f7:35:5d:
         b8:5e:fc:09:16:2b:1f:0a:89:28:28:86:13:2e:8b:cc:d2:73:
         e7:b6:f7:09:26:6b:ea:4d:15:9e:12:7b:be:0a:aa:b7:f8:c4:
         12:15:d9:8c:8c:b3:40:36:eb:d7:eb:b8:0d:26:e0:b8:be:fc:
         f6:27:27:85:6e:ae:34:ca:ed:df:c9:08:c7:a9:0e:f1:22:07:
         f9:17:56:3b:48:df:07:95:41:8a:08:f5:80:6a:08:94:43:1b:
         0d:03:58:94:66:54:4f:0c:71:66:ae:cd:6b:ec:ec:33:09:64:
         02:77:a8:25:8b:45:b5:26:92:76:9f:8b:b3:4a:29:b2:9b:c3:
         b3:5e:74:72:e1:96:dc:e4:4e:91:c6:02:8f:b5:a8:ac:ed:ce:
         a7:2b:d8:9f:79:c8:8d:50:26:e1:87:4d:dd:a6:8c:b3:69:3c:
         06:2c:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:35:40 2026 by rpki-client